Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: ObktAgYW2fsonjCfD7qo7UBS7cc4rOs42jBo8uAAdPE=
Subject key identifier: CB:6C:31:16:4A:EB:99:31:3B:A9:0E:1A:07:FB:C4:AD:1E:F0:5D:D1
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 0198D660B9E407E9A3C4FAB2164562A9081C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0AA5
Signing time: Sat 23 Aug 2025 10:01:59 +0000
Manifest this update: Sat 23 Aug 2025 10:01:59 +0000
Manifest next update: Sun 24 Aug 2025 10:01:59 +0000
Files and hashes: 1: 4J7Io1jEwgS2RhtnGjopliZ5_no.roa (hash: QO5aB2FmunA0lEdEAxyr6sEsO8466VD4EugW4s0Q6Rw=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: miTQxcLSE2Yar+6dlmc/z3frsjC89aZ6HvWknZJ78xE=)
3: ge3kV53d3-LqnCvvkoEAivLZ1y8.roa (hash: SauMWlDrg7IfvsdJxQ9Eu8dcWvkF6O4OvV9rmn3sxVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:b9:e4:07:e9:a3:c4:fa:b2:16:45:62:a9:08:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Aug 23 10:01:59 2025 GMT
Not After : Aug 24 10:01:59 2025 GMT
Subject: CN=cb6c31164aeb99313ba90e1a07fbc4ad1ef05dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:44:52:09:78:40:39:db:95:b9:0f:bb:42:e3:
ee:5f:be:97:52:17:91:c8:51:75:55:a8:99:2b:a0:
2a:17:3b:3d:7e:a8:77:6a:07:d6:97:dd:e6:79:78:
9a:ed:64:72:11:89:21:52:30:f5:8b:f1:4e:e6:cc:
b6:03:fe:20:06:15:62:65:b2:f4:b3:66:a9:f8:b3:
a4:6f:1a:ee:b5:f1:b5:56:9c:45:49:52:49:ce:e5:
d9:e8:5c:d1:d1:e8:37:50:13:5e:4f:32:47:67:78:
85:3c:1b:9f:46:59:9e:cf:8d:0d:49:88:67:59:d8:
9d:ff:23:71:33:9f:c2:d0:c2:66:a3:51:f7:ea:7f:
e1:d7:ad:2a:ca:d7:4e:32:b6:64:f9:30:78:7c:11:
bf:4b:3e:57:36:b6:8d:33:5b:5e:66:4f:50:02:c1:
3b:b6:5d:3e:fc:9f:78:12:9d:83:6e:5b:34:c4:00:
d9:b9:ff:c7:9e:69:72:45:df:b5:e1:14:f8:12:84:
cc:8e:f5:60:28:32:bd:34:4f:6d:d9:cc:60:45:dc:
28:89:8b:a1:8e:21:72:8a:54:13:bb:22:f4:4d:95:
56:53:c4:61:59:7e:d4:ef:67:9e:d6:a8:39:6d:57:
e0:b5:32:d7:ea:56:4c:37:e0:39:fd:16:ce:e3:d7:
ee:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6C:31:16:4A:EB:99:31:3B:A9:0E:1A:07:FB:C4:AD:1E:F0:5D:D1
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:19:43:59:dc:49:9e:1d:92:a1:72:7b:ae:49:3b:4c:85:4c:
b5:ab:df:0a:c3:39:05:90:46:e2:69:5e:7b:95:d0:e8:25:f5:
7b:17:2c:21:f4:e3:7b:49:5f:c8:8b:1f:58:83:b1:43:67:e9:
98:ee:32:1a:8d:29:98:49:15:09:f9:49:64:3f:39:6c:e4:93:
04:80:a4:e6:45:d7:47:8f:71:5d:55:d1:a3:24:df:32:cb:76:
72:20:e9:c3:80:73:41:7a:da:ae:3f:c1:c9:82:6a:3f:c7:3e:
6b:35:39:c0:16:69:95:93:b6:da:76:ec:a8:7e:ec:88:a4:24:
3c:3c:ef:ed:9d:03:0d:03:ac:96:d2:58:b8:bd:15:6c:75:3f:
85:1e:b5:a2:9e:00:04:b8:3b:25:75:20:84:9d:43:f8:1c:c7:
b0:6f:1c:c3:ec:9e:2e:c7:c1:5a:14:66:3f:9b:01:a7:48:f1:
37:ed:d0:60:10:ad:60:23:2c:d0:df:d1:b7:b6:5a:a3:bb:8a:
ab:8d:52:b7:17:15:15:e8:30:8d:b8:74:53:c2:56:5f:63:d2:
cf:1a:aa:e6:c8:fe:43:6b:b2:5c:4f:9c:0c:bd:1d:bc:63:bd:
bc:02:33:c4:54:72:74:91:02:b4:80:49:bf:28:25:92:01:0f:
c8:31:d9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:13:01 2025 by rpki-client