Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
File: ti_M2im-Zm3u-Oxi1rwebNBnw18.mft (raw, json)
Hash identifier: hNUMcjR0q88g+aMgi/u7GR320t0GfGMJaiIBqGLAIXE=
Subject key identifier: 2A:03:22:05:7C:7B:A9:62:9B:C9:BB:26:5F:5E:06:85:95:EE:1D:08
Authority key identifier: B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F
Certificate issuer: /CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
Certificate serial: 019A70DC3B485FC03EBC1309B4994D23A658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
Manifest number: 1140
Signing time: Tue 11 Nov 2025 03:01:12 +0000
Manifest this update: Tue 11 Nov 2025 03:01:12 +0000
Manifest next update: Wed 12 Nov 2025 03:01:12 +0000
Files and hashes: 1: Fwkn-erxqVJGCICr5bQF1GUB_bA.roa (hash: ePgJDihP1/Ez/90nsTWFdItvP2OyGIqDLFpAtXpE1Pg=)
2: ti_M2im-Zm3u-Oxi1rwebNBnw18.crl (hash: EcUkLLfMV+PSnF3TcWQUuACszm3icwLo65qRpZSKYto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:3b:48:5f:c0:3e:bc:13:09:b4:99:4d:23:a6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
Validity
Not Before: Nov 11 03:01:12 2025 GMT
Not After : Nov 12 03:01:12 2025 GMT
Subject: CN=2a0322057c7ba9629bc9bb265f5e068595ee1d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:06:20:21:b3:1c:07:82:48:81:95:61:6d:
da:2c:df:4f:e9:31:2c:21:bb:ad:32:5e:2d:9e:04:
11:f9:fd:e6:41:71:9b:9c:10:55:ba:cb:e0:32:f5:
7f:3f:6f:da:48:50:b5:fb:3a:6e:5c:10:d6:96:8b:
ae:b9:39:b7:9c:b6:cf:66:05:65:1d:73:39:f0:66:
75:05:95:80:3f:74:b0:0b:b0:29:b8:2b:92:37:b6:
e7:ea:d2:bd:0e:e8:cc:5b:45:88:2b:7e:df:23:a8:
a9:d5:76:97:dc:ab:b1:81:21:2f:88:0a:b5:ac:37:
92:57:78:b7:3b:35:64:1c:79:31:b5:39:bf:ea:78:
74:ed:7a:4a:d6:df:6d:00:d0:74:7b:ca:93:26:12:
e8:e6:fc:9a:45:64:88:58:52:1d:b2:4a:56:a7:05:
03:73:16:af:ac:b6:1b:b6:29:d5:55:22:17:e3:2a:
ba:53:04:4f:d1:ec:b3:20:3b:57:62:58:61:e9:cf:
0f:01:b7:2c:5e:ac:19:ab:03:92:6b:29:e6:17:76:
1a:9b:53:46:e5:99:4a:24:24:61:2a:9e:5e:d0:2b:
ee:f3:11:a5:cf:03:7a:f8:f1:1d:2f:9e:1e:82:da:
40:c9:99:1e:c5:88:d7:a0:0f:50:96:98:dc:d6:59:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:03:22:05:7C:7B:A9:62:9B:C9:BB:26:5F:5E:06:85:95:EE:1D:08
X509v3 Authority Key Identifier:
keyid:B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ef:5d:48:cb:49:ce:b9:ef:cb:c2:c9:03:9e:c9:17:5a:6f:
11:b7:b3:30:80:e6:0c:d0:4a:b4:a3:21:af:72:4b:4d:e3:c7:
cd:52:86:57:4e:8e:a5:44:02:ab:39:0d:39:bb:90:76:26:97:
bb:4c:b7:41:30:32:7d:5b:b0:a5:5b:5f:5e:02:cf:02:da:f5:
f7:18:cd:66:c8:c2:a5:72:f0:60:04:0a:8d:ce:e4:b8:e9:a6:
b1:cf:02:0b:24:d9:89:b1:2d:18:aa:23:d1:f6:c3:77:90:e2:
07:a0:1a:77:40:c4:1d:8a:3c:e8:f2:77:b8:62:09:a5:c7:83:
ad:22:12:54:7f:ca:0d:7f:a3:84:59:bc:62:37:95:4b:47:e3:
a3:11:c9:2a:56:b3:04:9f:32:c2:87:8b:43:d7:f5:ac:ee:f7:
ae:b3:66:1a:ad:0b:6d:b8:b5:bb:17:c9:24:ef:2f:c1:7f:1c:
3e:fd:39:ae:62:06:f3:53:09:5a:70:80:00:39:5e:d4:70:fc:
15:81:d4:c3:7c:5b:1c:15:db:80:a6:b0:74:50:d3:2e:24:6e:
8a:9a:f2:54:c6:ff:c8:fa:b1:1f:d0:bb:22:a2:ad:49:54:2c:
cb:c1:7b:71:17:0e:88:7d:99:5a:75:5a:c6:9c:a4:c1:40:6e:
28:08:d2:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw3DtIX8A+vBMJtJlNI6ZYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmZjY2RhMjliZTY2NmRlZWY4ZWM2MmQ2YmMxZTZjZDA2
N2MzNWYwHhcNMjUxMTExMDMwMTEyWhcNMjUxMTEyMDMwMTEyWjAzMTEwLwYDVQQD
EygyYTAzMjIwNTdjN2JhOTYyOWJjOWJiMjY1ZjVlMDY4NTk1ZWUxZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDEGICGzHAeCSIGVYW3aLN9P6TEs
IbutMl4tngQR+f3mQXGbnBBVusvgMvV/P2/aSFC1+zpuXBDWlouuuTm3nLbPZgVl
HXM58GZ1BZWAP3SwC7ApuCuSN7bn6tK9DujMW0WIK37fI6ip1XaX3KuxgSEviAq1
rDeSV3i3OzVkHHkxtTm/6nh07XpK1t9tANB0e8qTJhLo5vyaRWSIWFIdskpWpwUD
cxavrLYbtinVVSIX4yq6UwRP0eyzIDtXYlhh6c8PAbcsXqwZqwOSaynmF3Yam1NG
5ZlKJCRhKp5e0Cvu8xGlzwN6+PEdL54egtpAyZkexYjXoA9Qlpjc1lnLPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoDIgV8e6lim8m7Jl9eBoWV7h0IMB8GA1UdIwQY
MBaAFLYvzNopvmZt7vjsYta8HmzQZ8NfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGlfTTJpbS1abTN1LU94aTFyd2ViTkJudzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZmY2NDUtZTBmMS00YjE4LTk4MGYt
ZWRhNTliYzljYTJjLzEvdGlfTTJpbS1abTN1LU94aTFyd2ViTkJudzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85ZmY2NDUtZTBmMS00YjE4LTk4MGYtZWRhNTliYzljYTJj
LzEvdGlfTTJpbS1abTN1LU94aTFyd2ViTkJudzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcu9dSMtJ
zrnvy8LJA57JF1pvEbezMIDmDNBKtKMhr3JLTePHzVKGV06OpUQCqzkNObuQdiaX
u0y3QTAyfVuwpVtfXgLPAtr19xjNZsjCpXLwYAQKjc7kuOmmsc8CCyTZibEtGKoj
0fbDd5DiB6Aad0DEHYo86PJ3uGIJpceDrSISVH/KDX+jhFm8YjeVS0fjoxHJKlaz
BJ8ywoeLQ9f1rO73rrNmGq0Lbbi1uxfJJO8vwX8cPv05rmIG81MJWnCAADle1HD8
FYHUw3xbHBXbgKawdFDTLiRuipryVMb/yPqxH9C7IqKtSVQsy8F7cRcOiH2ZWnVa
xpykwUBuKAjSUQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:17 2025 by rpki-client