Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
File: ti_M2im-Zm3u-Oxi1rwebNBnw18.mft (raw, json)
Hash identifier: fNaPt43OhulDWdUvF01+q95ijDpzUklouUxoXXQxUF8=
Subject key identifier: A1:C2:3A:0A:61:F4:BF:B8:DE:39:53:23:A7:1D:A2:99:83:D9:47:9B
Authority key identifier: B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F
Certificate issuer: /CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
Certificate serial: 019A4E18DB1D197299F5CA6C252347B01AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
Manifest number: 112E
Signing time: Tue 04 Nov 2025 09:00:42 +0000
Manifest this update: Tue 04 Nov 2025 09:00:42 +0000
Manifest next update: Wed 05 Nov 2025 09:00:42 +0000
Files and hashes: 1: Fwkn-erxqVJGCICr5bQF1GUB_bA.roa (hash: ePgJDihP1/Ez/90nsTWFdItvP2OyGIqDLFpAtXpE1Pg=)
2: ti_M2im-Zm3u-Oxi1rwebNBnw18.crl (hash: hAv7IJhiFDWsl619a3fnfp+K7pnvPuBh5UGVGwSM7y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:db:1d:19:72:99:f5:ca:6c:25:23:47:b0:1a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
Validity
Not Before: Nov 4 09:00:42 2025 GMT
Not After : Nov 5 09:00:42 2025 GMT
Subject: CN=a1c23a0a61f4bfb8de395323a71da29983d9479b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:97:d3:3b:04:b0:c4:10:93:5c:c6:5d:b3:e3:
2f:3c:eb:cd:61:99:68:45:21:aa:80:e2:c0:47:c9:
c6:a7:08:01:92:f4:6a:27:15:c6:41:ea:26:a6:f5:
39:df:33:06:d6:ca:04:1e:a8:4a:bb:c4:78:27:ea:
08:c0:8a:d9:26:cf:c3:78:08:96:a4:46:8c:c3:07:
7f:41:5a:cd:07:5a:dc:b7:4f:5b:c7:75:40:00:53:
47:da:8b:07:d0:6d:f9:d2:f4:b5:c8:a9:1b:88:43:
c0:91:03:3b:fe:38:17:7d:dd:c9:fb:8f:ea:73:85:
0d:82:70:cc:fc:d6:46:29:f1:f0:ae:11:2d:3f:17:
b2:18:c5:d6:d7:75:d9:21:44:76:83:0c:ea:46:1b:
8f:32:61:26:05:96:5f:72:a2:05:01:7f:a8:7a:ce:
2b:9a:7c:a9:b0:2f:92:79:35:89:a4:f5:5f:a6:3f:
2f:9b:2c:00:5f:45:d7:c1:a5:6f:2b:1c:60:d0:6a:
92:0d:7d:de:d6:1f:69:36:79:7e:c4:1e:60:13:c7:
4a:1b:6e:29:22:18:04:3b:75:b8:8c:cf:e7:5c:fb:
57:36:ea:b6:0a:0e:a7:91:f7:e3:0d:1f:09:53:f9:
04:0a:57:67:cc:f8:cd:e2:84:2f:30:97:f5:22:4e:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C2:3A:0A:61:F4:BF:B8:DE:39:53:23:A7:1D:A2:99:83:D9:47:9B
X509v3 Authority Key Identifier:
keyid:B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:10:de:b5:32:4d:e7:6c:6c:8d:25:25:d5:a1:68:d6:54:52:
dd:7f:b6:95:47:3a:56:ec:6d:b7:3a:24:4c:dd:79:ea:65:1f:
cc:89:66:ad:ae:15:43:55:30:3e:be:19:c5:d4:cb:af:3b:e9:
23:52:73:9c:7b:e6:d5:84:18:a9:01:2a:37:74:5c:9b:af:3f:
58:b7:39:aa:32:50:50:c4:5a:39:1a:10:ac:fc:1e:03:ad:58:
f6:e9:33:cf:6e:a8:5c:fd:68:04:0d:ea:de:87:b1:b1:c7:6c:
17:19:d2:2b:bc:67:69:be:c4:69:be:27:3e:f8:2a:60:ff:0b:
02:21:52:48:c6:2d:42:93:13:81:1c:ba:df:d8:08:61:e7:83:
5e:26:16:ef:d9:74:09:c4:c1:09:ba:eb:3e:7d:bb:8f:20:d4:
31:80:13:23:ae:4d:fd:f1:dd:36:6e:83:84:94:56:c4:fc:09:
58:c2:3e:0a:8e:ed:e7:f8:e3:f4:b0:62:b5:87:ed:40:41:54:
e7:ef:a1:f8:78:2b:d9:65:ca:34:67:3a:46:96:6f:79:c8:0e:
d8:c8:c8:40:4e:ce:a5:52:74:89:00:b4:35:8d:e4:a9:62:ae:
01:4e:00:35:f4:cc:d6:01:d6:8e:17:e4:d6:de:b6:24:ae:54:
96:f4:3f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOGNsdGXKZ9cpsJSNHsBrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmZjY2RhMjliZTY2NmRlZWY4ZWM2MmQ2YmMxZTZjZDA2
N2MzNWYwHhcNMjUxMTA0MDkwMDQyWhcNMjUxMTA1MDkwMDQyWjAzMTEwLwYDVQQD
EyhhMWMyM2EwYTYxZjRiZmI4ZGUzOTUzMjNhNzFkYTI5OTgzZDk0NzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5fTOwSwxBCTXMZds+MvPOvNYZlo
RSGqgOLAR8nGpwgBkvRqJxXGQeompvU53zMG1soEHqhKu8R4J+oIwIrZJs/DeAiW
pEaMwwd/QVrNB1rct09bx3VAAFNH2osH0G350vS1yKkbiEPAkQM7/jgXfd3J+4/q
c4UNgnDM/NZGKfHwrhEtPxeyGMXW13XZIUR2gwzqRhuPMmEmBZZfcqIFAX+oes4r
mnypsC+SeTWJpPVfpj8vmywAX0XXwaVvKxxg0GqSDX3e1h9pNnl+xB5gE8dKG24p
IhgEO3W4jM/nXPtXNuq2Cg6nkffjDR8JU/kECldnzPjN4oQvMJf1Ik7TZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKHCOgph9L+43jlTI6cdopmD2UebMB8GA1UdIwQY
MBaAFLYvzNopvmZt7vjsYta8HmzQZ8NfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGlfTTJpbS1abTN1LU94aTFyd2ViTkJudzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZmY2NDUtZTBmMS00YjE4LTk4MGYt
ZWRhNTliYzljYTJjLzEvdGlfTTJpbS1abTN1LU94aTFyd2ViTkJudzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85ZmY2NDUtZTBmMS00YjE4LTk4MGYtZWRhNTliYzljYTJj
LzEvdGlfTTJpbS1abTN1LU94aTFyd2ViTkJudzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhDetTJN
52xsjSUl1aFo1lRS3X+2lUc6VuxttzokTN156mUfzIlmra4VQ1UwPr4ZxdTLrzvp
I1JznHvm1YQYqQEqN3Rcm68/WLc5qjJQUMRaORoQrPweA61Y9ukzz26oXP1oBA3q
3oexscdsFxnSK7xnab7Eab4nPvgqYP8LAiFSSMYtQpMTgRy639gIYeeDXiYW79l0
CcTBCbrrPn27jyDUMYATI65N/fHdNm6DhJRWxPwJWMI+Co7t5/jj9LBitYftQEFU
5++h+Hgr2WXKNGc6RpZvecgO2MjIQE7OpVJ0iQC0NY3kqWKuAU4ANfTM1gHWjhfk
1t62JK5UlvQ/Ng==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:01 2025 by rpki-client