Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: DIvbiw5UL/rIYYC+4aiCY8ZIREs0bS+XhLQ4R3Vg0AI=
Subject key identifier: 53:FF:45:99:2D:FB:A6:F3:69:20:61:F6:B0:2B:13:22:E0:27:85:5D
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 019A725C51D2E1ABD0D9E07348979E8D1F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 10:00:44 +0000
Manifest this update: Tue 11 Nov 2025 10:00:44 +0000
Manifest next update: Wed 12 Nov 2025 10:00:44 +0000
Files and hashes: 1: K0hhdmIt7Y7kQYBfthadwHAEzT8.roa (hash: e/JVp+UZ3ruylLloiq9C0e2gilOSNxXij9evAIBs/SY=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: b1oQnuVVkuI5e1NhaQNDGWXWqmjN4key7skquYLowCM=)
3: xaz-RCI9-nRuCGX3szsn__1z8Vo.roa (hash: 5Ems0TBLY+pDm7C97m9B3xtORqLRHwyf8CR1NhnJpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:51:d2:e1:ab:d0:d9:e0:73:48:97:9e:8d:1f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Nov 11 10:00:44 2025 GMT
Not After : Nov 12 10:00:44 2025 GMT
Subject: CN=53ff45992dfba6f3692061f6b02b1322e027855d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:48:1d:61:50:68:d5:58:ef:11:c5:aa:96:
3c:d6:86:c9:50:86:05:93:dc:2e:fb:85:dc:80:dd:
2b:bb:4f:98:d3:54:2a:86:5a:57:94:27:c5:52:af:
dc:d5:82:14:76:88:0f:2b:1b:ee:f3:c7:12:f4:d9:
ac:ec:1f:9b:27:af:e5:ee:0e:4a:bb:56:a5:e2:34:
48:59:69:79:3d:4a:bf:66:5d:a6:a6:d1:c7:26:41:
1a:75:a3:64:9c:6c:85:80:39:e7:85:c1:04:99:fe:
e3:77:0c:c0:4c:51:ea:c8:43:1f:98:c7:b0:d2:4b:
4b:3b:23:8c:73:fa:0b:1b:ee:59:02:45:66:52:92:
d4:5d:ef:8d:be:d8:8a:9c:71:18:1c:24:ad:bc:a8:
a9:ee:44:a1:ad:86:62:5d:69:50:ce:dd:97:de:c4:
80:56:c0:38:56:45:05:d3:b3:d7:aa:0a:1e:73:74:
92:1a:eb:f1:cf:3e:b9:37:d0:b1:33:10:c8:f6:a1:
0e:ee:90:6e:95:8f:93:7a:5b:9d:d3:a9:85:2a:89:
2c:33:69:0a:34:4c:2a:2a:1f:3a:30:14:7b:89:25:
a6:6b:cd:68:23:2f:7c:30:96:ad:8b:72:1d:36:7c:
27:a5:b4:85:b1:a7:d7:ee:6f:a2:f4:eb:36:6a:4b:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:45:99:2D:FB:A6:F3:69:20:61:F6:B0:2B:13:22:E0:27:85:5D
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9b:3b:8d:63:f9:83:f2:8d:2e:41:5b:45:27:d1:b5:ac:dd:
4b:86:16:6e:61:1e:6f:a4:4a:d9:38:11:c4:4f:4d:bf:6d:99:
88:21:2e:f4:78:9a:d2:64:de:74:39:e2:f4:5e:f1:76:18:f3:
28:59:5e:fc:03:8d:e2:31:db:3f:81:c7:66:85:2e:88:06:8d:
bb:9c:e3:37:ea:1c:65:37:b8:b2:2b:06:6d:42:36:41:65:f2:
48:84:46:3e:bc:26:f0:31:e5:95:00:2b:d3:d4:ac:3d:ed:6b:
51:62:57:70:96:e6:27:b7:5b:05:9d:58:23:79:38:77:bd:b9:
ac:46:ea:80:c6:f5:3c:3c:1a:02:d4:a1:65:99:bb:b5:bb:cc:
6b:d5:81:d8:bf:db:bb:a2:7a:aa:cf:6d:5e:a9:f6:f1:b0:81:
77:5c:44:3d:b7:79:ba:34:b2:80:18:64:04:2b:0e:92:8d:d6:
b9:5d:23:3d:c7:fe:2c:42:84:7a:ab:e7:7c:ff:74:05:d3:c2:
9f:d8:cf:b1:9d:13:e5:05:98:9f:61:5f:1a:70:4d:6f:87:82:
e4:2c:b2:ee:d4:f9:78:c1:67:87:4a:5e:fd:dd:c4:5d:08:04:
bd:15:1c:32:ae:53:33:2f:10:cc:85:a3:70:4f:73:c9:e3:bb:
cf:8e:70:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXFHS4avQ2eBzSJeejR94MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMDMwMjA1ZmEzNjVlOWY0OWZmNGVhNzUwNmRmOTEyZDVl
ZDgzNjAwHhcNMjUxMTExMTAwMDQ0WhcNMjUxMTEyMTAwMDQ0WjAzMTEwLwYDVQQD
Eyg1M2ZmNDU5OTJkZmJhNmYzNjkyMDYxZjZiMDJiMTMyMmUwMjc4NTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh5IHWFQaNVY7xHFqpY81obJUIYF
k9wu+4XcgN0ru0+Y01QqhlpXlCfFUq/c1YIUdogPKxvu88cS9Nms7B+bJ6/l7g5K
u1al4jRIWWl5PUq/Zl2mptHHJkEadaNknGyFgDnnhcEEmf7jdwzATFHqyEMfmMew
0ktLOyOMc/oLG+5ZAkVmUpLUXe+NvtiKnHEYHCStvKip7kShrYZiXWlQzt2X3sSA
VsA4VkUF07PXqgoec3SSGuvxzz65N9CxMxDI9qEO7pBulY+Telud06mFKoksM2kK
NEwqKh86MBR7iSWma81oIy98MJati3IdNnwnpbSFsafX7m+i9Os2akuJVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFP/RZkt+6bzaSBh9rArEyLgJ4VdMB8GA1UdIwQY
MBaAFE8DAgX6Nl6fSf9Op1Bt+RLV7YNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYzhkYTUtYThlOS00YTRmLTgxNjgt
M2NlNjExY2I2Nzk5LzEvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8zYzhkYTUtYThlOS00YTRmLTgxNjgtM2NlNjExY2I2Nzk5
LzEvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZs7jWP5
g/KNLkFbRSfRtazdS4YWbmEeb6RK2TgRxE9Nv22ZiCEu9Hia0mTedDni9F7xdhjz
KFle/AON4jHbP4HHZoUuiAaNu5zjN+ocZTe4sisGbUI2QWXySIRGPrwm8DHllQAr
09SsPe1rUWJXcJbmJ7dbBZ1YI3k4d725rEbqgMb1PDwaAtShZZm7tbvMa9WB2L/b
u6J6qs9tXqn28bCBd1xEPbd5ujSygBhkBCsOko3WuV0jPcf+LEKEeqvnfP90BdPC
n9jPsZ0T5QWYn2FfGnBNb4eC5Cyy7tT5eMFnh0pe/d3EXQgEvRUcMq5TMy8QzIWj
cE9zyeO7z45wnA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:38 2025 by rpki-client