Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
File: TW8ORKf28MiMzpxG26jscuxhdSs.mft (raw, json)
Hash identifier: 0re1UdH0ZTf7hH0URr8HdHHL1T0dbEIWfJd5wB6hjnY=
Subject key identifier: F7:B0:D0:7C:8C:30:5D:C9:8E:25:A9:BA:F8:C6:09:9A:63:14:30:F3
Authority key identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
Certificate issuer: /CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Certificate serial: 0197B6A09C34FF3CEB9A49211205F83F834A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
Manifest number: 086A
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: TW8ORKf28MiMzpxG26jscuxhdSs.crl (hash: 29iu3ND9WGim69cTvgYNdX55wpRlouhqgkRGqI7cX+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9c:34:ff:3c:eb:9a:49:21:12:05:f8:3f:83:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=f7b0d07c8c305dc98e25a9baf8c6099a631430f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:92:4c:11:5c:32:fc:18:78:b8:8c:73:99:
0d:9e:05:e0:2c:5f:c8:df:c3:02:2e:56:df:4f:2b:
b6:89:76:db:25:08:9e:4b:ac:a7:1a:e7:92:97:ad:
d7:44:8a:d2:85:89:10:a5:38:cd:3e:df:36:e2:1a:
f3:7a:b1:bd:7a:cf:61:1e:ed:d7:ae:6c:fc:f0:a7:
26:94:d5:c5:aa:12:1e:60:b7:91:c9:f8:f0:f5:61:
2e:b4:9b:34:c4:f3:d8:64:b1:a3:85:7b:62:bd:db:
7f:b2:7d:26:8a:66:45:80:1d:47:c5:9c:bd:92:24:
48:c3:c1:70:a6:92:26:a0:cf:6f:97:b9:5d:45:e0:
b5:cc:50:3a:b1:ba:64:cf:99:3a:ea:4c:7e:ea:9a:
d4:99:39:21:3d:db:53:42:c5:53:f2:e3:b8:45:17:
57:a3:81:34:16:ab:03:b3:ee:11:f3:a7:e9:15:bf:
ca:4c:f6:69:45:9a:4a:94:6d:aa:24:58:43:34:7c:
4c:28:81:d5:72:7d:6a:bf:51:25:04:ae:05:b9:51:
93:1b:70:17:58:1f:13:79:4d:4a:f7:1b:38:4b:b8:
b1:8d:87:26:4f:62:63:22:00:95:42:29:02:a0:e4:
8a:cd:fc:01:85:dc:32:32:30:13:d9:69:f7:90:99:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B0:D0:7C:8C:30:5D:C9:8E:25:A9:BA:F8:C6:09:9A:63:14:30:F3
X509v3 Authority Key Identifier:
keyid:4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:cf:db:08:28:d3:ed:e3:91:2e:b7:90:db:c0:18:6a:42:48:
ed:f3:7a:87:65:c2:c3:a9:c3:c8:40:aa:ca:bb:59:58:f2:f2:
fc:6a:43:a0:2b:12:cb:f6:85:bf:ba:cf:f0:90:55:93:12:7f:
23:10:dd:4a:fa:c6:0c:c3:28:c0:4c:fd:74:7b:bc:ca:65:c7:
bb:29:a0:71:61:e8:a1:51:74:2c:86:75:e4:4b:1f:40:81:f8:
24:cd:f9:3c:56:ea:3c:3e:2d:32:e6:19:f6:05:57:19:b0:98:
ff:fd:05:bc:cf:e2:4e:99:02:11:98:65:ff:6a:10:8d:d3:db:
22:ab:f4:de:db:5e:9d:05:7b:da:8f:a7:1a:d6:a5:86:bd:59:
9e:3b:7a:64:f6:8b:bd:87:e5:2b:68:8e:79:5b:6d:2c:05:0f:
e4:6b:30:33:e0:a7:25:71:b3:4d:cc:fa:64:f0:6b:92:39:d2:
bb:3a:f9:7b:d8:59:d5:19:7c:bd:6a:5f:ad:cb:1c:79:35:f6:
c6:a7:f4:3d:b1:73:11:65:2e:fb:36:30:a6:5a:09:27:35:11:
c3:8c:0e:92:eb:2b:b4:d8:19:c1:9d:91:e7:8d:b3:0b:64:ce:
6b:da:f0:49:7f:e5:e6:12:d6:5d:65:e9:b3:38:44:2e:a1:3e:
cf:ff:c9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:25 2025 by rpki-client