Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
File: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft (raw, json)
Hash identifier: hKY+kHbMXWUZPAxYiW2tuAWc2THdbJRqaYUPwTFG+wQ=
Subject key identifier: EC:25:E8:D3:EA:29:D7:EF:3A:43:BD:97:70:C0:DF:ED:00:F3:A0:22
Authority key identifier: 4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
Certificate issuer: /CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Certificate serial: 0199FBEB80B0F05883F2DCE202980F94116C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
Manifest number: 09D0
Signing time: Sun 19 Oct 2025 10:02:19 +0000
Manifest this update: Sun 19 Oct 2025 10:02:19 +0000
Manifest next update: Mon 20 Oct 2025 10:02:19 +0000
Files and hashes: 1: TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl (hash: /4U69eXmVLTFdTf5Bx8map6ivx6FFarNo0omlVrYcOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:80:b0:f0:58:83:f2:dc:e2:02:98:0f:94:11:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f01333f86ca97071a0f96126ba38e2252e70a34
Validity
Not Before: Oct 19 10:02:19 2025 GMT
Not After : Oct 20 10:02:19 2025 GMT
Subject: CN=ec25e8d3ea29d7ef3a43bd9770c0dfed00f3a022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:54:31:2b:72:8a:8f:83:de:37:61:1d:41:
07:b2:7b:82:a5:45:22:09:f9:46:ee:3f:a3:9b:55:
4a:a5:c8:09:df:21:90:97:85:6b:6e:a0:62:36:fe:
de:f2:64:f1:95:5b:59:86:4b:3f:56:5e:f3:0c:4c:
96:bb:26:81:cc:59:37:d6:78:d8:f6:3f:93:1d:22:
60:e2:1e:39:44:c7:40:5f:6e:74:13:51:b0:b9:95:
62:99:6b:3d:72:3e:5a:30:54:7c:16:1c:f1:fc:68:
a5:b8:24:75:e6:53:38:9d:37:28:8f:ec:f5:c8:5f:
7d:ca:7f:ff:b5:82:f4:b9:d3:67:09:b0:2f:8c:41:
68:4a:7c:ce:45:98:29:5f:fd:ae:dd:93:e5:30:a4:
8c:ba:17:9f:cc:dc:b0:5a:a2:7a:51:53:0f:0b:0b:
3e:75:bf:b0:03:c3:09:23:f1:c0:00:a8:3d:0d:1a:
db:34:10:ad:7a:86:af:8d:68:12:95:cf:4a:78:29:
60:b4:61:d9:1d:d5:56:e8:fb:36:70:87:59:77:d9:
9b:35:90:cd:ca:c5:e2:ef:64:68:cf:20:e5:72:34:
16:29:cc:27:24:0a:d9:2d:99:65:94:bb:2f:6f:75:
56:1b:59:81:f6:be:2c:ea:4b:9f:11:26:c3:6d:70:
69:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:25:E8:D3:EA:29:D7:EF:3A:43:BD:97:70:C0:DF:ED:00:F3:A0:22
X509v3 Authority Key Identifier:
keyid:4F:01:33:3F:86:CA:97:07:1A:0F:96:12:6B:A3:8E:22:52:E7:0A:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/64ecd9-a2f8-4685-a872-b4056916b18b/1/TwEzP4bKlwcaD5YSa6OOIlLnCjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:15:01:65:3a:22:b3:ac:e3:90:03:a1:72:8c:a3:46:38:99:
fd:e0:95:c1:e3:91:46:84:72:95:df:17:2f:fc:de:f5:b4:fd:
b9:5d:b5:ff:eb:70:82:7b:f0:d8:b5:5c:f2:5b:3e:db:47:78:
4c:84:f0:cf:e9:9d:63:89:2c:a0:1f:d2:d3:a6:ff:af:0d:d5:
84:4a:2f:24:b3:a9:bd:9b:2c:3a:4e:5f:39:39:36:73:f0:04:
8f:a1:68:d7:45:c3:a3:cf:81:9e:bb:48:6a:02:f0:8b:24:7a:
4b:98:e7:38:aa:aa:db:ff:71:94:fc:3a:04:14:5a:7d:1d:0d:
14:35:fa:c9:33:fc:b3:2e:f9:bd:6b:d0:ae:09:c4:11:79:9a:
7e:db:64:78:cc:de:18:94:f2:4e:2a:eb:31:d9:3a:54:f5:fd:
a9:b9:6f:8f:c4:08:28:d0:ab:ef:91:87:b6:89:d8:dd:64:b1:
c3:9e:b3:6e:7f:44:b7:1c:48:cb:4a:ca:25:eb:3c:a8:18:ca:
f8:73:e3:56:03:7f:46:dc:cb:f5:5f:a6:1d:96:af:7f:9b:f7:
30:ef:af:23:b4:3a:c4:81:8f:8a:9c:b7:4e:f1:f6:f1:4f:f0:
d0:ee:08:b7:4c:01:80:e6:a1:b3:40:0b:94:43:5e:50:5a:d6:
7d:eb:8a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:47 2025 by rpki-client