Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: Bz4TzwQ2m5RRjIj/SfzTDXNAeMcaWv5anNDdTUE6Ot8=
Subject key identifier: 3F:FB:A9:19:68:B4:7B:96:9B:01:63:24:27:F9:0A:D8:52:BF:53:98
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 0199FBEBB4FB0117D65879FF10898898BC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0B3D
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: 4J7Io1jEwgS2RhtnGjopliZ5_no.roa (hash: QO5aB2FmunA0lEdEAxyr6sEsO8466VD4EugW4s0Q6Rw=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: 448vij89CaduA6ult3LzkbnHydwYsYAJ4OOwFag8Y/c=)
3: ge3kV53d3-LqnCvvkoEAivLZ1y8.roa (hash: SauMWlDrg7IfvsdJxQ9Eu8dcWvkF6O4OvV9rmn3sxVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b4:fb:01:17:d6:58:79:ff:10:89:88:98:bc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=3ffba91968b47b969b01632427f90ad852bf5398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:0a:b8:98:e9:1c:35:4d:35:36:fa:ca:0d:
ee:9c:ef:a1:e7:a9:db:a2:df:91:ed:05:e5:bb:1c:
bf:42:76:69:c1:bf:d8:d1:48:65:f8:ba:c8:8e:e9:
82:37:fa:d8:de:2d:10:fe:10:f0:90:93:3b:b7:15:
cd:76:a6:35:11:56:e7:b3:45:8f:75:d6:30:44:9c:
7e:43:46:c1:7b:f9:60:3b:7f:8d:3e:5b:d7:e3:52:
0c:cc:e2:15:e7:d9:e5:68:b7:95:47:5a:aa:bb:79:
cd:6a:b5:bd:db:94:dc:9d:c2:e6:e5:2b:55:34:c8:
f8:70:94:19:84:bd:c0:6b:db:aa:9a:16:90:fa:c0:
5b:ae:da:cc:bf:6e:35:34:5b:ae:85:76:e1:c5:a0:
96:01:42:49:4f:83:ea:05:e2:04:d4:3b:fb:73:d8:
fa:cb:7f:f4:31:af:e2:2d:65:83:34:92:cf:60:cc:
ee:40:61:c4:b2:9b:d8:5f:b4:4b:2f:62:5e:53:0b:
dc:09:5f:8a:3a:e1:cc:c6:b3:65:0f:a1:38:bd:9c:
b4:61:2f:67:fb:e1:de:ce:db:09:44:2d:a0:75:97:
28:c6:d0:46:4b:41:7b:b2:0a:74:64:fa:ee:c1:af:
e4:64:b6:a3:2b:17:14:62:de:88:eb:bc:a7:67:63:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FB:A9:19:68:B4:7B:96:9B:01:63:24:27:F9:0A:D8:52:BF:53:98
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c8:34:42:98:a6:5e:43:6a:bc:3f:8f:b7:b7:41:84:4b:5a:
ff:9a:1c:0c:15:da:f4:82:0f:9d:c4:0e:01:57:17:12:f9:eb:
37:9d:c5:fb:90:79:5b:75:f9:ac:e7:5f:0b:06:21:9e:28:58:
a0:fb:50:3d:fd:8c:c3:1b:7d:c7:a5:69:3a:e4:8e:6b:7c:19:
4a:98:2f:d9:d6:f1:2a:66:02:14:8a:d8:49:d4:a2:30:89:82:
3d:fa:b2:de:c3:26:41:8b:40:b9:72:ec:69:8e:9f:fc:cc:68:
7b:8c:6c:11:77:ce:e9:19:59:68:03:57:fd:88:a5:f5:71:74:
99:21:e2:f6:70:7d:f5:c6:65:46:04:1e:0c:9d:e2:2b:f8:99:
a0:9e:30:3b:27:ec:d5:ad:8c:44:46:40:1c:5e:d3:08:36:f6:
3b:91:99:0b:85:dc:b7:39:f6:4c:39:ca:f1:04:c1:36:ae:ec:
d9:94:ae:83:b5:f6:8f:1d:cd:be:8b:a2:ab:89:2f:90:55:4f:
a3:d8:78:8b:8b:0b:20:d2:f7:49:82:64:8d:19:4d:7f:69:ff:
9b:a0:d2:8b:b2:39:06:85:b0:7e:9e:e1:b3:b3:db:50:92:4b:
71:76:29:07:b3:62:c1:ba:9d:4f:ca:f3:36:cc:8f:c2:8e:0c:
f7:3a:37:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn767T7ARfWWHn/EImImLwFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODk3ZjFhMzQ5N2ViYmUyN2I5ZTJmMGQ2ZjNlYWUyYmJl
NjhiMjcwHhcNMjUxMDE5MTAwMjMyWhcNMjUxMDIwMTAwMjMyWjAzMTEwLwYDVQQD
EygzZmZiYTkxOTY4YjQ3Yjk2OWIwMTYzMjQyN2Y5MGFkODUyYmY1Mzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhkKuJjpHDVNNTb6yg3unO+h56nb
ot+R7QXluxy/QnZpwb/Y0Uhl+LrIjumCN/rY3i0Q/hDwkJM7txXNdqY1EVbns0WP
ddYwRJx+Q0bBe/lgO3+NPlvX41IMzOIV59nlaLeVR1qqu3nNarW925TcncLm5StV
NMj4cJQZhL3Aa9uqmhaQ+sBbrtrMv241NFuuhXbhxaCWAUJJT4PqBeIE1Dv7c9j6
y3/0Ma/iLWWDNJLPYMzuQGHEspvYX7RLL2JeUwvcCV+KOuHMxrNlD6E4vZy0YS9n
++HeztsJRC2gdZcoxtBGS0F7sgp0ZPruwa/kZLajKxcUYt6I67ynZ2OhSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/7qRlotHuWmwFjJCf5CthSv1OYMB8GA1UdIwQY
MBaAFEyJfxo0l+u+J7ni8Nbz6uK75osnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEt
YTc5ZGExYTg1NTEzLzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEtYTc5ZGExYTg1NTEz
LzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMg0Qpim
XkNqvD+Pt7dBhEta/5ocDBXa9IIPncQOAVcXEvnrN53F+5B5W3X5rOdfCwYhnihY
oPtQPf2Mwxt9x6VpOuSOa3wZSpgv2dbxKmYCFIrYSdSiMImCPfqy3sMmQYtAuXLs
aY6f/Mxoe4xsEXfO6RlZaANX/Yil9XF0mSHi9nB99cZlRgQeDJ3iK/iZoJ4wOyfs
1a2MREZAHF7TCDb2O5GZC4Xctzn2TDnK8QTBNq7s2ZSug7X2jx3Nvouiq4kvkFVP
o9h4i4sLINL3SYJkjRlNf2n/m6DSi7I5BoWwfp7hs7PbUJJLcXYpB7NiwbqdT8rz
NsyPwo4M9zo3hA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:28 2025 by rpki-client