Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
File: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft (raw, json)
Hash identifier: b2IhoahgEwRox/lDsLWCMoBmnDcJyV1jH3mK8XzQG1g=
Subject key identifier: 1F:3A:F3:A3:EE:27:CC:1D:0A:E3:2A:16:2E:67:6F:A1:62:06:BE:C0
Authority key identifier: 4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
Certificate issuer: /CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Certificate serial: 0198D47369A0C4FCFFBB0F5A6B76DFE11DE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
Manifest number: 0937
Signing time: Sat 23 Aug 2025 01:03:09 +0000
Manifest this update: Sat 23 Aug 2025 01:03:09 +0000
Manifest next update: Sun 24 Aug 2025 01:03:09 +0000
Files and hashes: 1: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl (hash: Wo345iR7VC78AeMD+9pDxFK+p2vVoNpWemZohEVqkbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:69:a0:c4:fc:ff:bb:0f:5a:6b:76:df:e1:1d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Validity
Not Before: Aug 23 01:03:09 2025 GMT
Not After : Aug 24 01:03:09 2025 GMT
Subject: CN=1f3af3a3ee27cc1d0ae32a162e676fa16206bec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:26:f6:a2:1f:68:06:b9:d5:4d:40:43:4c:c9:
61:e7:ff:a0:16:a8:74:b8:fd:80:f3:26:dd:69:0b:
ee:da:27:3c:07:07:7c:e3:85:e2:53:47:74:36:9d:
b0:0d:a2:aa:d1:d0:73:2f:7c:5c:dd:7d:49:15:44:
ee:eb:20:9d:53:3c:a2:7e:2f:00:d9:3b:e1:fd:4b:
f3:01:81:de:0a:d6:86:98:62:fe:da:52:db:ce:89:
11:48:76:ed:d0:db:6b:31:c3:26:22:de:b8:44:1c:
af:98:00:e7:05:a4:6c:c1:17:cf:f6:70:1e:e3:6b:
97:0a:ca:b7:f6:32:70:04:fc:e5:dd:e1:50:e5:46:
1a:03:70:eb:e2:f8:0a:83:43:ec:b6:77:e6:47:4b:
d6:54:b2:30:03:93:ea:c2:0c:4a:c0:f6:42:1c:fa:
60:39:fc:2d:08:85:63:d7:f4:44:15:5f:3a:4a:c7:
d4:51:13:a6:94:1f:dd:42:81:24:1b:18:2d:c6:19:
85:d3:70:a2:75:bd:16:07:6c:e3:f7:e6:3f:db:93:
a7:c7:41:0d:4a:39:58:cd:09:66:a7:da:07:02:30:
4a:0f:65:15:1b:bd:a7:97:a3:3c:72:25:31:f6:fb:
1f:69:de:03:df:c5:73:fd:ef:41:95:c6:06:52:d3:
cf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:3A:F3:A3:EE:27:CC:1D:0A:E3:2A:16:2E:67:6F:A1:62:06:BE:C0
X509v3 Authority Key Identifier:
keyid:4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:d0:e3:d5:b2:a5:c7:95:6b:1f:3f:97:2c:e1:63:61:fb:cb:
1e:a2:48:b7:cd:09:b6:cd:1f:bb:c9:1b:29:3f:93:d1:8e:c4:
9c:b4:c8:be:13:83:a6:69:d9:b9:5b:09:66:b3:3c:60:20:84:
9e:1b:a6:02:ea:23:97:8c:fe:64:b9:50:5c:59:57:f6:ef:87:
1c:5e:62:c2:de:a4:50:81:60:b9:21:c6:7a:7e:30:88:5d:65:
0f:10:07:80:92:2c:05:2c:d7:7d:4d:e5:98:13:62:f0:0b:62:
94:66:5e:72:31:af:61:5b:aa:2d:8d:8f:cb:02:35:b7:57:d3:
bb:8c:93:68:b4:a4:37:9f:7d:b0:b4:6e:f8:14:a1:ef:5b:c2:
f4:17:95:f9:bf:a1:80:f5:0d:12:7b:56:2b:c7:91:eb:58:6f:
53:0f:7b:b5:7e:3b:2e:e4:d7:f7:b8:2f:d2:b0:e0:21:83:fe:
4d:85:e6:fc:29:91:b9:ab:f6:6a:94:3f:b1:89:ab:32:c7:c5:
23:92:ae:fc:f8:6a:22:7d:48:5d:b5:8c:07:4d:60:53:04:1c:
58:e2:8e:51:1a:89:31:a0:ea:8f:7a:f0:47:8b:0a:c1:83:c8:
5b:7a:c9:aa:2a:4f:54:92:b4:d7:9a:7a:a2:31:9d:1b:d7:0b:
ff:c5:81:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:04 2025 by rpki-client