Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: 2ybyPX098WJTPvWF4G/l5eJoIB+5VGOM1aYSbI5xZUY=
Subject key identifier: B2:D7:7F:8C:0B:88:37:98:80:50:9D:ED:11:C2:1D:3F:B1:F6:A5:F4
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 0197B6A0AAEEF70A688FD8BA129698209E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0A10
Signing time: Sat 28 Jun 2025 13:01:12 +0000
Manifest this update: Sat 28 Jun 2025 13:01:12 +0000
Manifest next update: Sun 29 Jun 2025 13:01:12 +0000
Files and hashes: 1: 4J7Io1jEwgS2RhtnGjopliZ5_no.roa (hash: QO5aB2FmunA0lEdEAxyr6sEsO8466VD4EugW4s0Q6Rw=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: b1u+IhaoLS1LoWKpz0DsdDAL3A0DpD+Zw1b9+Vum9XM=)
3: ge3kV53d3-LqnCvvkoEAivLZ1y8.roa (hash: SauMWlDrg7IfvsdJxQ9Eu8dcWvkF6O4OvV9rmn3sxVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:aa:ee:f7:0a:68:8f:d8:ba:12:96:98:20:9e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Jun 28 13:01:12 2025 GMT
Not After : Jun 29 13:01:12 2025 GMT
Subject: CN=b2d77f8c0b88379880509ded11c21d3fb1f6a5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:25:42:58:fc:f8:90:26:c7:ac:3f:c6:77:f2:
56:bf:5f:2f:8c:e7:88:47:84:71:bd:d0:ea:f7:82:
9f:7b:de:f3:5b:df:20:a8:e0:e5:6f:81:5c:d4:63:
87:29:b7:07:12:f0:c7:11:c6:a1:b8:00:fc:93:f2:
65:d7:d5:f3:5b:e0:0a:f3:c6:01:a8:54:97:80:5a:
f5:89:5f:3d:8c:d1:65:03:5c:8f:87:f7:8d:be:fb:
2b:14:95:6a:15:4c:94:30:e1:87:8c:8a:c6:a7:3e:
9c:fd:32:c3:fb:10:da:25:9e:c8:c6:4a:4b:46:ab:
b0:2e:b8:9a:13:3e:c2:5a:c2:82:b9:25:29:e2:55:
d1:11:fa:94:53:fa:a6:c2:2a:45:53:c2:c5:5e:f9:
e3:f4:ec:a9:86:55:96:47:5b:9b:ab:17:50:3e:24:
9f:1a:24:47:37:d4:21:fc:c0:30:a0:8a:a7:d2:87:
9d:eb:ac:85:93:9f:fa:33:1d:a0:a4:69:af:ac:9c:
d4:20:3b:cb:7e:dd:a6:5f:7c:45:12:2a:a4:7e:d0:
de:fc:96:b7:f6:66:5c:5e:37:64:aa:6a:d5:9e:ad:
94:65:46:8d:14:42:20:88:b6:9f:08:a3:42:eb:90:
41:e4:2e:f1:87:1d:f6:f2:14:78:2b:b9:9f:9e:2e:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D7:7F:8C:0B:88:37:98:80:50:9D:ED:11:C2:1D:3F:B1:F6:A5:F4
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e0:23:10:50:14:d5:f3:8a:d6:3b:54:e1:c4:7e:d9:f9:95:
80:18:a6:f9:d8:58:01:31:1e:ec:b2:30:06:a1:d6:02:52:33:
4f:d8:f3:f0:9a:ef:03:16:9e:1e:c1:7c:c3:d5:f3:0f:2a:fe:
ed:57:4e:e3:7d:4b:a3:77:1c:9b:ea:76:d7:a8:9a:aa:61:2b:
2a:49:15:96:12:74:a9:52:14:5a:30:8f:e3:f0:1a:3e:ff:60:
e0:47:1b:74:c6:fb:94:ee:97:cc:e4:44:a7:e5:fb:b1:8e:a0:
9b:d8:42:dd:d9:6a:15:00:f4:da:89:41:a6:b4:0e:b3:f5:e5:
da:48:a0:56:df:bd:cd:f8:37:d7:88:0d:dd:2b:23:09:41:98:
f7:d7:29:41:e5:38:32:ea:f8:6b:16:a0:dc:6d:15:15:75:2b:
95:66:48:41:d5:8d:fc:ab:f4:84:6f:be:85:6c:96:6a:3f:b5:
82:11:a9:23:c4:ac:04:d2:c0:9f:24:65:df:3c:13:92:50:0b:
d7:6e:1f:4c:87:0e:15:18:a1:55:22:4b:c5:f4:1a:6e:c2:e5:
42:00:7b:a8:2e:2b:e3:f4:fb:56:45:88:85:d1:b4:95:4c:ce:
bc:30:ad:d6:d3:5b:ce:31:1a:dd:89:1a:98:9e:2a:8c:4b:30:
34:a5:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:25 2025 by rpki-client