Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
File: TwMCBfo2Xp9J_06nUG35EtXtg2A.mft (raw, json)
Hash identifier: zr0dAGU/GQZpFou2atAEpQWk6nHDabOaiJDfjWBWvLM=
Subject key identifier: E6:FE:FA:00:61:06:7D:9B:EB:B1:61:35:37:4D:BB:BC:52:53:CE:D9
Authority key identifier: 4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
Certificate issuer: /CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Certificate serial: 01976FD0BBC08454793B381C759D409B85ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 19:00:39 +0000
Manifest this update: Sat 14 Jun 2025 19:00:39 +0000
Manifest next update: Sun 15 Jun 2025 19:00:39 +0000
Files and hashes: 1: K0hhdmIt7Y7kQYBfthadwHAEzT8.roa (hash: e/JVp+UZ3ruylLloiq9C0e2gilOSNxXij9evAIBs/SY=)
2: TwMCBfo2Xp9J_06nUG35EtXtg2A.crl (hash: Ih+C4QCUvCai8qWgoiafL2AogGKTLPAC5UCfngAKvec=)
3: xaz-RCI9-nRuCGX3szsn__1z8Vo.roa (hash: 5Ems0TBLY+pDm7C97m9B3xtORqLRHwyf8CR1NhnJpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:bb:c0:84:54:79:3b:38:1c:75:9d:40:9b:85:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f030205fa365e9f49ff4ea7506df912d5ed8360
Validity
Not Before: Jun 14 19:00:39 2025 GMT
Not After : Jun 15 19:00:39 2025 GMT
Subject: CN=e6fefa0061067d9bebb16135374dbbbc5253ced9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:d5:e8:d8:81:60:f6:f9:7c:c7:cc:51:82:
81:bb:ac:33:9c:0d:42:92:eb:92:69:d3:29:f3:20:
21:4c:8a:41:2f:6a:d5:f6:9b:56:bf:d1:57:ff:42:
f8:2c:ce:2f:7b:62:91:d3:1b:bf:94:88:a0:59:a6:
70:df:7e:b6:67:91:58:d8:a3:cc:8c:0c:9d:20:61:
be:ee:1a:f2:75:41:9a:0e:8b:e4:f5:58:1e:93:a7:
45:7c:fb:fc:62:ea:92:7b:a4:73:73:27:5c:cb:71:
6f:db:36:87:66:fe:52:9e:49:2f:b3:b6:a2:2a:6c:
b7:ba:e2:82:31:94:14:83:ba:bd:1c:23:d3:4e:6b:
58:1e:bd:42:8e:ec:1e:52:cd:2b:86:b2:59:52:76:
41:8d:67:da:50:df:67:4e:3a:84:cb:36:aa:6f:91:
56:d0:39:a8:42:58:a9:29:54:2c:c1:9d:90:64:f8:
ff:c9:3e:32:6c:a1:75:3e:09:5e:59:a5:dc:5c:65:
74:5f:eb:19:17:d4:6b:29:c7:fc:02:a5:ab:06:df:
68:cd:81:16:ad:6e:44:22:3d:85:ee:df:8c:ea:17:
cb:37:96:51:4d:78:d9:3e:4d:6e:41:ac:01:3f:b2:
68:8d:db:61:1a:9b:4c:d5:06:f0:be:7b:c4:a5:8e:
9b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:FE:FA:00:61:06:7D:9B:EB:B1:61:35:37:4D:BB:BC:52:53:CE:D9
X509v3 Authority Key Identifier:
keyid:4F:03:02:05:FA:36:5E:9F:49:FF:4E:A7:50:6D:F9:12:D5:ED:83:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TwMCBfo2Xp9J_06nUG35EtXtg2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3c8da5-a8e9-4a4f-8168-3ce611cb6799/1/TwMCBfo2Xp9J_06nUG35EtXtg2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1a:69:09:ad:60:8b:95:d6:ad:41:49:06:6c:9f:88:fd:6c:
ee:83:fc:95:f9:83:ca:06:59:99:2f:95:16:05:3b:e1:3c:8f:
bf:07:fe:d7:98:0c:af:c4:75:63:68:fc:6a:44:bc:62:43:19:
07:7f:e2:88:be:81:74:91:99:6d:15:e1:36:6f:05:ce:2f:e5:
3f:90:20:31:d6:41:ac:df:e2:93:ff:6c:1f:26:93:df:83:b8:
7b:52:1a:e9:af:88:98:2f:67:6d:64:a8:e9:33:47:1b:8c:2e:
cf:33:3c:d4:78:f2:1d:46:fd:f5:67:54:1e:a1:e0:4c:e4:c5:
b2:ce:48:f1:7f:54:b6:a2:cd:54:99:c2:66:19:de:74:f3:f9:
f2:14:35:d6:f7:cb:39:88:26:f9:d1:d8:36:21:ef:04:2b:8a:
fa:e2:b2:25:4a:8f:0f:f5:de:c9:dc:74:c3:f8:0f:2b:1e:a2:
65:a2:aa:16:c1:c9:f1:09:6e:2d:f8:da:94:b0:43:44:c8:5d:
dd:52:6a:d4:5e:7e:1a:7a:a2:14:e2:4a:b5:2a:c1:23:ae:3e:
9c:a4:a4:fb:64:79:d6:17:ec:c6:2e:b2:d1:c1:ff:ce:98:54:
82:19:56:19:4e:0b:b2:9b:c6:a4:02:f4:74:07:38:e1:a1:4a:
1e:53:fa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:05:01 2025 by rpki-client