Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File: Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier: OqyhlOAyAkWk/0Hhn8U57YQEJxHEl0Dmwpd6ZBZFZAs=
Subject key identifier: 4D:20:C0:40:41:34:1B:CF:0B:0B:7F:EB:42:92:D7:8B:13:BE:4A:50
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial: 019A53761F03C967552E7CA51064DD605B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number: 1718
Signing time: Wed 05 Nov 2025 10:00:41 +0000
Manifest this update: Wed 05 Nov 2025 10:00:41 +0000
Manifest next update: Thu 06 Nov 2025 10:00:41 +0000
Files and hashes: 1: 16-jUNfPaeEDFi2CG2Dls7NK5lg.roa (hash: 9zFXZ8EDGdJp6On1sZ8dp628uiNp48YN4eESkdpnuOk=)
2: Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa (hash: Akg6x/rEJSguP5W8rh7uM4jAx65nBcfWuXfFgKDQBlY=)
3: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: 3xPLAYRlF8q0D99jPEl0MxQOl2loN6ifkBmasCwAYLM=)
4: o6HBbNZybM1pciBKfo5UVkJuRLw.roa (hash: rmfHjVx3VwSeRbFJh3vlHLLWzQKd4J8HNXED4xlCmoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:1f:03:c9:67:55:2e:7c:a5:10:64:dd:60:5b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Validity
Not Before: Nov 5 10:00:41 2025 GMT
Not After : Nov 6 10:00:41 2025 GMT
Subject: CN=4d20c04041341bcf0b0b7feb4292d78b13be4a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:f8:d3:48:f9:1a:cb:63:51:40:0b:14:30:
27:cc:9a:15:91:d7:31:e2:94:17:54:0d:22:85:ea:
65:0d:b5:c7:10:38:c6:f8:53:d7:91:f6:1a:9a:eb:
c2:e0:f9:c6:ba:d7:13:34:f3:99:7b:99:0b:f8:65:
83:d4:bf:fc:f5:90:31:b6:ad:41:1c:c2:be:d4:8a:
f2:c2:47:94:48:d7:65:b6:2d:ec:c3:2c:91:34:bb:
cf:d8:b1:65:bc:96:ad:1c:e6:51:d8:a2:39:79:00:
a2:0c:14:49:31:73:b9:7e:60:d6:c6:b1:df:74:40:
c4:9c:18:fe:c8:3c:d9:66:9e:0f:06:b3:9a:84:7f:
b7:55:13:c7:63:db:b0:75:7a:e5:fd:c8:61:87:4a:
80:e0:3c:98:b0:ac:39:b0:9e:3e:84:f4:71:17:8f:
54:83:64:47:e3:dd:09:58:ec:91:b7:db:37:cf:f4:
9f:f8:f8:6f:eb:74:28:93:87:b3:c0:cb:f2:5e:ca:
5c:20:14:2c:94:1d:0d:18:a7:3d:e7:c2:f7:10:e0:
63:3c:04:4b:fd:f2:e1:10:0c:38:5e:70:d6:dd:c1:
d2:8b:6a:67:5c:61:70:c1:ea:29:fc:80:76:a9:56:
89:96:76:27:fa:e6:90:cc:a5:fc:db:9a:72:55:83:
cf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:20:C0:40:41:34:1B:CF:0B:0B:7F:EB:42:92:D7:8B:13:BE:4A:50
X509v3 Authority Key Identifier:
keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:e4:bc:74:65:5f:92:20:a6:2a:e2:0f:34:5c:4c:0b:6e:4f:
1d:c2:9b:9f:0a:9b:34:6b:c3:3c:5d:0f:e8:7b:ab:d9:e5:59:
7c:67:06:45:0f:74:fc:a2:b9:94:8c:4a:d5:f7:a1:8f:70:ee:
cb:ba:5a:2d:fc:89:31:26:ff:7a:b5:23:d3:00:0e:d2:18:6c:
f7:2c:fd:83:64:cf:85:28:f3:9e:1b:5b:4d:c7:4c:b6:e9:28:
71:37:df:80:7d:47:09:6e:e8:c8:4e:30:3e:a5:b2:7c:70:ef:
51:91:55:4e:92:2d:d3:03:b3:e2:fa:a3:6a:69:7c:fb:34:d6:
b5:cb:d9:bf:f9:c5:2c:80:c2:67:f3:d5:af:55:2c:83:e9:23:
d5:73:1a:ef:f8:5d:2b:2e:2f:e6:39:07:cb:79:00:97:4b:0a:
c4:1e:c6:dc:53:71:2c:d4:3b:a3:09:10:b5:7e:65:46:87:60:
55:8a:02:92:d2:bb:cb:d2:a0:2d:bb:81:75:3f:3e:24:c7:f4:
ca:70:40:47:a8:38:f8:e4:65:c4:6e:6f:96:b2:f1:07:4b:21:
8a:cf:38:a1:b9:c1:b3:b0:a8:e6:53:86:95:97:48:7f:85:d4:
41:e1:b8:a0:f4:67:9b:0a:f5:02:96:df:2b:9c:92:39:6a:f3:
b3:82:58:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:29:44 2025 by rpki-client