Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: 0S22If/tIZHM2BgMXBzfuum7xOQG7EdFxzUT1G9TyhY=
Subject key identifier: 04:ED:05:EE:91:F4:3F:6E:99:24:14:0E:E0:DD:B5:5F:AA:3C:BE:BA
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 0199FAA16CDDE6A17A10B76F07223B83AC2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 04:01:47 +0000
Manifest this update: Sun 19 Oct 2025 04:01:47 +0000
Manifest next update: Mon 20 Oct 2025 04:01:47 +0000
Files and hashes: 1: K0hhdmIt7Y7kQYBfthadwHAEzT8.roa (hash: e/JVp+UZ3ruylLloiq9C0e2gilOSNxXij9evAIBs/SY=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: cTB48Q1qUvX/l0fnfdejEoqEmxc91dYSKqzNrbRXUq4=)
3: xaz-RCI9-nRuCGX3szsn__1z8Vo.roa (hash: 5Ems0TBLY+pDm7C97m9B3xtORqLRHwyf8CR1NhnJpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:6c:dd:e6:a1:7a:10:b7:6f:07:22:3b:83:ac:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Oct 19 04:01:47 2025 GMT
Not After : Oct 20 04:01:47 2025 GMT
Subject: CN=04ed05ee91f43f6e9924140ee0ddb55faa3cbeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:26:f6:44:98:82:1c:57:c2:a2:5a:3e:a1:
0b:0f:c5:3c:0e:d2:49:42:6f:68:d2:0e:e6:43:57:
43:fb:bf:36:77:0d:c7:4c:56:2b:2b:a1:59:06:29:
72:48:2d:41:0e:b5:9f:d7:24:17:fb:63:d6:54:6a:
c9:2d:4b:fe:50:0d:7c:79:4f:b7:87:5d:de:e0:47:
44:7e:45:e9:b1:79:a8:04:1a:b5:59:7b:76:26:ef:
52:81:e4:41:e6:39:99:3f:a1:10:ee:cf:0a:3c:28:
62:80:7d:51:b6:e0:47:98:3b:ad:d9:b2:ff:86:18:
3c:e5:6d:bc:6d:34:b8:a4:f7:29:94:53:4d:1c:9f:
ed:2a:98:2c:23:5a:b5:d8:06:38:73:51:1e:eb:c9:
3d:c3:96:2f:0f:3f:58:31:54:0d:a6:5d:47:41:49:
9c:e4:48:48:35:5f:a7:3e:2b:24:b2:af:1f:36:6d:
80:a0:ba:94:43:c9:e0:be:1d:60:2c:04:46:8a:44:
71:6a:50:98:f5:0c:fc:f5:3f:51:f2:73:88:67:09:
76:da:b9:88:32:77:ab:0d:f8:86:9f:34:d6:aa:35:
2e:3e:22:57:fe:37:57:ec:d6:51:ac:46:19:ed:e6:
57:02:c1:8a:e4:7a:01:96:44:ea:8e:d0:32:18:b4:
a9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:ED:05:EE:91:F4:3F:6E:99:24:14:0E:E0:DD:B5:5F:AA:3C:BE:BA
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:4f:7d:a1:32:ea:92:2a:3f:f8:bd:4d:f8:71:ba:29:23:64:
01:26:2f:26:42:2e:69:a0:24:ed:6f:30:d2:f8:84:09:cf:a0:
39:5b:7b:86:e2:04:c3:94:ec:7d:22:01:2e:af:1a:1b:f8:1d:
62:1d:47:a4:a8:4f:cc:fe:f7:83:1c:14:0e:24:56:8c:d7:6a:
3c:11:8a:21:8e:3e:3c:fc:b4:39:81:a5:3a:61:54:7c:31:37:
4e:50:f6:e3:fe:7e:bd:a8:c0:d7:3b:9d:5d:3c:88:2e:1e:4e:
3a:55:c3:4f:32:53:5f:bd:43:f9:35:39:27:c9:40:d8:2a:0d:
b5:73:76:d2:7b:10:fa:b5:ef:68:fa:4c:7e:20:44:5c:b1:9f:
62:a4:b3:9d:db:c2:68:a6:90:1f:86:49:45:f2:7b:6b:82:b7:
87:47:36:11:8c:14:cf:04:0a:cc:e5:df:03:67:14:89:54:5f:
26:91:33:60:ac:72:a8:4a:8d:6a:aa:fc:c0:60:45:14:49:9b:
af:da:6d:29:1f:a6:d9:78:37:a9:a4:a5:f6:17:0c:07:d2:a9:
1f:47:96:fc:bd:fa:86:f9:c4:86:60:f9:9c:25:59:ed:70:6a:
de:41:94:f9:88:ee:67:9d:2d:ea:3e:c6:0d:82:46:44:3d:60:
ce:80:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:55 2025 by rpki-client