Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
File: TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft (raw, json)
Hash identifier: BRxAsOFtuDsmmmFkP3fdh1r3XP8trbPNGb3G9TtORwk=
Subject key identifier: A2:31:EE:42:A1:0E:0C:56:E2:EA:9D:CF:FB:35:EC:43:96:46:CB:1D
Authority key identifier: 4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
Certificate issuer: /CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Certificate serial: 01967C45D989A49FC5A4D3B5C05C3DC4998B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
Manifest number: 09A6
Signing time: Mon 28 Apr 2025 12:01:14 +0000
Manifest this update: Mon 28 Apr 2025 12:01:14 +0000
Manifest next update: Tue 29 Apr 2025 12:01:14 +0000
Files and hashes: 1: TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl (hash: B4Ru1nvgq9GUnDmzpxMoENmkXnJcc1Qh1zNJF6B46L8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:d9:89:a4:9f:c5:a4:d3:b5:c0:5c:3d:c4:99:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f046dfdee8fcc92d740e0bb8c8b8293155a14be
Validity
Not Before: Apr 28 12:01:14 2025 GMT
Not After : Apr 29 12:01:14 2025 GMT
Subject: CN=a231ee42a10e0c56e2ea9dcffb35ec439646cb1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:dd:95:9c:f0:e9:b0:fd:81:5e:3d:9f:3a:
fe:02:86:b5:8c:2a:5a:77:68:bf:3d:5d:bb:9c:38:
a1:55:92:7f:6b:c2:24:02:95:4f:75:72:c3:ff:4a:
c1:1a:ed:88:e2:5d:12:ef:3a:4f:de:4e:c7:ef:c5:
52:48:60:b1:01:fe:84:f2:9f:ea:db:d2:df:c0:ec:
9d:25:08:90:19:30:3c:b6:60:cb:24:28:cf:2a:ee:
a3:30:fa:f1:36:95:8b:1b:cc:d3:c9:78:2c:bb:35:
4a:c6:ba:98:d4:a8:98:9d:ae:70:e6:62:09:f6:4f:
f9:e2:e0:0a:c1:dd:2e:87:22:ea:99:b8:3b:f0:e1:
c3:04:01:2f:99:eb:3b:4c:97:bb:69:b8:ba:99:8b:
2d:46:38:67:73:16:9b:4c:82:c7:19:5b:87:89:e2:
5e:40:d8:62:8b:2e:c1:63:30:0b:63:69:99:ba:c7:
bd:0c:b3:62:37:bf:7e:d2:51:93:a3:f5:5b:35:bd:
c2:20:70:2f:b9:f2:de:d3:7b:8e:1a:70:56:ff:24:
d1:0c:cf:ad:68:6d:07:e3:50:e9:23:b0:2c:90:7d:
cf:9d:00:9c:83:35:49:85:d6:bc:5a:bf:8f:57:c5:
b3:88:fb:47:47:ec:66:1e:c7:43:51:cb:ef:89:46:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:31:EE:42:A1:0E:0C:56:E2:EA:9D:CF:FB:35:EC:43:96:46:CB:1D
X509v3 Authority Key Identifier:
keyid:4F:04:6D:FD:EE:8F:CC:92:D7:40:E0:BB:8C:8B:82:93:15:5A:14:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwRt_e6PzJLXQOC7jIuCkxVaFL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/38094b-c47b-4b6c-91e3-113f4f6d55e3/1/TwRt_e6PzJLXQOC7jIuCkxVaFL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:51:fa:5a:1d:a3:fa:b2:1f:51:95:a6:2c:37:f8:9d:ae:79:
33:e5:8b:63:37:6b:7d:2c:cf:bf:51:0a:75:a0:20:a2:12:e6:
dc:63:ee:e7:30:6a:49:64:44:a0:c3:9e:dd:71:5b:d7:1a:28:
a5:01:1f:73:95:b1:be:09:aa:f3:4e:83:9f:4b:48:c0:28:d5:
e7:58:62:12:44:dd:77:1d:71:1b:2e:05:b8:36:39:bc:f7:4e:
a1:9e:03:d9:f0:1f:20:bf:a5:15:47:d3:1f:22:c2:4e:46:fe:
e8:a4:c3:5c:95:fe:ab:26:25:34:2a:4e:ad:6a:57:54:ce:a1:
13:7d:b0:04:fa:2f:5d:da:10:21:99:5c:98:84:7e:14:2f:44:
14:24:ac:8e:e9:dd:c2:3d:e5:43:9c:fc:a1:90:54:0c:d0:30:
19:1f:2b:22:d4:24:8d:21:b9:98:00:8f:fd:55:c2:28:a8:c6:
40:b2:71:a9:d7:2f:9f:9a:a5:14:b0:25:b5:c9:8c:76:45:5f:
93:54:ae:c0:60:0f:0e:23:ba:48:f9:ad:f3:86:1b:8d:b6:5c:
4c:84:0a:11:df:f7:a6:ac:54:f5:be:d6:97:b5:9b:87:a9:d0:
cd:89:4b:fa:aa:42:e2:1d:f3:c1:c3:b2:44:d2:4f:61:e7:46:
3b:96:8f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:49:30 2025 by rpki-client