Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File: Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier: tYGMfiPQ3BCHnfeZlLFv4hHKyHlcW64alqv3zxU5bgg=
Subject key identifier: 67:68:9B:7F:0C:F7:3D:EF:2A:D6:12:65:59:0C:B4:C0:61:CE:22:22
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial: 01974EFBF0E0F324B65EC1C0E3D6D3177E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number: 1587
Signing time: Sun 08 Jun 2025 10:00:23 +0000
Manifest this update: Sun 08 Jun 2025 10:00:23 +0000
Manifest next update: Mon 09 Jun 2025 10:00:23 +0000
Files and hashes: 1: Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa (hash: Akg6x/rEJSguP5W8rh7uM4jAx65nBcfWuXfFgKDQBlY=)
2: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: 4l53G/G3MINW3h5asbzjdP8POWYDZ9nSmI9kjq0zx/s=)
3: o6HBbNZybM1pciBKfo5UVkJuRLw.roa (hash: rmfHjVx3VwSeRbFJh3vlHLLWzQKd4J8HNXED4xlCmoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fb:f0:e0:f3:24:b6:5e:c1:c0:e3:d6:d3:17:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Validity
Not Before: Jun 8 10:00:23 2025 GMT
Not After : Jun 9 10:00:23 2025 GMT
Subject: CN=67689b7f0cf73def2ad61265590cb4c061ce2222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:95:f3:66:1c:c6:98:2c:d9:0d:7a:fc:dc:
79:51:50:f2:8c:7d:bb:cb:19:2e:5f:3e:75:5a:be:
22:77:81:2f:c9:26:32:bb:5d:95:6f:70:b1:54:fc:
36:1b:d9:78:ad:fd:8d:31:ea:95:fe:33:c4:ec:60:
07:b1:c1:24:0f:dc:88:32:22:b5:b9:c4:16:d7:97:
05:38:c8:9e:73:04:e9:e0:82:55:42:4d:3f:8c:10:
88:f4:29:44:5d:f8:53:23:67:6c:5d:47:c2:84:72:
e4:a9:5c:a2:c5:69:3f:ec:83:d4:ce:43:49:5e:70:
47:35:b7:d4:86:5c:39:ef:fc:76:0c:b1:ab:7e:9e:
ae:2b:d9:cc:f1:31:37:16:de:0e:a0:2b:82:0c:a5:
6e:e0:20:60:05:44:e1:b5:0a:1a:99:36:9f:9d:af:
f5:67:e1:55:80:52:72:98:89:df:bd:fd:c9:79:14:
63:f6:5b:bb:1f:56:70:10:8e:84:fe:5a:3b:bd:1a:
e2:4f:87:a2:2b:ff:cb:14:41:8f:ce:f2:80:20:70:
64:fb:34:48:47:b9:33:c7:0f:a1:ed:db:c9:c8:a3:
e8:0d:8f:53:1a:de:93:92:bb:74:f7:b4:ef:a5:cb:
47:c5:07:c4:55:a2:fd:89:05:47:5c:15:55:77:6b:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:68:9B:7F:0C:F7:3D:EF:2A:D6:12:65:59:0C:B4:C0:61:CE:22:22
X509v3 Authority Key Identifier:
keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c5:f0:53:c1:74:9a:fb:62:dc:97:8a:5c:29:ee:82:f6:dc:
4d:b6:84:7c:15:01:d8:07:14:a3:5d:fc:dc:2c:67:7a:5f:11:
f6:2e:74:b7:59:e1:6e:71:7e:73:ac:2c:3d:fb:c5:f3:fc:bf:
7c:c2:01:7f:5c:47:3c:92:4e:cb:cf:97:80:45:e0:b1:4a:5d:
4f:4f:fa:84:4c:19:2f:83:5f:15:5c:4a:6a:d3:e8:a5:ac:60:
3c:96:7f:19:38:f2:69:fe:fe:84:b3:4d:8c:19:fc:84:73:2b:
b5:06:95:c0:9c:50:34:dc:c1:25:e5:cd:b6:d7:8d:80:3a:86:
f0:9e:c7:7f:53:a3:fb:c8:a8:30:e7:9d:eb:36:f3:e2:fe:41:
67:52:93:40:75:77:4a:52:56:4e:8a:34:1e:02:7d:8f:3a:51:
3b:f3:49:5a:8c:48:a8:6b:3d:f4:c8:9b:65:b0:0e:6d:d1:ff:
c9:d8:d7:a5:d1:c1:2a:20:23:8e:7c:ac:d3:c9:71:17:db:46:
db:bf:2e:54:2c:e6:20:79:fa:78:7d:3c:aa:9e:1c:51:f8:a0:
8f:4e:87:ae:f3:af:81:3b:86:e5:d7:84:8d:51:dc:28:e1:1c:
6f:04:8b:d0:ad:37:2a:a2:a7:e8:ae:ab:26:05:ec:f7:d3:51:
cb:88:d2:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO+/Dg8yS2XsHA49bTF36AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMGU3N2Q5YzZmZjY4ZGNhNjhmMDVkZjhmNDY3NWVlN2Jk
Y2IwYmMwHhcNMjUwNjA4MTAwMDIzWhcNMjUwNjA5MTAwMDIzWjAzMTEwLwYDVQQD
Eyg2NzY4OWI3ZjBjZjczZGVmMmFkNjEyNjU1OTBjYjRjMDYxY2UyMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfCV82Ycxpgs2Q16/Nx5UVDyjH27
yxkuXz51Wr4id4EvySYyu12Vb3CxVPw2G9l4rf2NMeqV/jPE7GAHscEkD9yIMiK1
ucQW15cFOMiecwTp4IJVQk0/jBCI9ClEXfhTI2dsXUfChHLkqVyixWk/7IPUzkNJ
XnBHNbfUhlw57/x2DLGrfp6uK9nM8TE3Ft4OoCuCDKVu4CBgBUThtQoamTafna/1
Z+FVgFJymInfvf3JeRRj9lu7H1ZwEI6E/lo7vRriT4eiK//LFEGPzvKAIHBk+zRI
R7kzxw+h7dvJyKPoDY9TGt6Tkrt097TvpctHxQfEVaL9iQVHXBVVd2uUyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdom38M9z3vKtYSZVkMtMBhziIiMB8GA1UdIwQY
MBaAFE8Od9nG/2jcpo8F349Gde573LC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAt
NDU1YjE5Zjc2NmNjLzEvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAtNDU1YjE5Zjc2NmNj
LzEvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ8XwU8F0
mvti3JeKXCnugvbcTbaEfBUB2AcUo1383Cxnel8R9i50t1nhbnF+c6wsPfvF8/y/
fMIBf1xHPJJOy8+XgEXgsUpdT0/6hEwZL4NfFVxKatPopaxgPJZ/GTjyaf7+hLNN
jBn8hHMrtQaVwJxQNNzBJeXNtteNgDqG8J7Hf1Oj+8ioMOed6zbz4v5BZ1KTQHV3
SlJWToo0HgJ9jzpRO/NJWoxIqGs99MibZbAObdH/ydjXpdHBKiAjjnys08lxF9tG
278uVCzmIHn6eH08qp4cUfigj06HrvOvgTuG5deEjVHcKOEcbwSL0K03KqKn6K6r
JgXs99NRy4jSIQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:41:11 2025 by rpki-client