Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
File: TW8ORKf28MiMzpxG26jscuxhdSs.mft (raw, json)
Hash identifier: EDgB9aUJDAN0EUUjHYXm1Q8gJU57ygQIMdwmTQqHuYk=
Subject key identifier: AE:5A:5D:33:6A:30:22:5E:0F:7A:95:AD:1E:D7:0B:55:E9:BE:82:82
Authority key identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
Certificate issuer: /CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Certificate serial: 0199FBEBB663A6287FA8B53320FAA37D8F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
Manifest number: 0997
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: TW8ORKf28MiMzpxG26jscuxhdSs.crl (hash: oF+0Dj+kFoDots+BM4QdD5xiq+GA8Q5mXY5ATFCSfhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b6:63:a6:28:7f:a8:b5:33:20:fa:a3:7d:8f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=ae5a5d336a30225e0f7a95ad1ed70b55e9be8282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:09:70:cf:00:ff:3c:03:01:3a:d9:e9:0b:
99:20:0d:97:71:ca:39:34:66:41:3a:08:06:ff:de:
06:9b:f7:e1:f5:f6:27:b5:a8:86:89:ce:2c:2d:81:
a6:bb:82:4e:02:96:f7:d0:8a:89:b6:81:04:e9:66:
21:01:27:3c:b4:a7:a6:f6:d3:ee:73:11:9c:95:61:
da:3e:a0:6b:0c:92:0f:24:cb:fe:ee:13:a5:4b:da:
ad:e9:db:52:d4:0d:29:46:9a:fa:98:81:2d:08:78:
b4:83:b1:88:65:87:71:26:7a:e6:a9:79:e6:45:37:
42:d7:1c:a9:76:f9:bb:fc:3e:af:13:d1:4b:4f:82:
6c:df:0f:13:75:32:e3:ee:2b:a9:03:25:fd:cf:5a:
d3:05:d0:87:0a:ea:06:be:2c:26:ef:fe:03:0a:fb:
19:cc:70:81:c5:5d:be:e3:c7:9b:9a:2d:2c:17:98:
93:30:d3:cd:e6:c4:84:f0:5d:8c:9c:e1:c9:d9:1a:
99:99:3e:f7:88:26:1d:84:a0:37:0e:0b:8f:65:4a:
c6:20:6b:9a:61:a5:c2:43:b7:88:5a:12:38:9d:73:
dd:09:18:4f:4e:ac:27:ed:10:a2:e6:66:c6:17:cf:
bc:43:b8:0e:6a:fd:41:02:02:ed:a8:18:d1:62:48:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5A:5D:33:6A:30:22:5E:0F:7A:95:AD:1E:D7:0B:55:E9:BE:82:82
X509v3 Authority Key Identifier:
keyid:4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1f:c6:cc:5f:cc:a5:38:a5:a0:85:59:1b:57:e5:90:ac:b5:
20:01:ce:ef:14:b3:f9:77:82:6c:c6:51:da:b4:0a:fa:94:55:
e0:7b:09:67:0b:ef:c2:a6:b8:92:8b:45:da:50:8f:55:cf:ec:
7a:41:ad:01:9a:50:be:3c:5a:96:c5:46:5f:24:b9:bb:37:5d:
11:31:71:58:57:42:9d:82:ed:72:85:d0:40:bb:8d:8a:e3:00:
37:1a:99:a7:3e:bb:b4:f3:0e:31:58:4a:88:63:9f:d0:3d:3c:
f6:66:1b:0d:34:a0:e0:59:c3:b4:29:db:29:5d:3e:ca:d7:30:
2d:56:60:9c:48:de:f2:30:1c:53:25:da:b5:c2:33:a8:42:c7:
ec:a1:72:0c:93:43:c1:c0:72:d8:71:f6:57:84:c8:e8:14:e4:
61:dd:38:6f:3d:b9:13:08:8c:8a:ed:50:7a:f7:19:96:d5:22:
04:4a:c3:58:ad:03:ef:26:53:40:19:9e:f7:6e:e2:23:3b:8c:
3c:91:8d:5f:84:13:49:03:f5:5b:6b:30:27:0a:67:69:4c:2f:
84:1b:ab:8a:ec:e2:2a:8f:f5:32:01:f1:25:ff:b7:c8:08:7c:
26:7f:81:0e:d8:6d:7b:ee:89:7b:93:81:66:c5:13:31:34:d8:
ce:db:78:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn767Zjpih/qLUzIPqjfY8/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNmYwZTQ0YTdmNmYwYzg4Y2NlOWM0NmRiYThlYzcyZWM2
MTc1MmIwHhcNMjUxMDE5MTAwMjMyWhcNMjUxMDIwMTAwMjMyWjAzMTEwLwYDVQQD
EyhhZTVhNWQzMzZhMzAyMjVlMGY3YTk1YWQxZWQ3MGI1NWU5YmU4MjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZMJcM8A/zwDATrZ6QuZIA2Xcco5
NGZBOggG/94Gm/fh9fYntaiGic4sLYGmu4JOApb30IqJtoEE6WYhASc8tKem9tPu
cxGclWHaPqBrDJIPJMv+7hOlS9qt6dtS1A0pRpr6mIEtCHi0g7GIZYdxJnrmqXnm
RTdC1xypdvm7/D6vE9FLT4Js3w8TdTLj7iupAyX9z1rTBdCHCuoGviwm7/4DCvsZ
zHCBxV2+48ebmi0sF5iTMNPN5sSE8F2MnOHJ2RqZmT73iCYdhKA3DguPZUrGIGua
YaXCQ7eIWhI4nXPdCRhPTqwn7RCi5mbGF8+8Q7gOav1BAgLtqBjRYkhuKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK5aXTNqMCJeD3qVrR7XC1XpvoKCMB8GA1UdIwQY
MBaAFE1vDkSn9vDIjM6cRtuo7HLsYXUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFc4T1JLZjI4TWlNenB4RzI2anNjdXhoZFNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xMzNiYjUtMTFmYi00Zjk0LThmMjkt
YWNhM2I4MjgzZmUzLzEvVFc4T1JLZjI4TWlNenB4RzI2anNjdXhoZFNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8xMzNiYjUtMTFmYi00Zjk0LThmMjktYWNhM2I4MjgzZmUz
LzEvVFc4T1JLZjI4TWlNenB4RzI2anNjdXhoZFNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcB/GzF/M
pTiloIVZG1flkKy1IAHO7xSz+XeCbMZR2rQK+pRV4HsJZwvvwqa4kotF2lCPVc/s
ekGtAZpQvjxalsVGXyS5uzddETFxWFdCnYLtcoXQQLuNiuMANxqZpz67tPMOMVhK
iGOf0D089mYbDTSg4FnDtCnbKV0+ytcwLVZgnEje8jAcUyXatcIzqELH7KFyDJND
wcBy2HH2V4TI6BTkYd04bz25EwiMiu1QevcZltUiBErDWK0D7yZTQBme927iIzuM
PJGNX4QTSQP1W2swJwpnaUwvhBuriuziKo/1MgHxJf+3yAh8Jn+BDthte+6Je5OB
ZsUTMTTYztt4iA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:39 2025 by rpki-client