Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: mgO0p2nmeZYhPch7cp+minAuPDlz9REJdOVT8DgYvg4=
Subject key identifier: 03:89:6D:06:54:52:29:44:86:19:E6:9B:A2:9B:B9:6B:44:F6:4C:87
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 019A5187D7B6994E40837A2CFD1F968B2F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 01:00:48 +0000
Manifest this update: Wed 05 Nov 2025 01:00:48 +0000
Manifest next update: Thu 06 Nov 2025 01:00:48 +0000
Files and hashes: 1: K0hhdmIt7Y7kQYBfthadwHAEzT8.roa (hash: e/JVp+UZ3ruylLloiq9C0e2gilOSNxXij9evAIBs/SY=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: YsjNhcTaIixHQJRK/qfbSomHRXVUXiK4tPcOqD3xR7o=)
3: xaz-RCI9-nRuCGX3szsn__1z8Vo.roa (hash: 5Ems0TBLY+pDm7C97m9B3xtORqLRHwyf8CR1NhnJpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:d7:b6:99:4e:40:83:7a:2c:fd:1f:96:8b:2f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Nov 5 01:00:48 2025 GMT
Not After : Nov 6 01:00:48 2025 GMT
Subject: CN=03896d06545229448619e69ba29bb96b44f64c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:be:66:20:54:dc:1d:8e:db:40:40:39:b7:
30:85:a4:9b:78:54:11:11:66:c4:06:2f:f0:a4:1e:
cf:73:92:81:be:5c:fc:8d:0f:03:24:2e:24:e8:6e:
3f:ab:52:5e:98:51:4a:11:23:60:19:20:c0:ac:56:
f0:0d:29:80:4c:64:6a:14:c3:22:8d:f2:9e:42:7c:
7b:37:e4:e9:a1:6a:84:34:17:c8:66:b9:d7:0d:32:
b7:de:4c:b7:33:73:f8:9e:6a:f1:8a:95:0b:7a:e2:
4c:57:c7:51:76:59:fc:ac:b4:70:17:4c:c5:7e:cb:
65:74:2b:a7:bb:14:6f:75:4d:e0:9c:76:c3:30:4f:
82:cb:b5:39:42:5e:f2:67:c0:c4:2a:81:93:c4:e7:
d8:5e:6a:dd:db:60:85:54:88:1e:4b:65:f2:c7:86:
73:6b:21:1c:3b:9f:0d:1a:00:ed:b6:cd:28:e4:9a:
88:e5:41:e6:4f:f1:1d:84:b6:6d:b0:b3:91:7a:31:
6e:da:87:79:8e:a6:aa:1f:42:73:40:d3:54:2e:fa:
7e:5c:fd:ea:05:a7:c8:7d:e4:e3:84:d5:3f:15:ef:
11:b8:01:ea:78:f6:a5:c7:2b:61:41:76:a9:d3:a6:
ad:05:77:59:32:7a:b9:b8:72:f3:7b:7e:ba:26:85:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:89:6D:06:54:52:29:44:86:19:E6:9B:A2:9B:B9:6B:44:F6:4C:87
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:41:4f:d1:9b:fc:ee:54:65:dc:2e:ef:ff:5b:3c:20:b8:8f:
16:d0:d5:05:aa:c3:46:35:a4:89:e9:6d:69:2a:bd:2f:f4:68:
2b:9a:8a:a0:bf:da:b1:a9:e7:a9:70:2a:b2:86:62:b8:d3:52:
e7:15:b9:95:e1:15:7c:8c:91:47:34:6a:a3:1d:3c:53:ca:48:
68:8e:c4:67:f0:51:9b:d7:24:9d:b8:88:e7:87:fe:6a:d2:b1:
77:67:e0:96:8a:de:be:2a:92:ff:75:dd:c9:30:15:6b:19:8e:
69:9e:30:c2:11:e0:70:b5:cc:e8:ca:0d:87:59:11:1f:0f:f4:
25:92:9c:d8:a8:ba:e3:2a:db:04:b6:9e:16:15:80:ce:56:7c:
92:c3:56:05:d5:cc:0a:63:98:75:5a:76:c6:cc:64:7f:2d:77:
eb:4a:91:e9:f3:b7:0c:9a:e8:a3:e6:db:23:23:89:67:fa:18:
96:86:3a:5f:35:cf:0b:cf:0c:25:de:61:94:d4:34:94:26:84:
23:29:98:11:90:26:e1:17:32:85:71:53:a1:e4:cf:56:59:89:
7a:01:69:a2:57:8d:71:ac:25:3c:87:1d:9c:61:c2:a8:33:c7:
00:32:de:ac:15:68:f4:39:22:79:60:b4:73:4f:4d:08:30:5c:
dd:f1:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:27:53 2025 by rpki-client