Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File: TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier: i3z0+3X+y48O21E593V3sG66LlFp5QUzCmEZQIXJyzc=
Subject key identifier: 89:03:BD:DA:89:C1:45:56:77:C6:8D:56:00:76:AF:A1:59:3B:E1:6B
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer: /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial: 019A5187E2F16EA7F0B52F8C50FEFB6EE540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number: 1324
Signing time: Wed 05 Nov 2025 01:00:51 +0000
Manifest this update: Wed 05 Nov 2025 01:00:51 +0000
Manifest next update: Thu 06 Nov 2025 01:00:51 +0000
Files and hashes: 1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: jw+EIUM23FVaXTNKFpc2w53VJS8WfctdLxe99Fnl3o4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:e2:f1:6e:a7:f0:b5:2f:8c:50:fe:fb:6e:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Validity
Not Before: Nov 5 01:00:51 2025 GMT
Not After : Nov 6 01:00:51 2025 GMT
Subject: CN=8903bdda89c1455677c68d560076afa1593be16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6d:ff:a7:39:cc:38:e5:ad:ec:63:ee:52:70:
65:cd:c2:6c:6b:f4:38:b4:04:b6:8a:bd:50:ff:70:
2b:da:5d:f2:d5:3b:b5:ce:36:d3:28:68:c9:f1:cd:
db:0b:3f:9f:47:2b:f2:1b:7b:4f:3d:42:83:52:4c:
c8:60:66:db:b0:4f:e9:bc:ed:9a:4e:f5:08:3d:89:
1b:10:49:dd:45:ce:08:3e:c5:8c:4c:d4:d2:67:79:
07:6b:9c:42:79:4d:3d:83:b5:02:8f:53:72:e3:2d:
c7:1f:dc:b6:2a:d2:13:21:52:59:5b:a6:2c:df:ff:
45:d8:01:a8:f8:f8:72:d7:b9:62:e0:54:ba:d6:6e:
fa:3c:45:bd:f1:b8:e2:9f:6e:54:f6:f5:49:47:3d:
fc:31:6c:dd:e3:4a:45:18:c4:a8:dc:10:83:5b:51:
45:f7:4c:a9:19:9e:4f:a0:53:d0:89:dc:ac:2d:6d:
d6:77:cb:cd:24:c9:7e:4a:2d:c5:4a:10:da:c3:b6:
dc:9b:ef:07:89:11:b9:aa:23:ec:4b:36:04:e2:9e:
f6:3d:dd:5f:68:b8:45:94:e8:cb:fc:63:3a:4c:92:
76:90:3a:fb:45:aa:dc:0b:1e:af:ac:eb:00:78:40:
27:be:0e:f1:39:5f:5c:99:d5:d5:94:0c:65:1f:12:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:03:BD:DA:89:C1:45:56:77:C6:8D:56:00:76:AF:A1:59:3B:E1:6B
X509v3 Authority Key Identifier:
keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f3:4b:6a:ce:fd:dc:25:7f:9d:05:32:f4:27:1c:f3:3a:e2:
b2:0e:d6:36:a8:8d:89:7c:44:9a:f8:55:08:bd:7d:5d:bb:8c:
e8:30:1a:44:25:34:b0:e7:3f:48:1b:ee:76:eb:2e:2c:c0:d9:
9c:99:ab:96:eb:d1:72:3d:89:39:e2:3f:6b:f0:50:af:39:7f:
02:bd:7c:77:75:da:87:0f:1d:06:ca:ca:49:a3:72:38:d6:17:
3a:b3:48:7d:35:e0:b3:2c:5e:b3:0d:ff:91:fa:c9:de:6c:47:
25:23:90:a5:d8:0e:24:25:e9:32:e5:08:c5:99:f5:d5:33:70:
8d:e4:8e:23:53:a9:30:67:b6:56:87:a3:f7:3d:42:a6:b0:8c:
72:e1:fc:ed:44:1d:40:db:05:14:a9:e2:bd:38:a6:66:8b:26:
9f:87:d2:9c:f5:30:ff:4d:1c:3a:11:1c:a8:7f:57:a7:d8:d5:
52:aa:c6:ae:a0:4b:2c:e4:0e:09:94:26:54:07:eb:ad:0d:71:
0d:ff:3c:ca:75:36:7e:32:fb:e5:0a:9d:12:14:cb:fe:60:9b:
df:1f:e7:10:c3:4d:d0:7c:c6:0e:fb:e9:53:ff:f6:56:6e:73:
ee:f1:d0:05:97:2b:2e:ec:51:e1:54:c6:b6:02:41:0e:03:90:
44:95:da:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:33:55 2025 by rpki-client