Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: HkdZOkaDmwBIeX0cgwFJDxE6UNIlwyCgwMuwno0T+VI=
Subject key identifier: D3:7C:15:D2:32:6E:85:9F:29:A4:ED:E1:41:3A:94:32:49:5A:B5:05
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 0197B7452ECDEEBFF11D5700B3F9856130B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:00:53 +0000
Manifest this update: Sat 28 Jun 2025 16:00:53 +0000
Manifest next update: Sun 29 Jun 2025 16:00:53 +0000
Files and hashes: 1: K0hhdmIt7Y7kQYBfthadwHAEzT8.roa (hash: e/JVp+UZ3ruylLloiq9C0e2gilOSNxXij9evAIBs/SY=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: +UNof7EZdMf9YZIjhj+yN2Q4cKZkLK31HMChg9OhF58=)
3: xaz-RCI9-nRuCGX3szsn__1z8Vo.roa (hash: 5Ems0TBLY+pDm7C97m9B3xtORqLRHwyf8CR1NhnJpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2e:cd:ee:bf:f1:1d:57:00:b3:f9:85:61:30:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Jun 28 16:00:53 2025 GMT
Not After : Jun 29 16:00:53 2025 GMT
Subject: CN=d37c15d2326e859f29a4ede1413a9432495ab505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:40:44:2a:08:0d:64:3f:4d:7f:6d:ee:de:
77:75:9f:e6:a8:89:87:0a:ac:bf:c9:ee:ff:d0:1e:
7e:1b:07:91:7a:5f:7d:ca:f0:0f:59:42:45:a2:ce:
ce:a9:d8:aa:57:8f:e4:50:c9:63:2a:9d:9e:c1:f6:
56:32:15:83:1b:75:4b:e9:a2:43:0a:ac:b2:27:7e:
d6:3d:7f:41:9f:f3:45:fd:3e:a8:bb:27:f7:82:e3:
14:67:4a:b2:dc:bd:a6:f3:87:98:6a:40:b4:93:8f:
6e:b3:29:44:4f:90:cc:05:7e:e8:3d:76:e6:75:00:
ec:41:fa:58:eb:eb:77:a5:66:fd:dc:91:32:a6:9a:
e5:f2:c0:83:a3:07:ea:28:8e:b1:30:f6:37:93:70:
45:bc:ce:dd:b9:db:e4:f0:f2:51:e1:ee:e9:a0:a7:
24:8d:94:e2:82:d4:54:5b:d4:20:13:bf:54:13:0d:
b4:4e:1b:e6:a9:bc:3d:9c:a7:27:96:be:65:35:05:
b8:0a:35:4c:08:d0:72:a7:72:67:4b:8e:5f:bf:39:
74:e1:7b:6e:0a:8f:78:e5:ce:0e:a1:cd:19:6c:af:
14:b0:d0:f5:b5:ce:0d:69:f2:f4:2e:31:ec:ac:d6:
33:1e:4c:2d:1e:94:06:50:d6:87:a3:c8:33:83:29:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7C:15:D2:32:6E:85:9F:29:A4:ED:E1:41:3A:94:32:49:5A:B5:05
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:95:2a:7f:d4:25:bb:d3:68:3f:40:94:a3:93:b6:90:a3:01:
9b:2c:fb:8e:ea:9d:da:88:94:25:f8:45:60:ab:63:c2:d8:af:
81:a1:e4:88:15:32:b0:9e:1c:e0:84:4b:c6:22:00:d1:dd:d5:
6d:9e:d4:86:3e:a5:82:a1:8e:fd:fa:e6:19:86:ca:02:84:7d:
fb:1f:8b:3f:f1:1f:61:bf:42:07:50:8a:67:6a:f6:89:c5:2e:
14:6f:44:37:b4:fa:15:33:09:64:0d:9a:03:13:ec:59:b1:8d:
70:ae:2c:f8:b6:f0:76:ed:75:20:cd:02:f9:77:d8:5d:fb:e9:
68:d0:74:87:c2:87:d2:6f:98:ec:cf:41:aa:a3:b7:42:76:70:
3d:65:c1:c3:5e:06:b7:49:77:7c:c1:6f:7a:75:ea:e5:34:4b:
61:9e:a5:5c:5c:c2:f0:95:57:63:d5:ad:8a:57:bd:41:a4:82:
52:97:46:f3:a8:32:a5:93:d3:55:a3:d3:f9:00:97:fd:7e:c9:
b2:f1:37:7b:b9:03:7f:76:e7:d5:48:4b:de:b9:3a:16:af:cd:
ef:11:43:2b:2e:df:0d:82:db:12:83:bf:1c:1a:e8:c9:48:d8:
79:9b:d2:5e:3a:a6:9a:0e:e0:64:cc:fb:64:37:8c:07:ee:72:
18:d3:17:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:07 2025 by rpki-client