Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier: wPWVeCeJJm9QJ01i4MTBGN9LgUzuwzdFzKddFOjVcs8=
Subject key identifier: 22:B6:FE:5B:64:6B:8A:DD:94:FF:4D:00:E2:42:48:32:DA:A8:02:6D
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 019A4DE176D098FEE521B23879FCCCCA1DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number: 0C6F
Signing time: Tue 04 Nov 2025 08:00:12 +0000
Manifest this update: Tue 04 Nov 2025 08:00:12 +0000
Manifest next update: Wed 05 Nov 2025 08:00:12 +0000
Files and hashes: 1: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: XzlL3bt/+yHJOUpKJzuGJyIAwuB/0ffNKrQ5U/szccE=)
2: v_CowcE5Ck3oJvuqy3X8AsMCrpA.roa (hash: R72iTRb1FtOGatFwyC/tAu8uMgwI2562hZtdzD4n6xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:76:d0:98:fe:e5:21:b2:38:79:fc:cc:ca:1d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Nov 4 08:00:12 2025 GMT
Not After : Nov 5 08:00:12 2025 GMT
Subject: CN=22b6fe5b646b8add94ff4d00e2424832daa8026d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:87:76:60:36:d6:ed:10:bc:e8:c1:40:d4:c5:
81:13:4a:3a:3f:df:81:21:16:f5:31:b3:17:dd:f9:
c5:49:b5:87:04:66:48:70:7c:c6:85:d3:49:dc:b0:
25:e5:db:c3:68:8e:9e:fe:de:9a:6a:27:4c:e7:d2:
7c:0a:96:6b:5f:45:b1:a4:32:42:e7:f4:81:bf:45:
12:dc:03:23:04:20:26:1d:c6:d9:5f:05:00:ef:c2:
bc:b5:ce:3c:bc:97:af:62:3f:ab:f9:36:f3:39:3c:
72:91:2c:50:d1:3f:fd:a9:6f:6a:81:5a:33:cd:b6:
02:f9:38:24:c2:a8:20:56:e4:84:12:f2:f1:c8:9a:
2f:ec:b3:a5:62:1c:83:3a:c1:8e:70:5f:c2:ae:c9:
c0:98:84:5f:48:30:74:24:1e:9b:fe:40:24:9d:7e:
20:0e:7d:6c:3c:8e:e8:d3:7a:5c:b1:43:18:53:e8:
45:5b:a7:75:2c:5a:46:30:e6:ee:f2:22:6d:17:f5:
29:84:f8:6e:27:65:ba:eb:85:a3:56:23:dd:a3:e9:
07:d8:1c:18:4a:59:2e:09:40:23:ed:31:21:82:88:
86:e4:a7:8f:cf:42:c4:6c:61:75:3e:56:13:60:60:
e0:0e:a1:38:6b:2d:54:49:3e:29:64:c2:a9:89:d4:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B6:FE:5B:64:6B:8A:DD:94:FF:4D:00:E2:42:48:32:DA:A8:02:6D
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:84:bd:4a:ae:80:31:31:4b:9f:12:b3:0d:0c:81:dd:2c:1c:
d4:6b:fa:a6:e5:28:78:94:aa:2c:e2:43:28:29:b8:56:49:00:
5d:17:04:0d:e5:9c:6d:0b:fe:f3:1b:74:83:46:41:7e:c6:6e:
26:e7:b4:97:3e:45:65:3f:c3:f0:80:18:ee:95:6c:90:ed:fc:
25:9d:77:0a:49:0a:64:e7:4d:96:2d:fe:0a:d6:88:db:e7:60:
f5:9a:1e:7c:2c:2a:b5:ec:27:96:20:84:b5:b5:d1:a3:3c:7c:
61:95:09:b0:f3:91:f2:a7:50:aa:68:83:97:bd:cf:ad:a6:86:
63:91:4e:5e:d9:ec:ef:b8:c9:7a:65:2a:61:66:19:b2:ce:cb:
10:91:20:23:f2:76:9d:0f:4e:b3:87:aa:33:ce:55:1d:a2:19:
f5:b4:6f:6c:a4:59:93:78:fc:45:24:2f:80:a1:64:df:e4:70:
71:5a:47:c0:19:46:5c:24:79:23:4e:6d:9e:e7:e1:28:a2:2a:
78:62:17:e6:ba:4a:3a:84:86:3f:92:5a:cd:3a:14:e7:0a:c3:
04:53:2c:47:d4:a7:8f:78:81:d2:87:19:1a:16:61:b2:9e:b5:
57:f0:5a:cd:21:10:b2:d8:00:38:ab:74:0c:23:ae:93:c7:88:
31:52:5f:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4XbQmP7lIbI4efzMyh39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiODdmNmI5MTE5ZmE5ZGNkM2UxMmU3ZTZiZmI3MDZkZmY5
Nzg4MjUwHhcNMjUxMTA0MDgwMDEyWhcNMjUxMTA1MDgwMDEyWjAzMTEwLwYDVQQD
EygyMmI2ZmU1YjY0NmI4YWRkOTRmZjRkMDBlMjQyNDgzMmRhYTgwMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64d2YDbW7RC86MFA1MWBE0o6P9+B
IRb1MbMX3fnFSbWHBGZIcHzGhdNJ3LAl5dvDaI6e/t6aaidM59J8CpZrX0WxpDJC
5/SBv0US3AMjBCAmHcbZXwUA78K8tc48vJevYj+r+TbzOTxykSxQ0T/9qW9qgVoz
zbYC+TgkwqggVuSEEvLxyJov7LOlYhyDOsGOcF/CrsnAmIRfSDB0JB6b/kAknX4g
Dn1sPI7o03pcsUMYU+hFW6d1LFpGMObu8iJtF/UphPhuJ2W664WjViPdo+kH2BwY
SlkuCUAj7TEhgoiG5KePz0LEbGF1PlYTYGDgDqE4ay1UST4pZMKpidREcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCK2/ltka4rdlP9NAOJCSDLaqAJtMB8GA1UdIwQY
MBaAFHuH9rkRn6nc0+Eufmv7cG3/l4glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYt
ZDc4NTE0ZTllODEyLzEvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZjNhYjEtNTk1OS00NWE4LWJjMGYtZDc4NTE0ZTllODEy
LzEvZTRmMnVSR2ZxZHpUNFM1LWFfdHdiZi1YaUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoS9Sq6A
MTFLnxKzDQyB3Swc1Gv6puUoeJSqLOJDKCm4VkkAXRcEDeWcbQv+8xt0g0ZBfsZu
Jue0lz5FZT/D8IAY7pVskO38JZ13CkkKZOdNli3+CtaI2+dg9ZoefCwqtewnliCE
tbXRozx8YZUJsPOR8qdQqmiDl73PraaGY5FOXtns77jJemUqYWYZss7LEJEgI/J2
nQ9Os4eqM85VHaIZ9bRvbKRZk3j8RSQvgKFk3+RwcVpHwBlGXCR5I05tnufhKKIq
eGIX5rpKOoSGP5JazToU5wrDBFMsR9Snj3iB0ocZGhZhsp61V/BazSEQstgAOKt0
DCOuk8eIMVJf7A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:34 2025 by rpki-client