Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
File: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft (raw, json)
Hash identifier: w33cE9MpoMWmBokvnzM5VytsoszccplCeGUIouwCTAc=
Subject key identifier: 30:6A:C1:F4:B1:70:73:F8:E5:50:9E:40:3F:61:9B:49:B5:11:9E:A5
Authority key identifier: B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
Certificate issuer: /CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Certificate serial: 019A4EF55BFC1CFFBE74BBAB701940E19B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
Manifest number: 1089
Signing time: Tue 04 Nov 2025 13:01:33 +0000
Manifest this update: Tue 04 Nov 2025 13:01:33 +0000
Manifest next update: Wed 05 Nov 2025 13:01:33 +0000
Files and hashes: 1: tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl (hash: fLXDIqN0NIbI06Ld9eDSqFZk4EwBrTtiAyZhYKAmPcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:5b:fc:1c:ff:be:74:bb:ab:70:19:40:e1:9b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc3f0232303f5b037745ec53a66c738256bf43
Validity
Not Before: Nov 4 13:01:33 2025 GMT
Not After : Nov 5 13:01:33 2025 GMT
Subject: CN=306ac1f4b17073f8e5509e403f619b49b5119ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:d5:f9:ba:83:89:88:81:57:c8:52:07:a8:
65:a5:97:70:c1:06:d0:f2:60:10:c0:3b:6e:fb:cf:
78:13:f1:77:f6:af:b4:d5:69:53:ed:e1:8e:91:b8:
a4:fc:48:34:1f:5a:a9:b3:75:29:a4:5b:4a:83:1d:
d6:b5:06:fc:53:25:0a:30:11:6b:91:59:b4:a1:c8:
4f:03:e2:29:b3:26:06:93:dd:82:70:bd:19:67:5c:
1f:35:b8:b6:52:b0:29:e7:56:87:33:18:13:95:60:
85:26:96:46:e5:20:6f:3e:54:ba:9c:da:e8:d0:01:
c5:93:43:8c:e6:ab:5a:9b:2d:60:2c:12:f1:78:54:
aa:71:2b:2f:eb:48:1a:e3:13:95:bf:13:fc:56:f2:
a4:b2:4f:d7:a8:17:4d:cb:8b:77:07:85:2b:e5:61:
75:67:63:8c:d1:ca:a4:91:47:7f:2a:37:7b:b5:d1:
48:89:52:90:ef:3e:bf:08:7e:93:df:5c:2a:43:e5:
e8:07:21:52:ad:c0:f3:d4:90:12:30:8c:89:5c:a7:
ba:e4:f9:a6:60:6d:76:03:1b:35:73:e5:83:fb:a2:
09:2a:02:da:6d:de:11:49:b7:81:e7:3f:48:de:70:
26:d5:38:b7:2b:5a:2d:d8:50:1e:0b:60:b3:47:2d:
c1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6A:C1:F4:B1:70:73:F8:E5:50:9E:40:3F:61:9B:49:B5:11:9E:A5
X509v3 Authority Key Identifier:
keyid:B4:BC:3F:02:32:30:3F:5B:03:77:45:EC:53:A6:6C:73:82:56:BF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c521e5-f543-4027-9dc8-8f9e23c60606/1/tLw_AjIwP1sDd0XsU6Zsc4JWv0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:99:5e:06:76:05:48:d5:f5:cf:77:bf:95:9b:ec:55:70:08:
ed:dc:ba:cd:46:30:cb:0c:fd:96:96:c0:da:f8:dc:41:3c:4b:
1d:8c:c8:af:31:c3:1c:7c:2d:67:20:a2:35:e3:19:7f:8f:84:
5d:6f:2e:41:75:6f:89:d5:d3:93:b6:84:6f:b0:1a:a6:ca:33:
68:29:cd:5e:72:2b:d1:67:a3:b2:a4:83:a9:0a:f3:7b:37:6e:
ba:52:12:ec:c7:d9:a1:86:00:48:a3:6f:73:db:f1:5f:c6:3e:
7f:9e:d0:06:6c:f4:e4:8e:95:6f:c5:82:13:29:f2:fc:4a:79:
58:a6:b0:81:2a:cd:7d:6c:46:72:22:d5:a1:c5:0e:1f:6c:70:
99:e9:63:74:35:b4:bd:a0:c7:0a:1c:27:fc:11:8f:a7:ca:75:
03:3e:f5:d0:4c:23:0c:8e:16:90:2c:d2:ae:dc:f1:18:02:41:
28:ed:37:16:a7:0c:5b:0b:0a:bd:a1:61:d2:01:c5:59:73:00:
75:f1:03:62:45:e2:59:c8:ac:a1:77:a0:1b:95:55:23:ad:a2:
09:74:3a:80:05:6c:ea:29:61:11:57:b1:6a:aa:d1:26:4d:b0:
ab:b7:57:7c:2a:83:66:f0:ec:5f:8a:c0:2b:7e:2c:9c:1f:4d:
05:37:f6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:04:27 2025 by rpki-client