Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File: TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier: 5d9rTxDzxwqJS7Fcm+ObBZ5aUhXtifd0uEM0YvcdD3E=
Subject key identifier: 69:F8:7B:5E:39:62:AA:3C:05:57:73:4F:21:27:3A:F6:EB:85:D3:84
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer: /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial: 019A725C8AED1D14FC13406602CE01EA8B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number: 1335
Signing time: Tue 11 Nov 2025 10:00:58 +0000
Manifest this update: Tue 11 Nov 2025 10:00:58 +0000
Manifest next update: Wed 12 Nov 2025 10:00:58 +0000
Files and hashes: 1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: bNHo08GkMglIJNQI3pINExg8poPMOIf+V8SelbCO2TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8a:ed:1d:14:fc:13:40:66:02:ce:01:ea:8b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Validity
Not Before: Nov 11 10:00:58 2025 GMT
Not After : Nov 12 10:00:58 2025 GMT
Subject: CN=69f87b5e3962aa3c0557734f21273af6eb85d384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:6a:25:f9:a1:3b:1f:90:6d:7d:d4:44:63:
50:3d:71:ff:37:5d:30:43:00:f6:39:85:2d:9f:c4:
ca:96:1e:06:b5:06:0c:74:11:d8:d0:ce:98:a0:46:
8a:90:36:16:a7:38:de:88:1c:6d:d3:1a:f4:bb:97:
e5:f5:88:3f:3b:d9:30:4d:a0:e4:59:71:dd:03:cb:
48:64:d0:97:b0:1c:e0:ba:80:f6:12:14:9a:ca:99:
33:9a:0c:5f:cf:1e:54:7a:09:1d:bd:69:1a:05:4f:
01:e3:0a:a4:4c:a1:f4:b4:3e:82:74:e4:cd:f3:52:
71:30:11:06:58:d9:3b:00:2f:aa:39:f8:bd:1b:eb:
a9:7a:f7:0c:58:27:12:c4:ab:8e:47:06:b6:1e:3e:
c5:5a:c2:0b:f5:54:f0:f7:c1:39:f3:54:05:d8:5f:
79:2d:aa:b7:55:4a:96:24:b1:39:45:f7:5c:fb:e4:
de:9f:d3:17:bc:fe:86:f2:e4:16:14:b9:e1:68:cd:
46:b5:78:81:d4:b0:77:94:68:db:58:1b:3e:81:a6:
57:e7:be:92:71:23:65:5f:5d:4a:81:6c:1c:16:6e:
3e:6e:1f:ac:7b:44:f5:8e:9f:15:da:06:fa:7b:50:
7c:81:25:21:6d:79:12:e0:2a:23:ee:ce:58:ad:31:
8e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F8:7B:5E:39:62:AA:3C:05:57:73:4F:21:27:3A:F6:EB:85:D3:84
X509v3 Authority Key Identifier:
keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:62:59:2f:83:50:d2:63:e7:de:5e:5a:4e:a0:65:7d:1f:3b:
64:e0:0f:24:b9:a9:49:6d:5b:9b:ec:a9:e6:19:5d:ec:4d:26:
ac:e1:00:38:47:3f:69:2c:cc:c2:c5:64:93:f7:54:70:32:8f:
45:a6:0b:64:57:53:ed:b2:0b:53:a3:35:12:e8:b6:b9:05:7f:
da:cd:98:90:4e:27:8c:0c:6c:7a:28:d5:ab:83:be:41:84:5b:
4b:fc:cb:3d:b7:8d:39:0e:01:b0:45:83:72:99:de:3b:32:34:
b7:16:73:a8:83:eb:a7:ec:d2:78:a1:98:38:1c:6a:90:a0:b9:
50:11:4c:91:55:6b:22:a5:b9:7b:c7:1a:83:80:6f:a1:71:0c:
65:f4:f0:fa:6b:33:c2:b9:59:6f:3c:36:ba:03:4a:0f:45:9c:
4e:47:a4:4f:68:a7:e2:23:51:fb:89:e9:93:dc:5e:36:f9:22:
83:aa:d6:e5:51:78:be:96:a5:05:db:e4:39:ac:cb:33:ec:e7:
88:db:16:c1:eb:80:f4:25:a5:ec:19:84:b6:14:b7:96:9b:cc:
dd:5e:67:01:b3:3b:f6:0c:76:fa:aa:dc:67:3b:1d:fc:8f:ad:
f9:8d:91:8d:3f:b7:fb:ff:cc:f9:62:03:fa:af:16:84:10:43:
49:32:e1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:02 2025 by rpki-client