Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: qxo7x2HXGTizd+Cmr2s72yWKXLleqPI+mH9Uj/3fQig=
Subject key identifier: EB:6B:4F:35:96:AA:09:54:3D:37:1D:39:EE:98:DB:C5:F6:83:C3:56
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 01989D149843C55B9A4D03C4B4D9C53CDD4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 07:00:29 +0000
Manifest this update: Tue 12 Aug 2025 07:00:29 +0000
Manifest next update: Wed 13 Aug 2025 07:00:29 +0000
Files and hashes: 1: K0hhdmIt7Y7kQYBfthadwHAEzT8.roa (hash: e/JVp+UZ3ruylLloiq9C0e2gilOSNxXij9evAIBs/SY=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: 4Sh2UUwXkuQ3TCOAHEr4E3l73aqUgmaFu/2ntDTfndY=)
3: xaz-RCI9-nRuCGX3szsn__1z8Vo.roa (hash: 5Ems0TBLY+pDm7C97m9B3xtORqLRHwyf8CR1NhnJpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:14:98:43:c5:5b:9a:4d:03:c4:b4:d9:c5:3c:dd:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Aug 12 07:00:29 2025 GMT
Not After : Aug 13 07:00:29 2025 GMT
Subject: CN=eb6b4f3596aa09543d371d39ee98dbc5f683c356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:ba:80:76:77:42:36:3c:b7:2d:32:3d:ed:
da:af:1a:2a:58:a5:26:f4:5a:de:5b:86:45:ed:8a:
47:0b:f8:15:0c:9d:82:07:a0:a9:c1:a6:96:95:0e:
d6:93:00:cf:49:a7:ec:ac:23:20:fd:e5:89:6c:73:
56:a2:59:51:fe:75:c7:e0:32:55:8c:ff:e2:0f:af:
97:29:e1:c4:87:df:8f:24:f4:fe:cb:ab:9b:72:18:
26:de:69:04:79:38:e9:8a:c9:5c:e4:28:d6:71:fe:
32:04:e7:22:ff:f6:ee:b0:13:40:88:30:6d:3e:81:
eb:ef:2e:1b:9e:4d:e4:ba:d8:44:a9:91:42:bf:f9:
85:77:a8:b6:a5:e6:72:bb:14:7b:48:f8:24:1b:6e:
55:45:b2:a5:89:81:b1:55:c7:78:e0:31:ef:ad:7f:
7f:cd:9a:95:8f:2a:97:5d:19:b6:c6:f9:8b:cd:41:
e4:23:49:75:cb:d8:cd:1e:0f:48:d8:81:ec:e5:bd:
40:65:2b:e0:9c:2d:c3:40:4d:69:d5:21:19:3b:e6:
5f:c8:0e:81:d1:fd:4f:40:30:70:b2:3b:54:40:79:
60:84:c3:9b:6b:7b:03:51:d2:59:a7:f4:40:f6:6c:
26:5b:b4:80:fe:66:c0:c9:20:12:4b:1b:88:cf:6f:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6B:4F:35:96:AA:09:54:3D:37:1D:39:EE:98:DB:C5:F6:83:C3:56
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c2:ca:30:c7:98:ee:0a:10:03:6f:b8:01:92:e3:a1:cb:21:
f7:41:3e:f6:02:26:b9:e9:b0:01:78:4f:af:5a:70:c3:26:1e:
50:af:d5:ec:13:a2:31:d7:31:db:d7:d0:47:f5:37:42:35:2d:
b7:71:5d:73:35:a0:67:e3:23:8a:c4:ff:a7:3b:7a:ef:d2:e1:
02:1b:30:bd:75:bb:7c:e3:37:9b:e3:34:9d:0b:40:51:9c:81:
f1:e2:ce:30:dc:39:b7:d3:62:53:a6:51:bd:2f:a7:a1:1b:22:
35:0c:0b:3b:e9:fa:b5:87:28:d9:24:b8:e9:f8:40:99:77:9f:
82:e7:b6:55:b6:0b:0b:02:67:41:ce:74:37:38:db:24:27:e9:
c9:b7:50:28:a8:ca:2a:31:84:ec:36:12:6c:72:19:f6:81:77:
f9:9a:7e:9b:3e:51:d4:34:29:49:67:9b:22:8b:c8:ff:69:a7:
e3:d5:6f:51:4c:25:87:94:62:74:78:4b:9b:e8:d2:24:b0:03:
8a:87:11:7b:6a:e6:85:43:5b:d4:d9:86:5d:f2:83:77:2a:a8:
18:5d:55:ae:c0:0f:78:be:4b:d1:ae:d3:c8:45:6e:1a:9e:ea:
a4:59:89:18:6e:b1:7e:8b:1c:fd:f2:db:b8:42:5b:75:7a:15:
ed:6d:a5:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZidFJhDxVuaTQPEtNnFPN1MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMDMwMjA1ZmEzNjVlOWY0OWZmNGVhNzUwNmRmOTEyZDVl
ZDgzNjAwHhcNMjUwODEyMDcwMDI5WhcNMjUwODEzMDcwMDI5WjAzMTEwLwYDVQQD
EyhlYjZiNGYzNTk2YWEwOTU0M2QzNzFkMzllZTk4ZGJjNWY2ODNjMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiK6gHZ3QjY8ty0yPe3arxoqWKUm
9FreW4ZF7YpHC/gVDJ2CB6CpwaaWlQ7WkwDPSafsrCMg/eWJbHNWollR/nXH4DJV
jP/iD6+XKeHEh9+PJPT+y6ubchgm3mkEeTjpislc5CjWcf4yBOci//busBNAiDBt
PoHr7y4bnk3kuthEqZFCv/mFd6i2peZyuxR7SPgkG25VRbKliYGxVcd44DHvrX9/
zZqVjyqXXRm2xvmLzUHkI0l1y9jNHg9I2IHs5b1AZSvgnC3DQE1p1SEZO+ZfyA6B
0f1PQDBwsjtUQHlghMOba3sDUdJZp/RA9mwmW7SA/mbAySASSxuIz2/S6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtrTzWWqglUPTcdOe6Y28X2g8NWMB8GA1UdIwQY
MBaAFE8DAgX6Nl6fSf9Op1Bt+RLV7YNgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8zYzhkYTUtYThlOS00YTRmLTgxNjgt
M2NlNjExY2I2Nzk5LzEvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8zYzhkYTUtYThlOS00YTRmLTgxNjgtM2NlNjExY2I2Nzk5
LzEvVHdNQ0JmbzJYcDlKXzA2blVHMzVFdFh0ZzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecLKMMeY
7goQA2+4AZLjocsh90E+9gImuemwAXhPr1pwwyYeUK/V7BOiMdcx29fQR/U3QjUt
t3FdczWgZ+MjisT/pzt679LhAhswvXW7fOM3m+M0nQtAUZyB8eLOMNw5t9NiU6ZR
vS+noRsiNQwLO+n6tYco2SS46fhAmXefgue2VbYLCwJnQc50NzjbJCfpybdQKKjK
KjGE7DYSbHIZ9oF3+Zp+mz5R1DQpSWebIovI/2mn49VvUUwlh5RidHhLm+jSJLAD
iocRe2rmhUNb1NmGXfKDdyqoGF1VrsAPeL5L0a7TyEVuGp7qpFmJGG6xfosc/fLb
uEJbdXoV7W2lOQ==
-----END CERTIFICATE-----
Generated at Tue Aug 12 14:33:58 2025 by rpki-client