Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File: TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier: PlW39/lqIZ0u9HWes9p/BxBCLfAEohtdsrB02mnjyOE=
Subject key identifier: B6:89:91:16:D3:AA:40:98:D6:BF:EF:50:AB:E2:B4:96:94:FE:8A:CC
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer: /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial: 0198737404B7F4DA5123BD07384D78CB24B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number: 122C
Signing time: Mon 04 Aug 2025 05:00:39 +0000
Manifest this update: Mon 04 Aug 2025 05:00:39 +0000
Manifest next update: Tue 05 Aug 2025 05:00:39 +0000
Files and hashes: 1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: n/grxPWjUVF+FAIwy9k0soJBeQgLcLgAjx0d49tJucQ=)
2: VcLRSmks30Rrzb_V-4cS_8CDrdU.roa (hash: ARDeLfHH2zFG0qHV/LfjEyCOKnPBbv+U4ABprvSu0Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:04:b7:f4:da:51:23:bd:07:38:4d:78:cb:24:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Validity
Not Before: Aug 4 05:00:39 2025 GMT
Not After : Aug 5 05:00:39 2025 GMT
Subject: CN=b6899116d3aa4098d6bfef50abe2b49694fe8acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:fc:b1:39:42:6a:f6:03:39:a5:53:40:f7:
6c:50:8a:6b:35:1e:91:11:42:dd:9c:2a:e0:46:38:
b1:b4:13:ab:41:f8:32:bd:0d:fd:6c:f0:e1:ac:d7:
51:c1:e7:2d:d5:b7:f8:de:ce:55:71:29:63:3b:3d:
fb:0a:f2:d2:37:c4:1e:41:86:27:c7:15:f2:65:e2:
da:a4:ea:b0:be:9e:d5:dd:1f:19:9d:89:02:1f:8e:
5b:47:22:ba:24:57:5b:c9:20:ef:d1:4f:20:04:bb:
b8:08:df:2b:00:9f:63:9f:eb:1f:cc:d1:37:0a:b3:
79:a0:f6:e3:8b:6a:fa:25:f1:45:f1:ea:4f:88:fc:
49:7b:53:75:33:c9:2c:76:04:32:d9:f0:41:b6:77:
52:ff:e9:5c:ea:15:ce:d3:10:c8:02:ae:25:1f:56:
57:7c:b6:d6:92:6f:c2:b4:12:c2:24:e1:e8:34:a8:
ed:76:10:74:3f:d5:31:ce:bf:46:cd:a0:db:28:c9:
a2:34:fe:47:49:38:a8:36:1a:ff:6f:7c:c2:1a:a6:
a1:d4:80:2d:21:75:14:6c:b1:a2:1c:d1:3d:37:c9:
a6:74:b2:ad:0b:7a:d9:3c:7d:09:fb:43:1d:7c:18:
ac:2d:b9:9d:c0:09:a3:8f:ee:ae:16:31:45:88:48:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:89:91:16:D3:AA:40:98:D6:BF:EF:50:AB:E2:B4:96:94:FE:8A:CC
X509v3 Authority Key Identifier:
keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3e:f7:b3:6c:1b:44:79:66:13:de:12:6b:a8:d4:8b:25:71:
84:0e:ed:e1:e4:24:b3:e9:85:27:45:7e:c9:92:5b:87:85:9c:
c4:be:dc:2a:01:b6:57:5d:f8:34:db:c5:47:49:a4:37:b9:c6:
0b:f7:7c:b5:c8:d0:06:02:ce:cb:b5:60:77:21:ee:6b:fb:d5:
76:f8:17:39:1d:29:5e:09:0e:a1:d2:03:ae:ee:37:f1:0b:2d:
29:0f:31:4e:a7:14:0f:8b:4c:91:b3:b4:df:24:b0:6d:df:3d:
3d:41:75:0e:8b:bb:8c:ad:3c:c5:7d:69:e9:ba:66:0d:5d:1f:
01:c2:64:70:3d:08:a0:1a:62:4a:74:e5:88:d2:35:1f:45:0d:
13:dd:43:e9:d4:f1:b8:b8:36:35:d9:3c:34:13:f1:d0:48:cb:
c3:d6:fb:b5:89:a4:ef:84:5d:00:07:3e:0e:d4:96:13:4f:60:
67:de:aa:0e:a6:49:2e:75:de:58:ae:18:76:f0:04:16:be:96:
48:f3:31:5c:0c:09:82:c2:a0:ad:04:16:87:d8:b8:62:1d:b4:
a1:0e:c4:e8:d7:8c:43:a6:cd:8e:68:33:41:1b:dc:ff:fd:c4:
bf:a9:43:75:58:29:d5:d7:a7:d2:3d:95:37:c0:f8:15:ef:e5:
86:af:c8:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdAS39NpRI70HOE14yyS0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMDc4OGFhZDIyYWM0MzcwZDUxOGNiN2ZiOWRmZTcyNGI0
MWY5NTcwHhcNMjUwODA0MDUwMDM5WhcNMjUwODA1MDUwMDM5WjAzMTEwLwYDVQQD
EyhiNjg5OTExNmQzYWE0MDk4ZDZiZmVmNTBhYmUyYjQ5Njk0ZmU4YWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkz8sTlCavYDOaVTQPdsUIprNR6R
EULdnCrgRjixtBOrQfgyvQ39bPDhrNdRwect1bf43s5VcSljOz37CvLSN8QeQYYn
xxXyZeLapOqwvp7V3R8ZnYkCH45bRyK6JFdbySDv0U8gBLu4CN8rAJ9jn+sfzNE3
CrN5oPbji2r6JfFF8epPiPxJe1N1M8ksdgQy2fBBtndS/+lc6hXO0xDIAq4lH1ZX
fLbWkm/CtBLCJOHoNKjtdhB0P9Uxzr9GzaDbKMmiNP5HSTioNhr/b3zCGqah1IAt
IXUUbLGiHNE9N8mmdLKtC3rZPH0J+0MdfBisLbmdwAmjj+6uFjFFiEjkuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaJkRbTqkCY1r/vUKvitJaU/orMMB8GA1UdIwQY
MBaAFE8HiKrSKsQ3DVGMt/ud/nJLQflXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85YzA0ZDUtNDU5Yi00ZmUyLTg0NTAt
ZTExYWIyNjFjYTdiLzEvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85YzA0ZDUtNDU5Yi00ZmUyLTg0NTAtZTExYWIyNjFjYTdi
LzEvVHdlSXF0SXF4RGNOVVl5My01My1ja3RCLVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJj73s2wb
RHlmE94Sa6jUiyVxhA7t4eQks+mFJ0V+yZJbh4WcxL7cKgG2V134NNvFR0mkN7nG
C/d8tcjQBgLOy7VgdyHua/vVdvgXOR0pXgkOodIDru438QstKQ8xTqcUD4tMkbO0
3ySwbd89PUF1Dou7jK08xX1p6bpmDV0fAcJkcD0IoBpiSnTliNI1H0UNE91D6dTx
uLg2Ndk8NBPx0EjLw9b7tYmk74RdAAc+DtSWE09gZ96qDqZJLnXeWK4YdvAEFr6W
SPMxXAwJgsKgrQQWh9i4Yh20oQ7E6NeMQ6bNjmgzQRvc//3Ev6lDdVgp1den0j2V
N8D4Fe/lhq/IuA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:50 2025 by rpki-client