Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
File: TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft (raw, json)
Hash identifier: KDnAWyymYmLBfzXFxkPNm8ZGmwooTCwlH1SRmoMu344=
Subject key identifier: 03:D1:A2:99:BF:55:1C:80:A6:89:21:4F:33:C6:C7:D0:39:0A:7B:AC
Authority key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Certificate issuer: /CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Certificate serial: 019A7225986D5CC8E50163DD2EFA565DABC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
Manifest number: 0BB3
Signing time: Tue 11 Nov 2025 09:00:57 +0000
Manifest this update: Tue 11 Nov 2025 09:00:57 +0000
Manifest next update: Wed 12 Nov 2025 09:00:57 +0000
Files and hashes: 1: TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl (hash: 1wETyklPdnuhRp5kVj+tT9Ij+gcb9fwb5V3xhAJ98dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:98:6d:5c:c8:e5:01:63:dd:2e:fa:56:5d:ab:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Validity
Not Before: Nov 11 09:00:57 2025 GMT
Not After : Nov 12 09:00:57 2025 GMT
Subject: CN=03d1a299bf551c80a689214f33c6c7d0390a7bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:52:25:4f:62:98:61:53:92:ed:4e:9e:b7:45:
90:f1:c0:14:8f:5b:26:d7:e8:fe:25:de:36:d5:e1:
af:f9:19:8d:0b:4b:f9:3b:b2:d9:b7:12:a5:3b:bd:
a6:81:8e:e1:3b:d8:40:7d:e1:01:e4:41:57:b8:31:
c9:08:86:53:86:8f:04:14:b5:f0:8f:3e:41:50:dc:
6b:52:79:9e:71:48:9a:95:92:b8:11:70:a2:a3:b4:
ee:5c:5a:78:5c:c8:7d:79:5b:ff:37:b8:ea:87:18:
62:64:d9:22:65:4c:e2:cf:eb:3d:93:6b:3e:95:c0:
22:40:e5:8d:a3:ed:ee:8f:ff:2b:17:ac:5d:d4:a8:
6c:24:ee:f2:a4:87:b0:d2:3f:73:3e:e9:c6:02:a7:
0f:a6:b3:5a:a3:d4:13:60:e0:3c:98:f2:49:33:b4:
7f:80:1d:e2:8a:72:3b:c8:79:bc:2a:c9:78:86:4b:
4e:11:60:b7:83:35:c1:8c:d0:3d:27:0d:b9:57:5d:
1f:ad:c7:40:eb:7a:c0:67:82:1c:82:58:58:ac:2c:
29:c3:f4:19:ed:ad:a2:ea:90:c8:0c:4d:67:c0:fa:
22:53:41:4b:e5:06:0f:1e:e4:9e:74:da:ac:1a:bf:
94:5c:44:c0:5c:bd:aa:3b:da:d5:f2:57:bd:47:44:
8e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D1:A2:99:BF:55:1C:80:A6:89:21:4F:33:C6:C7:D0:39:0A:7B:AC
X509v3 Authority Key Identifier:
keyid:4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:55:81:71:b0:3e:ca:3e:1c:32:a6:1c:6b:65:ea:4d:5c:4b:
5e:30:9d:67:14:63:23:3e:01:b1:13:ec:da:cc:be:eb:14:5b:
e6:f0:9e:92:62:1f:9b:cc:1d:6c:1f:d4:d3:95:76:f2:59:6c:
85:ea:9b:fb:20:e3:a3:08:bc:9c:f2:f5:dc:ea:4f:1d:3c:72:
ca:4b:5e:4c:d9:7b:a9:7b:87:59:c9:b5:8c:6e:6b:e9:c9:f0:
ce:26:83:df:b5:06:0e:dd:e5:0a:86:81:7d:d4:19:43:8e:a6:
2f:11:58:fd:68:34:0a:47:9a:35:69:2a:ef:cc:57:88:62:56:
d1:11:02:d3:ed:6d:21:52:4e:31:d4:6e:0c:8f:f3:2c:18:18:
3c:54:08:0f:6c:f0:e8:9b:c8:85:42:7c:99:00:11:5d:96:f5:
30:62:15:a4:25:77:e7:5a:83:11:d6:bd:57:37:15:2e:f9:52:
da:fb:ce:d3:47:35:03:77:57:4d:45:dc:51:73:7e:f3:0c:93:
f1:0f:39:26:9c:4b:58:9f:d5:10:a3:d5:8f:4f:1a:83:d5:db:
a7:bb:88:69:91:47:56:90:60:43:ad:56:2b:14:09:06:f8:d7:
4b:59:ae:2c:e3:01:4d:23:8f:91:4c:90:0b:ff:24:35:db:35:
07:7b:e0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:53 2025 by rpki-client