Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: XroWPAkZBOjviFEA+6DN7ThPc9F3FoFbsyYLFxmDd7M=
Subject key identifier: 57:5D:99:14:0F:7F:B4:28:61:35:05:6B:35:74:E7:E3:14:B5:05:5B
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 0199225580D041E1B55B44A2E7137841D7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 04:00:52 +0000
Manifest this update: Sun 07 Sep 2025 04:00:52 +0000
Manifest next update: Mon 08 Sep 2025 04:00:52 +0000
Files and hashes: 1: K0hhdmIt7Y7kQYBfthadwHAEzT8.roa (hash: e/JVp+UZ3ruylLloiq9C0e2gilOSNxXij9evAIBs/SY=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: B2op6AgKj3iynUMiuj494q5SCAe/ceCeYJpAQYWW7rk=)
3: xaz-RCI9-nRuCGX3szsn__1z8Vo.roa (hash: 5Ems0TBLY+pDm7C97m9B3xtORqLRHwyf8CR1NhnJpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:80:d0:41:e1:b5:5b:44:a2:e7:13:78:41:d7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Sep 7 04:00:52 2025 GMT
Not After : Sep 8 04:00:52 2025 GMT
Subject: CN=575d99140f7fb4286135056b3574e7e314b5055b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:18:48:dc:e3:79:e7:c5:fc:5b:01:8e:5d:
7e:4b:67:82:67:24:91:7f:4d:d7:ff:84:39:52:2d:
28:15:1c:a1:80:11:70:bb:6d:7d:14:b0:81:21:54:
cf:e0:03:b9:27:c3:ee:f7:9a:d2:e0:5a:70:e6:8b:
14:34:78:fe:bd:93:f4:32:c9:d8:8b:63:44:58:c1:
78:60:90:5d:95:8b:9e:19:a6:4c:94:76:1f:4b:85:
ba:39:93:46:f9:b9:50:ce:54:d0:29:1d:51:1e:3a:
cf:93:45:11:59:ea:88:c5:f1:7b:bc:c5:3a:05:a7:
81:11:36:98:85:7e:a5:f4:5b:b8:06:09:66:ae:0b:
73:b9:ba:fa:bc:12:a9:1d:e2:80:26:b7:5c:c1:1a:
11:00:ca:cc:8d:ea:10:c2:8c:6c:0a:b4:5d:0b:c2:
ea:61:02:30:8b:05:92:aa:a7:6c:f1:24:7d:20:1f:
fd:d7:82:c5:3b:e8:9a:91:69:8d:74:ee:37:10:56:
50:7a:4a:7f:b2:f4:0d:63:44:73:b7:a4:1c:71:24:
50:7e:22:6f:fb:be:37:86:60:39:c7:a6:1c:53:83:
b7:31:87:28:91:ab:c1:d6:57:ee:a2:1a:f2:2a:92:
ab:f0:9b:d2:11:82:56:45:70:ef:d9:9a:63:87:94:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5D:99:14:0F:7F:B4:28:61:35:05:6B:35:74:E7:E3:14:B5:05:5B
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cf:2a:75:1f:39:10:87:9f:b8:57:be:54:7e:bd:72:99:4e:
01:20:c2:fb:fb:60:bb:8e:77:56:30:b0:54:95:83:a8:48:96:
0a:14:bc:9b:93:37:d9:9c:8a:e8:d4:64:5f:57:6b:17:28:8c:
43:56:2a:04:6f:d8:48:d6:9e:38:24:f3:bc:db:61:a5:e0:da:
ce:28:bc:2e:03:6a:4d:1f:85:43:af:8c:39:57:01:c9:cc:64:
6b:c3:0c:48:41:c2:cd:6a:67:5b:a4:db:24:bf:20:89:5a:80:
fc:14:07:e3:11:fc:1a:46:bf:a7:70:3c:19:7c:a4:23:3c:a0:
79:c7:43:d1:a5:6d:f1:0e:9a:39:ed:3a:10:81:61:78:75:56:
90:cd:44:60:3d:36:f4:3a:be:4d:1e:69:47:08:1b:4f:9d:9c:
dc:85:62:09:59:05:0d:ba:fe:d8:40:d8:71:3c:0f:51:a7:bc:
33:7d:ac:3f:97:4a:2c:f5:05:92:e7:58:60:b2:e1:d4:e4:e8:
c6:60:06:f6:fb:cc:90:0e:9c:c0:0a:c5:b4:95:03:9e:16:12:
59:c0:91:c4:6e:a2:b0:3a:5b:e5:34:a1:df:18:b7:d0:6d:52:
ea:6c:69:dc:6a:50:64:d6:e8:e4:c6:4e:8b:61:6a:0e:6e:8e:
ee:33:f9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:36 2025 by rpki-client