Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: CbQPs0CdKsmYxAyBANNBjFHINod++11AP3GRbknQchY=
Subject key identifier: 17:D0:D1:B3:C8:B1:5F:F2:44:29:7F:17:50:1D:B9:83:0D:D1:42:B5
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 0198D5156A866E1E50CE090AEF53197E359F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:07 +0000
Manifest this update: Sat 23 Aug 2025 04:00:07 +0000
Manifest next update: Sun 24 Aug 2025 04:00:07 +0000
Files and hashes: 1: K0hhdmIt7Y7kQYBfthadwHAEzT8.roa (hash: e/JVp+UZ3ruylLloiq9C0e2gilOSNxXij9evAIBs/SY=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: J8WZN3XgO/Xn23Etni5KIZVgzqUBpu2KI7ucH224AY0=)
3: xaz-RCI9-nRuCGX3szsn__1z8Vo.roa (hash: 5Ems0TBLY+pDm7C97m9B3xtORqLRHwyf8CR1NhnJpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6a:86:6e:1e:50:ce:09:0a:ef:53:19:7e:35:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Aug 23 04:00:07 2025 GMT
Not After : Aug 24 04:00:07 2025 GMT
Subject: CN=17d0d1b3c8b15ff244297f17501db9830dd142b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:60:ac:23:8a:fc:0a:6a:30:63:24:a7:aa:
c5:e5:4b:9c:42:51:37:d8:71:20:7e:32:89:bc:b2:
54:d8:c5:fa:e2:a0:cd:ec:18:e9:96:66:2e:44:76:
34:69:93:b0:2c:85:97:4b:ed:0e:d2:b7:d2:dd:cb:
dd:49:0b:07:c0:d8:43:62:47:df:1f:d9:57:8f:ae:
a6:fc:77:50:2a:23:5a:77:fe:80:69:42:4a:1b:59:
4e:12:4f:89:40:ee:47:e1:72:b7:9e:30:51:56:7e:
d8:98:52:b8:dc:78:21:21:ef:3a:8a:8e:f6:5d:79:
27:7b:50:96:57:63:d3:14:e5:67:3f:20:bf:75:c2:
cb:46:60:7a:16:47:61:7d:4a:d7:0e:3d:90:cd:f3:
a7:89:85:e0:8a:84:b0:a6:1d:8c:8e:e1:a7:32:da:
4d:28:96:c4:36:dc:04:db:d6:3f:aa:97:6b:2f:c3:
05:8c:9f:4f:6c:0a:62:e0:df:f0:3b:98:0c:7a:9f:
9e:00:86:95:70:a9:26:ba:3e:3f:bb:04:6c:5b:6e:
09:6c:2b:35:6e:87:40:aa:9d:e3:e1:4a:8d:6d:b0:
a2:96:9a:8a:35:ce:39:15:97:1b:c4:cd:f6:1c:6c:
68:09:76:42:b0:0b:27:76:b7:4c:66:4d:43:a2:a5:
3b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D0:D1:B3:C8:B1:5F:F2:44:29:7F:17:50:1D:B9:83:0D:D1:42:B5
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c6:c9:86:28:e6:bc:40:68:9a:ad:3d:c8:10:7c:35:b6:70:
f3:11:82:a9:51:ab:cd:52:b3:24:b9:67:1d:53:ac:49:13:a6:
96:0e:70:76:d8:47:83:0f:7e:94:d4:fc:0f:ce:16:4a:d1:13:
2a:ab:f9:98:7a:7b:61:30:1f:bd:e7:f8:f5:b9:40:db:f7:1c:
22:0f:5e:98:7c:3c:c6:92:07:bf:78:7a:bb:90:ac:2d:82:5c:
cd:dd:1b:0d:4a:bf:05:08:79:5b:22:bd:45:8d:cb:6c:24:f5:
a5:1d:f6:d5:b1:03:ee:f8:c2:be:19:32:de:92:71:7a:7c:8e:
b1:10:df:64:5b:b7:53:52:e9:ae:f4:e5:fa:49:d5:33:0c:e3:
08:ab:85:09:8a:0b:e7:c7:96:9c:c8:24:1f:6d:ae:21:db:f0:
c3:bc:ff:f4:53:db:41:24:64:6b:42:b9:ea:01:1a:a7:b2:20:
4d:72:9d:5f:3d:00:50:b3:6c:fc:01:24:74:1e:6b:7d:c9:b2:
d1:41:db:28:26:e2:7a:79:04:ef:00:24:9a:ff:c4:bf:4c:d6:
9f:bb:7f:0a:0b:10:5c:ea:24:2d:97:d6:7b:4e:44:6a:3d:b8:
39:77:10:11:a6:a2:12:79:bd:ed:28:e1:d4:4b:35:6a:28:01:
01:1b:8c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:49 2025 by rpki-client