
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
File: TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft (raw, json)
Hash identifier: ZQpDHYQEa0kIXHcB3UduD6z6aSt7422R+evKl4JNQO4=
Subject key identifier: 80:30:35:4A:81:30:E9:58:1D:7F:B1:ED:94:30:22:55:3B:82:05:95
Authority key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Certificate issuer: /CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Certificate serial: 01974AE87603E8069979E76B5FEEFF51D8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
Manifest number: 0A11
Signing time: Sat 07 Jun 2025 15:00:37 +0000
Manifest this update: Sat 07 Jun 2025 15:00:37 +0000
Manifest next update: Sun 08 Jun 2025 15:00:37 +0000
Files and hashes: 1: TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl (hash: WbMcij4DPxlR1oXlaXLYTxakNmYwbrxq3ppazBfBL4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:76:03:e8:06:99:79:e7:6b:5f:ee:ff:51:d8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Validity
Not Before: Jun 7 15:00:37 2025 GMT
Not After : Jun 8 15:00:37 2025 GMT
Subject: CN=8030354a8130e9581d7fb1ed943022553b820595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:56:52:1f:57:9c:7e:33:a3:e6:70:78:e1:75:
6f:21:7f:91:e0:3d:a1:4f:de:31:0c:4f:77:38:06:
a0:ab:b8:5a:9c:27:33:93:a1:9d:80:fb:b7:ce:5a:
a5:f6:f4:33:ce:83:df:2f:1a:58:a0:ca:ec:60:36:
5f:df:dd:25:2a:0f:68:40:85:c7:42:04:8a:af:86:
55:b0:d7:1c:02:dd:6e:35:c2:19:36:c8:13:a1:31:
10:03:6c:59:2b:4e:4d:ac:52:36:87:95:91:9e:5c:
b7:ac:33:44:69:7f:9d:05:47:ef:c6:67:02:d2:b7:
bc:70:0a:46:a5:47:1a:30:05:5f:18:20:da:b2:f2:
83:9b:9c:25:ef:b2:33:1d:c1:bc:fa:d2:48:58:b2:
00:87:ec:43:ca:40:b1:29:b6:5c:99:77:f7:22:79:
25:a2:8b:5f:c2:de:04:5f:2f:da:c4:4e:a2:5b:55:
d6:66:f4:f0:13:86:f9:c7:e0:a7:3d:ea:44:b7:c3:
e0:23:25:2e:da:a5:14:11:74:85:4e:63:6c:e4:d1:
da:5a:ae:6f:f5:2b:eb:df:da:42:8d:e9:70:c3:07:
45:f1:a5:d7:fb:28:31:1c:89:6f:ca:8d:1c:ad:89:
97:fb:26:61:b6:c2:f0:96:c3:7a:20:f7:d4:e0:b4:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:30:35:4A:81:30:E9:58:1D:7F:B1:ED:94:30:22:55:3B:82:05:95
X509v3 Authority Key Identifier:
keyid:4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8e:f1:c9:d5:67:d6:71:1d:30:b6:f6:a8:32:06:f5:41:7e:
02:c1:ed:ff:af:6b:b3:38:c6:a7:8e:1a:b3:aa:7b:3f:5f:4d:
8e:12:b2:df:d1:8c:52:cd:89:9e:ff:a6:fc:c3:21:3e:2b:56:
8b:9a:dd:1c:70:48:6e:5e:8e:75:a4:ed:1d:9f:21:cc:1e:58:
80:c7:19:5a:dd:21:21:bb:e7:17:41:b9:99:c6:17:06:93:d2:
04:0a:10:3d:c9:6f:fa:ec:03:53:f5:3e:a5:25:28:9d:02:c5:
56:5e:81:57:e2:7d:09:f5:0b:a3:24:cd:c5:a5:0a:d8:4f:ab:
8a:b2:a3:47:5d:db:63:c7:a4:09:b9:e5:cf:b8:9d:e8:c9:2d:
dc:36:86:63:17:eb:09:f3:6d:6b:69:13:c8:1f:96:94:8b:e1:
9a:33:89:7b:88:fd:cc:df:67:af:6e:b2:2e:09:2e:2b:86:f0:
43:eb:c6:e1:ee:42:e8:a3:9c:aa:7e:01:e2:6c:c9:81:8b:3e:
44:52:43:6d:a3:a8:09:77:66:34:29:3c:08:2c:58:8c:cb:c9:
0d:cb:78:1b:7d:4a:8d:0c:96:56:c3:34:d1:ed:9b:b0:02:50:
e0:17:bd:d6:ea:18:a9:0a:b3:aa:9e:c5:2e:d7:cf:c1:87:73:
c7:1f:09:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:41:07 2025 by rpki-client