Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: TGGUO2l3DLhMQ1Eu7PrCHWhe1Y4gWcMzQMan65cokQU=
Subject key identifier: 46:67:B4:39:2A:90:E5:7F:37:2E:DD:E2:A4:E4:A4:13:40:62:C6:0D
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 01984776B54C11D2DD1F529474C6BFC00421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0A5B
Signing time: Sat 26 Jul 2025 16:00:18 +0000
Manifest this update: Sat 26 Jul 2025 16:00:18 +0000
Manifest next update: Sun 27 Jul 2025 16:00:18 +0000
Files and hashes: 1: 4J7Io1jEwgS2RhtnGjopliZ5_no.roa (hash: QO5aB2FmunA0lEdEAxyr6sEsO8466VD4EugW4s0Q6Rw=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: DhJdMoMfQ1kygijBIkA07NxdTNE0i9UoWo8+9b/st9s=)
3: ge3kV53d3-LqnCvvkoEAivLZ1y8.roa (hash: SauMWlDrg7IfvsdJxQ9Eu8dcWvkF6O4OvV9rmn3sxVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:b5:4c:11:d2:dd:1f:52:94:74:c6:bf:c0:04:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Jul 26 16:00:18 2025 GMT
Not After : Jul 27 16:00:18 2025 GMT
Subject: CN=4667b4392a90e57f372edde2a4e4a4134062c60d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:35:22:be:ce:59:39:c3:39:e1:37:92:9e:7a:
6b:6c:36:49:33:cb:41:dd:fc:de:e6:bb:3f:22:ca:
bc:97:3d:19:7b:56:1a:98:31:05:2f:15:0b:3c:12:
5c:b2:0f:7f:bb:d5:a7:f1:cd:95:e1:49:b8:20:28:
69:77:d1:89:f9:68:24:4e:8d:79:1a:9e:aa:1c:df:
b3:39:03:a1:8c:43:61:e9:1c:7a:74:cd:3d:ff:a8:
ca:5f:7e:45:1f:cd:7e:3b:51:a5:60:32:e8:44:0b:
06:d4:d4:d0:43:ea:89:54:ba:39:bd:f7:31:25:c1:
34:c9:07:af:b4:ba:fc:e2:19:d1:b4:ee:dd:82:cf:
3c:cb:4f:88:c4:73:15:67:a7:cd:c0:06:cf:c8:d3:
5c:ae:2f:43:40:d9:ba:c5:bb:3f:03:aa:7f:b0:94:
6e:92:be:a0:8e:4c:60:52:93:59:31:36:66:b3:05:
f9:e0:14:94:53:2d:31:5f:b7:ee:80:c0:2b:a4:ac:
a4:88:cc:23:9b:27:ba:a2:0a:48:99:66:f9:b0:63:
c5:2d:58:fa:f8:90:ca:a0:18:a9:63:fa:83:f4:5c:
31:e7:f7:88:b8:58:5a:aa:9c:08:ca:de:8d:20:a4:
c8:a0:27:df:19:fd:c7:06:b6:cd:23:b7:12:0f:16:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:67:B4:39:2A:90:E5:7F:37:2E:DD:E2:A4:E4:A4:13:40:62:C6:0D
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5b:94:30:f7:fa:3f:58:2c:32:68:05:e4:2a:d0:e8:2e:a0:
ad:bf:ca:14:3c:9b:fa:ad:29:7a:51:fd:bc:ce:49:dc:d8:b2:
cf:80:e4:9c:fb:b6:8a:e8:19:77:b6:f2:ed:0c:ab:7b:36:ca:
19:af:28:13:f8:a8:14:e6:9d:08:96:f4:e7:57:4b:9e:89:47:
39:e5:40:ea:2e:0a:dc:9c:3d:12:64:ae:e9:f4:b0:a1:fa:11:
49:e8:ea:9f:1e:1d:e8:b6:ff:0b:db:be:62:d6:cb:68:8f:73:
02:2d:4a:31:28:03:f3:37:82:fe:20:0d:5b:07:45:43:bd:dc:
ea:44:19:f1:0a:d0:be:6c:2a:90:96:b2:00:46:a3:f6:a0:32:
83:2a:72:df:79:64:13:c0:95:d3:61:56:51:c9:18:30:9c:b0:
88:19:40:96:7e:e6:74:85:b6:b5:ce:91:fc:83:f6:9c:e2:d3:
a2:90:3a:0d:b7:59:3c:4a:de:4c:52:d2:37:81:d0:9a:bb:68:
76:72:45:c1:d2:fe:25:b1:6d:7a:36:33:75:3b:44:8b:ad:4c:
d8:c3:07:12:73:f4:16:7c:72:97:bc:16:d6:c3:08:7d:e8:bd:
82:29:a9:0a:43:bf:1e:d6:67:f8:cf:61:97:d0:2d:5f:13:d8:
8a:25:3b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:41 2025 by rpki-client