Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
File: TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft (raw, json)
Hash identifier: 6UNzFi0jvQPJjkyCoYs5Lv03AeBFkscg7xQ9rUhVYoM=
Subject key identifier: 54:49:EE:C4:9D:36:05:98:2E:E4:82:BB:04:D5:1D:DA:2E:00:AD:58
Authority key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Certificate issuer: /CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Certificate serial: 019678688B7370FE5F62D115DE26B2F930ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
Manifest number: 09A4
Signing time: Sun 27 Apr 2025 18:00:39 +0000
Manifest this update: Sun 27 Apr 2025 18:00:39 +0000
Manifest next update: Mon 28 Apr 2025 18:00:39 +0000
Files and hashes: 1: TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl (hash: USL1Er+XYug3IP10DJsVElIKYN6raO/jl516ZG0vCvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:8b:73:70:fe:5f:62:d1:15:de:26:b2:f9:30:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Validity
Not Before: Apr 27 18:00:39 2025 GMT
Not After : Apr 28 18:00:39 2025 GMT
Subject: CN=5449eec49d3605982ee482bb04d51dda2e00ad58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b1:9a:fa:6d:d9:cd:b1:84:45:83:0c:1a:da:
9f:25:d8:a9:b1:99:2a:25:cc:e4:7e:0d:d7:59:68:
f6:66:4e:ad:9b:fb:7c:39:e7:b7:6e:dc:f6:c8:89:
ef:11:88:d9:db:8d:13:ab:0f:af:83:8e:d1:ad:03:
81:b4:b9:dc:a3:51:ee:48:ae:55:af:0c:6d:e7:fb:
08:f9:40:1c:62:ab:24:92:c8:d1:65:25:3c:97:7e:
2e:cd:42:de:ef:51:0a:02:37:4d:13:41:ce:68:f4:
e9:55:c6:82:a8:76:9c:9b:3c:9c:c3:13:c8:48:30:
95:be:f8:0e:7a:f2:5f:49:a0:c0:25:aa:40:00:af:
13:ad:d5:9d:9b:c7:e0:60:7b:50:78:f1:7b:ea:2f:
62:95:6e:a6:9d:f0:99:d1:73:b9:e1:28:0c:a0:de:
54:86:b2:fd:b5:22:e2:ff:a4:76:ee:be:ec:1f:53:
84:76:f2:dd:85:87:26:85:01:57:1b:e4:30:e9:cb:
46:12:81:19:32:a0:2c:99:ef:24:a1:c3:fe:57:ed:
ec:41:03:a3:cc:a0:c8:e1:5b:02:41:71:8a:8a:04:
77:f1:21:d1:fb:1a:13:ed:19:18:66:5c:ce:75:23:
91:23:78:36:c1:f3:87:5d:fb:10:a1:cc:41:d0:b5:
1a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:49:EE:C4:9D:36:05:98:2E:E4:82:BB:04:D5:1D:DA:2E:00:AD:58
X509v3 Authority Key Identifier:
keyid:4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b0:97:5a:db:40:e7:7d:53:e9:b5:3a:bb:93:9e:a6:59:dc:
49:0e:80:cd:2d:e5:b5:04:6d:ef:49:c3:af:fe:da:d4:ab:f3:
38:f4:2c:17:06:dd:fb:36:70:d2:aa:8a:05:34:73:d5:d5:06:
69:f1:0b:f1:6e:d8:8a:d0:f8:a0:ca:2f:5b:84:a1:4f:00:b6:
c6:24:0d:0d:1a:d3:be:63:ac:7f:a7:97:3a:e1:f8:76:f4:04:
de:0e:87:35:22:3c:fb:4b:33:40:df:db:f6:33:12:23:4a:81:
15:d4:7c:21:10:03:2a:c9:e8:4b:08:c0:f0:54:7c:15:ae:fd:
e9:16:b3:16:6f:52:56:20:82:36:bc:4a:b0:78:31:6a:27:05:
32:7a:c5:d5:4e:9a:c4:2d:2f:16:a2:e3:55:32:d0:c1:27:4d:
58:d8:f4:8f:00:36:68:ab:48:ea:f8:8a:ae:69:22:54:98:8b:
4f:bb:23:14:20:39:ea:d0:c8:a2:11:99:5f:89:c2:9b:ff:21:
8a:73:ae:63:ba:78:5d:3f:2d:34:cc:28:27:85:72:65:c2:21:
4f:39:8c:e1:4e:03:1b:53:5b:1d:1a:5c:fa:59:d6:a6:25:84:
a8:62:b7:25:39:50:3e:e5:1f:1b:3f:13:c9:cf:1f:5e:14:23:
d4:07:a7:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aItzcP5fYtEV3iay+TDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMDQ2ZGZkZWU4ZmNjOTJkNzQwZTBiYjhjOGI4MjkzMTU1
YTE0YmUwHhcNMjUwNDI3MTgwMDM5WhcNMjUwNDI4MTgwMDM5WjAzMTEwLwYDVQQD
Eyg1NDQ5ZWVjNDlkMzYwNTk4MmVlNDgyYmIwNGQ1MWRkYTJlMDBhZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrGa+m3ZzbGERYMMGtqfJdipsZkq
Jczkfg3XWWj2Zk6tm/t8Oee3btz2yInvEYjZ240Tqw+vg47RrQOBtLnco1HuSK5V
rwxt5/sI+UAcYqskksjRZSU8l34uzULe71EKAjdNE0HOaPTpVcaCqHacmzycwxPI
SDCVvvgOevJfSaDAJapAAK8TrdWdm8fgYHtQePF76i9ilW6mnfCZ0XO54SgMoN5U
hrL9tSLi/6R27r7sH1OEdvLdhYcmhQFXG+Qw6ctGEoEZMqAsme8kocP+V+3sQQOj
zKDI4VsCQXGKigR38SHR+xoT7RkYZlzOdSORI3g2wfOHXfsQocxB0LUa2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFRJ7sSdNgWYLuSCuwTVHdouAK1YMB8GA1UdIwQY
MBaAFE8Ebf3uj8yS10Dgu4yLgpMVWhS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zODA5NGItYzQ3Yi00YjZjLTkxZTMt
MTEzZjRmNmQ1NWUzLzEvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zODA5NGItYzQ3Yi00YjZjLTkxZTMtMTEzZjRmNmQ1NWUz
LzEvVHdSdF9lNlB6SkxYUU9DN2pJdUNreFZhRkw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqLCXWttA
531T6bU6u5OeplncSQ6AzS3ltQRt70nDr/7a1KvzOPQsFwbd+zZw0qqKBTRz1dUG
afEL8W7YitD4oMovW4ShTwC2xiQNDRrTvmOsf6eXOuH4dvQE3g6HNSI8+0szQN/b
9jMSI0qBFdR8IRADKsnoSwjA8FR8Fa796RazFm9SViCCNrxKsHgxaicFMnrF1U6a
xC0vFqLjVTLQwSdNWNj0jwA2aKtI6viKrmkiVJiLT7sjFCA56tDIohGZX4nCm/8h
inOuY7p4XT8tNMwoJ4VyZcIhTzmM4U4DG1NbHRpc+lnWpiWEqGK3JTlQPuUfGz8T
yc8fXhQj1AenBw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:57:03 2025 by rpki-client