Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: XlfgJYNZhb+ctvVrQQHbzlA1J/qd6mZ/V3Y0KqqmCDA=
Subject key identifier: 3F:E2:5C:BE:37:0A:DF:76:BA:46:4D:89:D8:1D:12:98:6F:D0:0D:DC
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 019A52D14108E16E5C92D45D05650288ECFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0B6A
Signing time: Wed 05 Nov 2025 07:00:36 +0000
Manifest this update: Wed 05 Nov 2025 07:00:36 +0000
Manifest next update: Thu 06 Nov 2025 07:00:36 +0000
Files and hashes: 1: 4J7Io1jEwgS2RhtnGjopliZ5_no.roa (hash: QO5aB2FmunA0lEdEAxyr6sEsO8466VD4EugW4s0Q6Rw=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: cvDmB+jrTcnhR2bN/02t3XilfvxHKsbGNsoZXtromr4=)
3: ge3kV53d3-LqnCvvkoEAivLZ1y8.roa (hash: SauMWlDrg7IfvsdJxQ9Eu8dcWvkF6O4OvV9rmn3sxVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:41:08:e1:6e:5c:92:d4:5d:05:65:02:88:ec:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Nov 5 07:00:36 2025 GMT
Not After : Nov 6 07:00:36 2025 GMT
Subject: CN=3fe25cbe370adf76ba464d89d81d12986fd00ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:93:bd:89:03:31:7d:b9:30:6c:c7:87:9b:73:
ee:42:96:4f:dd:9d:90:2b:3f:4d:72:70:27:b4:ed:
93:db:a9:62:9e:0f:3d:b7:b9:96:d4:10:bf:51:80:
f8:93:1f:51:2d:8f:97:5b:b9:9a:01:4e:85:89:a2:
a6:00:64:2b:c1:2e:6b:be:3e:05:35:3b:8c:d0:8b:
11:b6:34:17:d3:73:af:1c:bd:59:30:91:2e:07:34:
b2:3c:eb:ea:7b:a0:76:6c:75:c6:d4:4f:8d:f6:1b:
ce:b1:16:ee:aa:82:2b:78:2d:a8:09:ab:8d:5d:8d:
d0:1d:d3:a2:8f:e6:d6:d8:b4:95:62:06:c6:15:de:
4b:90:82:dc:59:d5:f3:e0:99:dd:01:43:42:a9:30:
af:9d:2a:9f:9d:1a:31:b7:ee:40:8c:22:e0:61:3b:
c7:4a:f2:8e:91:d6:01:d9:cf:f3:94:71:37:d5:37:
a9:28:c6:29:f5:0b:e1:e3:1e:d8:4a:97:65:81:de:
66:47:b7:c6:eb:10:36:85:9e:f1:d2:66:3f:fc:55:
49:76:1e:b2:d5:6b:35:fb:43:06:e9:84:03:ec:a9:
91:30:48:d4:8a:a0:fc:af:ac:18:07:fa:bd:37:72:
54:59:2e:1f:be:e0:35:9a:d2:04:6a:12:86:1a:5a:
b6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E2:5C:BE:37:0A:DF:76:BA:46:4D:89:D8:1D:12:98:6F:D0:0D:DC
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e9:18:06:dc:27:58:71:38:f1:b0:3a:3a:2b:03:65:cd:8e:
b1:2c:e8:0c:bf:12:99:56:de:35:0a:5a:8a:60:7e:22:1f:7b:
6a:f5:9a:4f:be:59:38:32:59:38:e7:a1:7e:76:f8:5a:17:4f:
a7:04:17:ea:be:97:e5:9f:1a:22:18:94:b5:c8:0a:fc:f9:3b:
4f:44:c8:4f:69:56:3d:41:59:a2:06:bc:da:cc:eb:6a:73:3d:
3f:37:20:fe:5e:84:e9:df:dc:a3:db:33:c0:45:37:36:01:52:
b8:f0:36:c4:82:a9:4f:70:f7:77:0f:16:d7:b7:1e:c1:9b:e1:
65:a2:2f:e9:77:6d:c1:da:9d:fc:30:03:92:bb:e3:45:e4:74:
3d:12:2f:27:57:d3:f4:fa:68:8d:4f:08:06:3f:15:bd:32:9d:
45:02:3d:e1:5a:7a:ef:51:2e:80:62:1d:88:ee:b8:28:f3:70:
f7:bd:d0:2e:1a:21:d5:01:18:56:4b:23:22:3a:ea:94:81:c1:
cb:b8:a4:74:aa:d4:0b:74:a7:4c:15:2a:90:ce:37:83:5b:4e:
f1:36:d6:50:2e:5b:eb:75:4d:08:04:72:fd:43:f0:08:01:be:
44:a4:b8:b7:e3:7a:aa:ed:15:91:38:c3:3a:f1:00:0e:15:bb:
9d:02:89:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0UEI4W5cktRdBWUCiOz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODk3ZjFhMzQ5N2ViYmUyN2I5ZTJmMGQ2ZjNlYWUyYmJl
NjhiMjcwHhcNMjUxMTA1MDcwMDM2WhcNMjUxMTA2MDcwMDM2WjAzMTEwLwYDVQQD
EygzZmUyNWNiZTM3MGFkZjc2YmE0NjRkODlkODFkMTI5ODZmZDAwZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupO9iQMxfbkwbMeHm3PuQpZP3Z2Q
Kz9NcnAntO2T26ling89t7mW1BC/UYD4kx9RLY+XW7maAU6FiaKmAGQrwS5rvj4F
NTuM0IsRtjQX03OvHL1ZMJEuBzSyPOvqe6B2bHXG1E+N9hvOsRbuqoIreC2oCauN
XY3QHdOij+bW2LSVYgbGFd5LkILcWdXz4JndAUNCqTCvnSqfnRoxt+5AjCLgYTvH
SvKOkdYB2c/zlHE31TepKMYp9Qvh4x7YSpdlgd5mR7fG6xA2hZ7x0mY//FVJdh6y
1Ws1+0MG6YQD7KmRMEjUiqD8r6wYB/q9N3JUWS4fvuA1mtIEahKGGlq2oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/iXL43Ct92ukZNidgdEphv0A3cMB8GA1UdIwQY
MBaAFEyJfxo0l+u+J7ni8Nbz6uK75osnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEt
YTc5ZGExYTg1NTEzLzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEtYTc5ZGExYTg1NTEz
LzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOkYBtwn
WHE48bA6OisDZc2OsSzoDL8SmVbeNQpaimB+Ih97avWaT75ZODJZOOehfnb4WhdP
pwQX6r6X5Z8aIhiUtcgK/Pk7T0TIT2lWPUFZoga82szranM9Pzcg/l6E6d/co9sz
wEU3NgFSuPA2xIKpT3D3dw8W17cewZvhZaIv6Xdtwdqd/DADkrvjReR0PRIvJ1fT
9PpojU8IBj8VvTKdRQI94Vp671EugGIdiO64KPNw973QLhoh1QEYVksjIjrqlIHB
y7ikdKrUC3SnTBUqkM43g1tO8TbWUC5b63VNCARy/UPwCAG+RKS4t+N6qu0VkTjD
OvEADhW7nQKJHw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:55 2025 by rpki-client