Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
File: TWJ4HKFDbZbWd1uiDFzyx139E-k.mft (raw, json)
Hash identifier: 2riSBupWzTTJMZUm5eE/zZ6RYZXuhmJVfI6Fgc0tcuY=
Subject key identifier: 79:33:AA:D2:63:08:F8:3D:A9:93:97:59:D3:CA:A4:5A:7D:FD:C6:DB
Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Certificate serial: 019A4E18D83D7FCD05642C76A6ADC2734D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
Manifest number: 1665
Signing time: Tue 04 Nov 2025 09:00:42 +0000
Manifest this update: Tue 04 Nov 2025 09:00:42 +0000
Manifest next update: Wed 05 Nov 2025 09:00:42 +0000
Files and hashes: 1: TWJ4HKFDbZbWd1uiDFzyx139E-k.crl (hash: FCUeOQsjvNahOpQibvvG2TCJN6fe+yQCQoQ8z0ctR54=)
2: aMDb2aqsB1gnaYoCsXASMw4mf7g.roa (hash: nKgevpuMWVmNTWjVHVyGbe988HLYNNZK38XCR2Z6V2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d8:3d:7f:cd:05:64:2c:76:a6:ad:c2:73:4d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Validity
Not Before: Nov 4 09:00:42 2025 GMT
Not After : Nov 5 09:00:42 2025 GMT
Subject: CN=7933aad26308f83da9939759d3caa45a7dfdc6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:52:0b:61:74:5a:98:bd:5f:fe:cf:72:22:b9:
28:a0:2e:59:4c:04:fc:d2:69:96:b3:6f:1d:fc:f0:
c8:ca:d8:e1:e6:86:97:eb:de:9d:f0:9d:b3:f5:98:
29:46:cf:b6:12:8a:d2:ec:d0:22:b6:12:ab:4e:c2:
fc:e7:5a:59:f8:b0:4f:e1:3e:e0:2d:c1:c9:b4:f8:
00:de:97:75:50:56:c0:20:20:1e:d8:f3:e7:49:f8:
15:d1:07:05:2f:00:f1:75:52:e8:00:03:11:2c:08:
1b:80:d0:13:a3:31:c0:64:84:82:0a:f0:ac:69:88:
c2:fc:f1:fb:3e:a3:8e:34:a1:fb:ba:2e:7e:d1:01:
ac:c6:cc:30:13:62:fa:8f:41:13:dd:b8:0f:b2:bb:
67:2e:7e:24:56:2c:97:f1:13:15:d6:38:f4:64:8b:
3b:b1:d0:84:a5:c2:d3:ea:98:32:72:ed:94:02:f5:
86:cc:54:79:22:67:b2:73:fa:ed:73:73:80:0a:a0:
a1:16:5b:1d:b7:27:f1:42:f9:02:7f:c3:7a:6b:b6:
67:ee:00:05:e0:38:15:36:fa:0d:36:be:1d:cc:56:
8a:89:a7:7c:b9:7e:cd:61:cb:af:59:35:45:2c:40:
d4:6e:09:18:17:1d:00:8c:12:41:1f:8e:56:c2:df:
7f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:33:AA:D2:63:08:F8:3D:A9:93:97:59:D3:CA:A4:5A:7D:FD:C6:DB
X509v3 Authority Key Identifier:
keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:4e:35:32:04:61:f5:a1:b7:bd:59:ee:79:ec:13:1d:0d:1f:
2e:52:cd:9a:0f:91:0b:67:15:94:95:33:20:ed:94:19:91:69:
cc:b0:7d:93:96:55:e8:77:c4:76:0b:d2:fb:7e:90:27:4e:62:
f8:bf:51:be:73:7c:c6:01:79:47:f3:b1:fd:ba:d8:ac:72:1e:
11:1c:b6:f0:b5:62:13:2a:55:74:db:9f:58:07:05:7b:ad:05:
77:45:d0:6d:2b:45:c3:dc:3c:ad:9e:72:ba:8e:fe:25:8a:c6:
ad:b2:c2:ab:b0:39:26:aa:a2:8d:5a:79:c9:2d:17:b2:a3:92:
27:9c:75:13:8c:b8:c8:c5:42:2a:43:87:03:1b:d0:86:3f:fa:
42:48:09:88:c8:26:59:8b:09:ab:88:39:2f:72:ea:55:ce:1c:
01:23:c1:26:e5:45:e0:e4:d6:37:4d:93:fc:47:69:30:77:06:
f2:09:6f:ac:ea:c7:c8:db:9d:3e:f1:58:89:90:02:9f:46:26:
0d:67:58:99:65:ca:70:a5:ed:d2:df:79:44:3a:a1:a5:ad:bf:
04:2a:98:c9:74:bc:71:54:b0:29:c1:fc:c1:32:d8:52:80:a7:
d1:91:5c:82:97:34:ef:1f:39:c3:83:59:f2:a8:2b:a4:03:99:
fc:ca:9f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:11 2025 by rpki-client