Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File: TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier: 6nZ+D1Jfq9ud/I27CsXYfap9Et0UQeByWkgtLXVvSAc=
Subject key identifier: ED:7F:78:06:B2:E7:16:9C:C5:32:88:D2:F5:78:F0:C6:65:70:C9:85
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer: /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial: 019768F2CCB9CFC005329F95B5C1BFDC63F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number: 11A2
Signing time: Fri 13 Jun 2025 11:00:31 +0000
Manifest this update: Fri 13 Jun 2025 11:00:31 +0000
Manifest next update: Sat 14 Jun 2025 11:00:31 +0000
Files and hashes: 1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: UOOGx64UU4RgXyTdoWpRkPit9H5VXd5E9s8bFeuQ5Ws=)
2: VcLRSmks30Rrzb_V-4cS_8CDrdU.roa (hash: ARDeLfHH2zFG0qHV/LfjEyCOKnPBbv+U4ABprvSu0Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:cc:b9:cf:c0:05:32:9f:95:b5:c1:bf:dc:63:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Validity
Not Before: Jun 13 11:00:31 2025 GMT
Not After : Jun 14 11:00:31 2025 GMT
Subject: CN=ed7f7806b2e7169cc53288d2f578f0c66570c985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8e:b7:83:3a:78:52:d2:45:68:5a:60:d9:76:
c6:91:e1:83:61:0f:9e:c9:78:d5:b4:07:75:4c:7f:
5f:a2:10:00:3f:7a:f1:17:59:4f:ac:18:72:a9:84:
c4:36:4f:4c:6c:db:a9:9b:17:da:9b:11:29:a1:38:
3b:7a:9f:68:f9:89:b8:39:e7:05:e5:ae:a0:52:51:
bf:95:cc:72:37:fa:b4:56:9e:7b:04:5b:3f:de:2f:
93:1b:89:ce:af:63:3f:f9:be:31:f1:7b:d7:30:53:
f3:d9:87:67:5d:6a:e4:cc:fa:99:e6:b4:23:3d:b1:
4e:89:af:d6:af:55:dc:ed:69:86:b5:3d:8e:52:ca:
08:b5:7e:ec:61:fa:91:66:dd:31:4f:dd:f9:8b:e8:
91:9c:13:ad:c6:5f:ef:56:63:f3:2f:91:9f:53:fd:
02:93:86:89:4a:8a:fb:e1:5d:aa:25:e1:9c:68:cd:
67:cc:85:95:ac:6f:1b:a3:a5:bf:6d:d1:f7:e5:15:
a3:c6:ff:43:6b:97:1f:c7:38:a1:ec:dd:a3:ea:43:
4b:f3:20:7d:45:74:9e:08:e0:32:ec:00:f7:34:68:
0c:2b:85:49:5f:6a:28:1d:42:ad:32:3e:82:25:11:
3b:5f:48:74:31:84:15:a9:e9:9a:c5:8d:c2:f9:cd:
ff:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:78:06:B2:E7:16:9C:C5:32:88:D2:F5:78:F0:C6:65:70:C9:85
X509v3 Authority Key Identifier:
keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:83:aa:56:2c:82:ce:e1:aa:a2:7b:f9:ed:df:77:55:d4:ad:
f8:1d:ce:52:20:1c:70:c6:73:a0:cb:8a:98:1d:64:76:61:ea:
dc:e5:3e:b3:dc:aa:af:f4:e4:6a:74:35:fe:60:7c:2d:c6:bb:
c3:39:19:f7:98:ac:ac:a1:2a:30:1c:2b:4d:84:43:43:2c:38:
39:d0:9c:04:67:75:1e:f9:fc:8b:f2:1f:ac:7a:36:9f:cf:32:
e4:1b:50:94:91:f4:b2:d2:79:96:08:db:ba:ec:78:e8:81:61:
26:f6:ee:e2:37:ec:57:a4:53:84:40:95:02:da:db:5e:89:90:
a5:d0:8a:53:f1:ac:85:98:95:a6:62:b3:0e:f2:cd:7d:22:5b:
88:fb:e9:d3:6e:27:22:bd:77:a1:ec:4d:c4:04:b8:e5:3f:d5:
d2:49:4d:bb:b0:56:6b:02:40:9c:fe:82:36:7d:59:5e:27:30:
26:81:88:51:27:57:f2:35:8f:5e:38:c3:81:2b:70:42:2c:32:
46:72:df:30:57:49:16:75:94:9b:33:0d:29:8b:70:e1:b0:ae:
ca:c3:af:cd:f5:4e:79:b6:6c:fc:27:20:6e:89:6e:33:50:65:
15:48:ee:e4:80:0c:9e:a1:ab:c1:9b:32:13:5f:a9:12:79:5c:
67:0b:53:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:27 2025 by rpki-client