Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
File: TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft (raw, json)
Hash identifier: aCh5qh4fJDzppOPg3E4Y2a69UIQLCZL/Xc/Rx5DFcI4=
Subject key identifier: CB:BC:9D:CF:B6:A6:AD:9F:90:EC:EB:A5:EC:6C:49:64:F1:46:ED:BE
Authority key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Certificate issuer: /CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Certificate serial: 019A4D7480E64D3C6B49942C8C8714BD0CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
Manifest number: 0BA0
Signing time: Tue 04 Nov 2025 06:01:12 +0000
Manifest this update: Tue 04 Nov 2025 06:01:12 +0000
Manifest next update: Wed 05 Nov 2025 06:01:12 +0000
Files and hashes: 1: TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl (hash: ql56jmurL4GqD251W04R+jL+WwFioZLDoMijcePzSBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:80:e6:4d:3c:6b:49:94:2c:8c:87:14:bd:0c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Validity
Not Before: Nov 4 06:01:12 2025 GMT
Not After : Nov 5 06:01:12 2025 GMT
Subject: CN=cbbc9dcfb6a6ad9f90eceba5ec6c4964f146edbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:50:5d:e4:c3:1e:a8:01:13:a2:2b:df:d5:
fa:a5:28:05:6b:84:1b:2a:7b:1c:b3:c0:03:49:a9:
3d:fb:c4:ff:96:98:c9:49:07:5f:60:e3:ed:c3:19:
02:70:a2:42:ba:2c:ba:85:fa:c2:18:9e:e5:e1:22:
8f:8f:d9:8f:d5:bc:86:4e:5b:72:28:4a:e5:c0:05:
7c:8a:11:c5:54:f2:53:9d:dc:5d:75:1e:6e:16:a9:
45:ee:1d:4a:b4:a6:34:89:14:d0:ba:c4:ec:04:03:
bc:a2:bd:54:bb:ed:08:7a:2f:89:6e:c7:dd:32:59:
cb:65:58:c6:bd:4f:f8:80:e2:eb:13:6d:3c:b7:be:
9a:14:af:18:7c:d6:ef:fe:6f:d3:e9:5b:53:6b:59:
20:64:0f:b9:40:20:d5:b7:8b:e4:59:92:2e:e9:92:
d8:4d:d1:26:c7:09:16:fa:c6:7d:6e:eb:98:15:6e:
75:77:24:c0:ea:83:dc:5a:d5:61:7d:90:70:c1:c1:
c1:de:9e:d0:99:a7:83:f2:83:2b:18:54:a9:e4:18:
36:3f:44:57:62:1e:3a:61:5c:65:ae:0a:fe:c8:5f:
b3:b7:56:9e:0f:a6:ca:23:f2:e9:eb:a0:9b:80:3c:
83:4b:1a:6f:7e:e4:6f:b2:19:47:2d:23:c8:db:fb:
1c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BC:9D:CF:B6:A6:AD:9F:90:EC:EB:A5:EC:6C:49:64:F1:46:ED:BE
X509v3 Authority Key Identifier:
keyid:4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:98:6b:80:88:8c:f3:8d:c2:7c:5a:d2:2b:7c:12:62:76:85:
0a:2d:bf:5f:d7:55:39:1a:c4:74:64:fc:8a:5a:d4:1d:7f:aa:
ef:4e:cc:f6:f2:eb:7c:ca:44:fe:8b:e7:3f:9f:08:8c:5e:2d:
77:9a:44:eb:57:25:be:63:02:54:f4:ef:6d:c4:af:73:67:30:
4e:31:15:bd:12:9f:d0:77:62:6b:a3:18:af:2d:2a:67:b9:09:
d1:8c:f2:92:f4:ba:3a:a8:53:94:31:ae:ed:77:6f:0a:04:0b:
7e:aa:e2:44:11:4b:87:5c:87:74:2f:ab:c4:1f:b2:35:d0:68:
d8:52:72:f9:a0:9e:08:3a:b1:cc:ca:1b:57:89:5e:24:06:85:
1c:e9:68:5c:43:16:b5:01:8d:da:4d:79:90:61:fb:9f:a0:a6:
1a:87:21:3c:21:26:19:52:ad:0d:ab:f9:c7:30:e7:82:35:2f:
c2:2f:a5:b1:1c:02:5d:9c:3b:be:9d:07:f2:36:12:d2:6e:43:
61:ec:1b:a1:54:d0:58:f0:c2:be:10:0b:91:e6:26:c2:3a:09:
1b:00:5d:e8:c1:dd:4a:5f:c0:de:5f:7f:46:38:df:08:e7:03:
95:0b:b0:d3:7c:e7:f6:1f:9e:0b:1c:bc:73:ae:b4:69:59:4a:
03:95:9c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:36:26 2025 by rpki-client