
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
File: TWFl5PGBPks_XEhyBjHHzAsjdNI.mft (raw, json)
Hash identifier: /AFquuOeUr+/k+ylMQSNejiivzFTZB/XHHh3zPq2pVY=
Subject key identifier: 01:7C:4B:19:C3:B9:C0:83:35:19:D3:50:EB:B6:07:D8:99:1F:A5:58
Authority key identifier: 4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
Certificate issuer: /CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Certificate serial: 0198D6CDA3847A593CDEDE2AF49074D7849B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
Manifest number: 0C45
Signing time: Sat 23 Aug 2025 12:00:57 +0000
Manifest this update: Sat 23 Aug 2025 12:00:57 +0000
Manifest next update: Sun 24 Aug 2025 12:00:57 +0000
Files and hashes: 1: NvJ8oLDEBqhT1H-zCdKolqnypws.roa (hash: aLhfn5rS031yK9YSuCvXO/dQvbflGZGOUFgblOZMFc4=)
2: TWFl5PGBPks_XEhyBjHHzAsjdNI.crl (hash: /WEdwYdjcEquxfxZh9aqQCFm1bPZ0ozPfwV1clPqRxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a3:84:7a:59:3c:de:de:2a:f4:90:74:d7:84:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Validity
Not Before: Aug 23 12:00:57 2025 GMT
Not After : Aug 24 12:00:57 2025 GMT
Subject: CN=017c4b19c3b9c0833519d350ebb607d8991fa558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:ff:9f:3a:74:62:a4:08:24:af:b8:f4:6d:
d4:60:b8:97:cc:b5:f2:ce:2d:83:29:35:e8:98:69:
93:e5:aa:d7:ce:45:b5:99:12:a8:d8:06:39:e6:d6:
d8:2c:d7:41:5e:d7:19:ea:f3:17:c9:29:35:8b:f1:
9a:fc:55:8b:c8:df:0c:c3:c8:a2:ca:5c:7a:87:63:
a3:70:65:58:d8:bb:87:1b:4f:12:c3:ab:11:ea:78:
4e:d1:95:2d:29:d3:55:1a:95:dc:3c:11:9f:6c:f3:
e9:63:e9:fa:5a:db:8a:84:ec:39:2f:0b:fe:cd:b8:
04:f6:15:33:ff:79:aa:fc:a5:26:5f:79:62:fe:2e:
1a:c0:7a:62:16:19:15:c9:8a:d1:46:cf:24:96:e4:
47:73:3b:62:8a:7a:0c:4a:6a:80:dc:da:d6:8e:ed:
06:e2:09:2b:6b:50:84:07:80:71:bf:69:9c:8d:e2:
14:23:5f:d5:95:9a:c6:51:db:b8:8d:9b:db:97:5a:
dc:aa:e9:96:20:3e:f3:75:06:4f:61:2d:48:86:f4:
8c:90:7b:7f:ef:b7:01:71:54:db:6a:f5:f8:af:1b:
d0:6f:3f:0a:0a:e0:9d:5e:7e:90:e1:cb:bf:20:c4:
69:b9:8b:d8:09:a7:3a:e0:a1:90:0c:41:f1:20:53:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:7C:4B:19:C3:B9:C0:83:35:19:D3:50:EB:B6:07:D8:99:1F:A5:58
X509v3 Authority Key Identifier:
keyid:4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:45:35:f2:9e:91:71:63:0a:c5:04:3f:bb:6e:80:7b:00:60:
f0:c1:55:50:58:70:7b:3f:0e:08:07:be:5c:dd:b9:c0:21:e4:
87:dd:0a:a9:e5:cf:04:b0:40:80:db:67:b2:e2:16:f7:6d:8c:
47:a6:e3:9e:75:15:15:25:02:0c:20:71:42:04:4e:8a:4d:e8:
12:8a:4d:27:d0:49:a9:cc:a4:98:a4:2c:9f:7d:ce:ed:82:f9:
a9:0a:1d:14:59:1c:ea:97:34:fe:ca:db:15:fb:76:31:ae:f7:
7f:1e:8f:a4:30:92:83:9b:97:c3:cf:70:17:17:92:7f:45:ad:
c2:2a:41:76:de:a4:8c:17:0d:4b:10:fe:39:48:bb:6f:75:e1:
40:cf:ae:5e:b8:6f:48:d9:2e:2b:61:8c:38:06:05:ac:7d:c5:
54:e7:2a:bb:c4:db:ea:7a:5a:a8:c2:67:d4:1a:93:a4:70:6d:
82:b0:d1:5b:c0:db:e5:7f:d2:c6:7b:2b:a0:0f:eb:1a:52:4d:
84:17:66:8c:4e:b4:95:1a:f6:25:04:74:d6:59:84:6d:87:d2:
48:14:2d:4e:dc:07:bd:da:31:14:96:2d:d9:3a:05:f3:2e:8e:
03:b9:00:6a:0f:49:5e:98:20:36:70:ac:d7:e7:36:05:fb:23:
a4:41:7a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:19:21 2025 by rpki-client