Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
File: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft (raw, json)
Hash identifier: b/w4dr+Hb9sT16UvLtVr30v3vAS2hYYEEgJIAYO2JNo=
Subject key identifier: D5:C9:97:E8:52:6D:06:AC:B4:B7:A1:AE:99:E3:5E:CD:B0:EE:22:6F
Authority key identifier: 4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
Certificate issuer: /CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Certificate serial: 0197B6A1B6CDE2D4882E08735FC7A6D36008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
Manifest number: 08A3
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl (hash: 2JiLWlOcm21251z4tLVxNFdZactwNVJcQaQ1A1PB3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b6:cd:e2:d4:88:2e:08:73:5f:c7:a6:d3:60:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=d5c997e8526d06acb4b7a1ae99e35ecdb0ee226f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:b5:1e:2f:35:44:96:33:c1:72:52:7a:dc:
ad:0f:32:a9:33:7a:22:fe:f7:7b:6c:c8:a3:70:f3:
af:d2:3b:a6:4e:cf:7a:07:79:3b:30:8c:81:6a:f8:
89:77:0c:17:05:d3:42:5f:e2:ad:e2:28:10:74:f1:
49:b0:f6:69:35:2d:14:24:aa:76:55:66:34:45:ba:
66:b6:75:bc:32:c4:15:06:f2:ae:2c:c0:a9:1e:8d:
11:8e:66:8c:52:2b:73:7b:c6:09:be:be:64:59:65:
5a:1d:ad:ee:99:a8:a5:69:7b:45:9d:0e:a2:30:8e:
0c:72:b8:0d:2e:0c:4c:d6:32:0a:19:a5:6d:01:62:
03:c7:40:fc:96:fa:bf:30:69:b2:16:7a:47:1f:2d:
f0:6c:26:76:8e:7a:b6:28:8d:d9:02:11:e6:ae:3a:
92:c9:b7:a9:21:dc:f5:c9:4a:5e:62:be:bc:a2:f0:
36:03:54:8a:9d:8c:32:be:6f:d2:e8:cd:53:b6:4e:
b4:65:b7:39:41:9c:1b:96:1f:7b:95:8c:51:0b:e3:
fc:67:17:d0:af:25:84:63:86:3c:ea:95:26:2b:bb:
c2:46:ca:0c:6c:f8:7a:91:9d:66:3f:10:48:64:82:
68:25:a9:31:79:81:35:ce:8d:d4:11:47:36:7c:e6:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C9:97:E8:52:6D:06:AC:B4:B7:A1:AE:99:E3:5E:CD:B0:EE:22:6F
X509v3 Authority Key Identifier:
keyid:4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:f0:60:3a:27:53:ca:db:52:91:54:4b:8e:8c:f2:60:09:96:
a5:46:f5:74:8c:bd:d1:42:c2:bc:0f:44:b1:46:71:21:72:20:
f3:e5:44:cc:61:87:97:12:35:21:51:2c:97:0e:f0:52:34:5d:
ad:b6:48:92:a6:e9:c5:16:b8:8d:2d:9c:f5:24:11:6f:82:64:
92:c3:6e:89:c1:f3:5d:38:f5:3e:a1:b0:29:2b:87:32:3d:c5:
33:a6:25:25:91:35:3a:6d:7b:4a:59:64:37:c0:35:5b:7c:ec:
5b:fe:21:ba:0b:f5:fb:d4:71:a6:9a:b3:4c:5f:27:87:e6:e7:
bc:e4:21:ef:c4:d3:86:a5:4f:b0:67:77:a4:76:68:de:0e:73:
33:b8:4d:39:5f:7e:87:b8:cc:75:8f:5f:cb:5c:fb:e3:c6:fa:
8e:ff:73:b7:b4:c1:b1:16:26:c4:96:d7:a3:32:b3:dd:3f:56:
12:af:ba:50:07:73:ff:e7:31:6d:c5:23:f3:a8:31:6f:b2:8d:
01:6d:dc:88:4c:41:8a:83:bc:d1:9b:c6:0a:30:51:91:ad:e6:
b1:b4:bd:50:43:cb:04:60:1c:2a:8f:aa:16:ee:c5:9c:b5:bb:
f3:1f:a8:0c:12:9b:5d:90:f1:f8:0d:3d:a8:63:d8:1e:6a:85:
f5:e1:5e:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2obbN4tSILghzX8em02AIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMDEzMzNmODZjYTk3MDcxYTBmOTYxMjZiYTM4ZTIyNTJl
NzBhMzQwHhcNMjUwNjI4MTMwMjIwWhcNMjUwNjI5MTMwMjIwWjAzMTEwLwYDVQQD
EyhkNWM5OTdlODUyNmQwNmFjYjRiN2ExYWU5OWUzNWVjZGIwZWUyMjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs261Hi81RJYzwXJSetytDzKpM3oi
/vd7bMijcPOv0jumTs96B3k7MIyBaviJdwwXBdNCX+Kt4igQdPFJsPZpNS0UJKp2
VWY0RbpmtnW8MsQVBvKuLMCpHo0RjmaMUitze8YJvr5kWWVaHa3umailaXtFnQ6i
MI4McrgNLgxM1jIKGaVtAWIDx0D8lvq/MGmyFnpHHy3wbCZ2jnq2KI3ZAhHmrjqS
ybepIdz1yUpeYr68ovA2A1SKnYwyvm/S6M1Ttk60Zbc5QZwblh97lYxRC+P8ZxfQ
ryWEY4Y86pUmK7vCRsoMbPh6kZ1mPxBIZIJoJakxeYE1zo3UEUc2fOajdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXJl+hSbQastLehrpnjXs2w7iJvMB8GA1UdIwQY
MBaAFE8BMz+GypcHGg+WEmujjiJS5wo0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHdFelA0Yktsd2NhRDVZU2E2T09JbExuQ2pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NGVjZDktYTJmOC00Njg1LWE4NzIt
YjQwNTY5MTZiMThiLzEvVHdFelA0Yktsd2NhRDVZU2E2T09JbExuQ2pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82NGVjZDktYTJmOC00Njg1LWE4NzItYjQwNTY5MTZiMThi
LzEvVHdFelA0Yktsd2NhRDVZU2E2T09JbExuQ2pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPBgOidT
yttSkVRLjozyYAmWpUb1dIy90ULCvA9EsUZxIXIg8+VEzGGHlxI1IVEslw7wUjRd
rbZIkqbpxRa4jS2c9SQRb4JkksNuicHzXTj1PqGwKSuHMj3FM6YlJZE1Om17Sllk
N8A1W3zsW/4hugv1+9RxppqzTF8nh+bnvOQh78TThqVPsGd3pHZo3g5zM7hNOV9+
h7jMdY9fy1z748b6jv9zt7TBsRYmxJbXozKz3T9WEq+6UAdz/+cxbcUj86gxb7KN
AW3ciExBioO80ZvGCjBRka3msbS9UEPLBGAcKo+qFu7FnLW78x+oDBKbXZDx+A09
qGPYHmqF9eFejQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:42 2025 by rpki-client