Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: iAv9KzretB2B7Y2UiDnAT4JGC2FYpi92/Gy7LP0RqoE=
Subject key identifier: F4:D7:D9:C8:30:8C:7F:EA:65:FB:DF:24:1B:B6:62:9D:A3:21:7F:59
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 019A2477D83AA02FD304851BB76D322667AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0B52
Signing time: Mon 27 Oct 2025 07:00:25 +0000
Manifest this update: Mon 27 Oct 2025 07:00:25 +0000
Manifest next update: Tue 28 Oct 2025 07:00:25 +0000
Files and hashes: 1: 4J7Io1jEwgS2RhtnGjopliZ5_no.roa (hash: QO5aB2FmunA0lEdEAxyr6sEsO8466VD4EugW4s0Q6Rw=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: ACHHbmI/gG9liNWXqVGXykNQd3fmC2vxGGpzbMq1rmw=)
3: ge3kV53d3-LqnCvvkoEAivLZ1y8.roa (hash: SauMWlDrg7IfvsdJxQ9Eu8dcWvkF6O4OvV9rmn3sxVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:d8:3a:a0:2f:d3:04:85:1b:b7:6d:32:26:67:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Oct 27 07:00:25 2025 GMT
Not After : Oct 28 07:00:25 2025 GMT
Subject: CN=f4d7d9c8308c7fea65fbdf241bb6629da3217f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:40:74:0b:8f:8b:32:d5:46:84:1b:45:9c:
6a:50:ad:be:1e:a6:ae:69:2b:c8:c9:c3:e5:8a:84:
db:96:88:8a:a7:0d:22:98:0f:60:05:17:a5:47:7a:
39:a3:89:46:d1:2a:57:4c:aa:18:7a:bc:a8:09:97:
19:66:89:6f:75:2c:e3:9b:99:1c:7b:ef:05:21:31:
b5:60:4e:25:c0:e6:dd:26:86:68:dd:35:9a:20:71:
85:cb:05:b4:26:a5:51:43:28:71:c3:78:5a:05:ca:
de:b3:fa:e0:65:1b:e3:9e:45:ee:de:e4:12:6e:bd:
10:07:0f:39:f3:e3:ed:5d:4b:c8:e8:8c:c6:f5:09:
19:be:71:42:68:2e:df:82:27:22:e6:03:b6:84:67:
82:08:22:8b:0d:32:8f:44:a7:a4:14:ed:8e:c8:52:
5d:7d:b7:41:60:f1:28:b1:2d:eb:90:ac:71:6a:0a:
b9:0d:61:ed:b3:11:1c:b0:1f:30:56:0f:1b:f5:38:
a2:6a:04:16:fd:5a:3d:5b:6e:66:61:1e:35:05:f0:
e9:d5:66:46:5f:73:37:0f:4e:4b:b9:e7:d8:02:88:
25:bd:93:21:c1:2b:75:e6:7d:e1:ae:cb:43:77:f3:
aa:bf:fc:c7:77:c0:e4:f9:10:88:06:35:f7:25:4a:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D7:D9:C8:30:8C:7F:EA:65:FB:DF:24:1B:B6:62:9D:A3:21:7F:59
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:9c:22:cb:e7:22:0b:42:11:e2:06:f4:70:11:01:41:f0:03:
ea:7f:93:03:44:fd:69:ad:72:49:03:1b:7c:16:f8:6b:82:cf:
7a:88:a8:35:77:56:ce:ed:76:01:4e:5b:8e:26:8c:7a:b2:3b:
d7:2a:7f:ac:75:af:49:8e:d7:a4:96:f3:0a:73:c2:77:d5:4e:
4c:31:c0:78:c3:de:ec:97:0c:01:38:db:5e:90:57:cb:9e:b6:
f0:be:41:44:a2:4a:99:16:6b:a7:b0:b0:a8:79:d7:cc:e7:44:
e8:0c:27:92:f9:1e:96:d4:e5:99:76:2c:fa:d0:3f:b8:4e:8f:
cb:fb:4a:4f:74:33:11:a8:cd:99:79:ab:ca:e5:ee:77:ae:9b:
4b:ea:46:52:c1:16:c7:be:d8:13:00:84:1b:ee:4e:6b:b3:ae:
a1:b9:b3:16:7b:c2:8b:e7:71:83:e8:50:5d:34:19:4d:d6:68:
35:90:74:15:69:54:7a:3e:c5:63:9e:56:92:ed:78:5f:a4:00:
00:18:d7:f3:a4:a6:6c:01:86:18:29:5e:88:e8:0c:dd:98:21:
33:c4:39:af:d8:9e:15:14:70:fd:56:2a:ad:3b:9d:75:e6:61:
ca:6c:d1:79:e1:c0:13:01:ea:58:91:3d:25:50:52:35:aa:4c:
e3:37:83:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:30 2025 by rpki-client