Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File: TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier: H3/jakgqMsyVwVjK4xZX5zOjHdbSbLkhZYNCQm70fsg=
Subject key identifier: 87:65:A3:BE:29:E6:9A:5D:B0:29:2E:8A:16:FF:F3:B6:69:A8:60:05
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer: /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial: 01974A0C86943EBEE204F443FD1245BB507C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number: 1192
Signing time: Sat 07 Jun 2025 11:00:24 +0000
Manifest this update: Sat 07 Jun 2025 11:00:24 +0000
Manifest next update: Sun 08 Jun 2025 11:00:24 +0000
Files and hashes: 1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: EsFnk2q/c3YYzqp2qDuaxWI1yMqi92TM8AuaSolVEww=)
2: VcLRSmks30Rrzb_V-4cS_8CDrdU.roa (hash: ARDeLfHH2zFG0qHV/LfjEyCOKnPBbv+U4ABprvSu0Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:86:94:3e:be:e2:04:f4:43:fd:12:45:bb:50:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Validity
Not Before: Jun 7 11:00:24 2025 GMT
Not After : Jun 8 11:00:24 2025 GMT
Subject: CN=8765a3be29e69a5db0292e8a16fff3b669a86005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:ba:55:46:f7:2f:00:22:a2:11:8e:59:65:
b8:55:eb:ae:2e:4d:4d:28:b6:07:90:9c:7e:10:1b:
e5:e5:c3:cb:8d:c6:aa:4f:a9:f2:a8:65:f6:04:bf:
b3:27:fc:13:96:a2:56:e6:df:f1:1f:e2:67:88:5b:
84:57:66:89:03:3c:1f:99:32:69:58:ac:4d:d4:e4:
72:43:b6:a8:ee:fa:7a:3b:7d:28:f7:cf:35:eb:7b:
9f:56:fc:77:0a:6d:e5:40:e7:b7:db:ee:a7:b2:5b:
ad:f1:bb:d0:76:2b:4c:fe:8c:53:22:b5:22:51:bd:
e7:31:96:d5:49:ce:2d:5c:d6:c8:45:a0:1c:ff:cc:
42:e3:e0:e0:14:85:94:48:62:9b:eb:e7:b6:e6:ed:
d4:43:7c:b2:a3:97:8d:38:3d:6d:53:9e:74:19:71:
a6:0e:50:6f:22:46:19:a8:83:3f:78:d6:39:38:d4:
49:85:b5:13:1c:1a:b5:7e:ea:32:f8:47:de:cc:a9:
54:e7:b6:2a:10:dc:75:dd:47:05:ed:bb:7a:5d:9c:
19:5b:1b:c9:24:bd:bd:84:90:d1:f2:6b:2f:bb:9d:
90:d9:48:54:94:42:d8:e4:1b:57:9c:44:7b:d9:62:
45:ab:f0:e3:32:9c:c8:02:7c:11:09:2c:98:05:49:
6e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:65:A3:BE:29:E6:9A:5D:B0:29:2E:8A:16:FF:F3:B6:69:A8:60:05
X509v3 Authority Key Identifier:
keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d9:95:ed:b3:e2:8c:6b:5a:f6:f8:38:ea:6f:5d:e2:fe:bf:
53:df:e4:13:01:3e:29:c8:3b:23:a4:da:a2:91:8d:1d:d7:63:
7a:58:6f:86:d8:15:32:96:f3:1a:bf:5d:f3:a7:b6:9f:cd:c9:
04:de:28:07:84:cb:29:5f:38:d0:de:db:7d:89:68:75:b5:2c:
af:b5:bd:4f:3f:37:29:ef:6c:ad:d0:bd:af:c7:ad:45:0b:79:
4c:93:99:a4:ec:44:a2:8b:a2:40:6e:a2:2f:59:b2:2b:71:46:
1b:ec:46:ec:e6:72:88:42:1f:ed:9e:e2:42:01:97:93:c4:1f:
52:56:00:1c:d5:02:50:7b:ef:c7:24:94:82:cb:4a:7a:20:b5:
49:cc:4e:ae:9b:4d:7e:48:74:3d:ab:df:b8:86:93:76:e7:20:
55:7a:93:4a:89:a5:f8:f6:b8:b7:8e:35:8a:cb:9d:ff:96:34:
b1:b5:84:ef:60:3f:cd:97:c9:83:36:b0:cd:8c:c7:28:53:91:
36:3e:ad:66:a6:fb:08:4a:7b:20:d8:78:f7:8b:04:50:9d:fa:
0f:cb:2e:60:e5:e2:fd:9b:d0:6b:c0:b4:5e:2e:53:3a:31:92:
0a:75:d2:dd:d5:1e:1a:c4:84:8a:36:17:4c:da:c1:49:5f:7b:
72:e4:df:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:50:21 2025 by rpki-client