Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: nOvwNOY7eBqi38nG045X9+j2TiIfs802S+FVqoixjto=
Subject key identifier: 69:33:53:DB:98:CE:4A:AE:92:07:DB:27:0D:87:09:6E:2A:4D:AA:3E
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 01974D0E347A672984DB6513F358CB43607A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 01:01:05 +0000
Manifest this update: Sun 08 Jun 2025 01:01:05 +0000
Manifest next update: Mon 09 Jun 2025 01:01:05 +0000
Files and hashes: 1: K0hhdmIt7Y7kQYBfthadwHAEzT8.roa (hash: e/JVp+UZ3ruylLloiq9C0e2gilOSNxXij9evAIBs/SY=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: AI6tWBMF7L7/VoGPPPQX0nypWNBFsfCZiIDKE60f0q0=)
3: xaz-RCI9-nRuCGX3szsn__1z8Vo.roa (hash: 5Ems0TBLY+pDm7C97m9B3xtORqLRHwyf8CR1NhnJpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:34:7a:67:29:84:db:65:13:f3:58:cb:43:60:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Jun 8 01:01:05 2025 GMT
Not After : Jun 9 01:01:05 2025 GMT
Subject: CN=693353db98ce4aae9207db270d87096e2a4daa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:f4:d3:06:24:33:76:e1:d0:6c:68:11:1d:
50:f0:ec:e5:ba:42:64:75:e8:b6:98:f4:91:c8:d9:
b2:18:a3:45:45:46:d6:36:ee:06:2e:aa:b9:43:17:
aa:9e:b5:73:9f:c4:9d:9d:7b:c0:f3:9e:90:7d:89:
84:0f:47:03:2a:9f:6c:a9:01:da:fe:6b:de:26:82:
2e:9c:c2:48:17:16:22:05:29:ef:7f:17:1b:8b:ce:
ad:48:4c:51:55:d8:2e:65:5b:13:7d:07:d4:59:fd:
20:03:6b:e6:6e:ed:58:19:39:2d:16:99:77:d8:cf:
86:51:c3:e3:09:59:e5:d0:42:03:92:70:e7:3a:e5:
81:95:0a:cf:f1:b3:75:12:7e:47:00:fb:6a:d5:e4:
07:c6:d8:b7:7e:2b:28:5d:5b:e5:10:61:d6:be:22:
87:65:42:4b:21:98:56:4f:32:9a:83:b4:d1:ae:bb:
aa:0b:29:c5:24:69:db:a1:b7:d0:46:b5:00:dd:ad:
ab:af:82:15:18:2f:0f:9f:3b:63:e4:7a:a6:c7:3f:
dc:c6:92:82:75:cd:a9:02:d9:be:fa:ea:fc:19:00:
28:21:d3:d8:6c:ed:a3:28:49:1f:24:f9:f2:93:15:
6f:12:df:5e:49:df:71:22:e2:ce:a0:b1:da:d3:ad:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:33:53:DB:98:CE:4A:AE:92:07:DB:27:0D:87:09:6E:2A:4D:AA:3E
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:16:04:61:31:a4:df:55:43:ea:f3:a4:bb:79:7c:24:01:9d:
64:be:d1:f9:af:a4:85:ed:ad:b9:b6:bb:5a:bb:b1:f1:dd:e2:
80:ca:35:16:60:6d:65:dd:4b:86:2e:fb:5f:79:6f:0f:b3:b4:
e2:02:17:28:50:e2:2b:45:59:e3:9b:70:16:9d:ae:e2:19:48:
17:06:a4:3d:ca:3d:1d:f5:2b:86:35:ac:db:3d:d6:70:4b:a9:
9f:76:e8:09:7f:f9:a1:6c:08:7f:cd:55:59:fe:96:e9:d8:6e:
e1:a4:aa:75:71:ac:03:86:7f:9c:6c:ca:13:98:40:55:ab:90:
d2:90:60:30:98:b8:a1:c1:91:7b:18:43:41:cd:d5:2e:16:04:
25:29:82:15:d0:6c:b8:36:38:90:e2:1e:90:29:83:83:4e:80:
11:d7:fc:2c:b9:14:b8:0e:d1:f1:28:7f:0c:b9:0a:f4:77:1d:
0b:28:b2:e7:2b:5e:24:01:3e:f0:4b:8e:d1:c4:66:13:b1:99:
16:43:83:be:cc:e0:10:f1:cd:c5:6f:0a:85:00:c8:f8:31:e0:
f8:be:47:e7:16:11:35:0d:23:a3:4a:01:42:e3:69:73:79:49:
ad:30:4a:a5:d9:d9:50:46:5f:d8:72:fe:bf:22:2f:e7:e8:5c:
f2:d8:78:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDjR6ZymE22UT81jLQ2B6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMDMwMjA1ZmEzNjVlOWY0OWZmNGVhNzUwNmRmOTEyZDVl
ZDgzNjAwHhcNMjUwNjA4MDEwMTA1WhcNMjUwNjA5MDEwMTA1WjAzMTEwLwYDVQQD
Eyg2OTMzNTNkYjk4Y2U0YWFlOTIwN2RiMjcwZDg3MDk2ZTJhNGRhYTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZH00wYkM3bh0GxoER1Q8OzlukJk
dei2mPSRyNmyGKNFRUbWNu4GLqq5QxeqnrVzn8SdnXvA856QfYmED0cDKp9sqQHa
/mveJoIunMJIFxYiBSnvfxcbi86tSExRVdguZVsTfQfUWf0gA2vmbu1YGTktFpl3
2M+GUcPjCVnl0EIDknDnOuWBlQrP8bN1En5HAPtq1eQHxti3fisoXVvlEGHWviKH
ZUJLIZhWTzKag7TRrruqCynFJGnbobfQRrUA3a2rr4IVGC8Pnztj5Hqmxz/cxpKC
dc2pAtm++ur8GQAoIdPYbO2jKEkfJPnykxVvEt9eSd9xIuLOoLHa062HiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGkzU9uYzkqukgfbJw2HCW4qTao+MB8GA1UdIwQY
MBaAFE8DAgX6Nl6fSf9Op1Bt+RLV7YNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYzhkYTUtYThlOS00YTRmLTgxNjgt
M2NlNjExY2I2Nzk5LzEvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8zYzhkYTUtYThlOS00YTRmLTgxNjgtM2NlNjExY2I2Nzk5
LzEvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChYEYTGk
31VD6vOku3l8JAGdZL7R+a+khe2tuba7Wrux8d3igMo1FmBtZd1Lhi77X3lvD7O0
4gIXKFDiK0VZ45twFp2u4hlIFwakPco9HfUrhjWs2z3WcEupn3boCX/5oWwIf81V
Wf6W6dhu4aSqdXGsA4Z/nGzKE5hAVauQ0pBgMJi4ocGRexhDQc3VLhYEJSmCFdBs
uDY4kOIekCmDg06AEdf8LLkUuA7R8Sh/DLkK9HcdCyiy5yteJAE+8EuO0cRmE7GZ
FkODvszgEPHNxW8KhQDI+DHg+L5H5xYRNQ0jo0oBQuNpc3lJrTBKpdnZUEZf2HL+
vyIv5+hc8th4vQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:27:56 2025 by rpki-client