Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: eh+2H9pAeZLa51EILWbHic684FISV9g3tgjE3MzEQrs=
Subject key identifier: 7E:99:AB:80:F2:D5:E8:C1:EF:59:6D:0B:78:24:11:40:29:A9:FA:E0
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 019A50E2AF9436F87BDC758A2C4039867106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0B69
Signing time: Tue 04 Nov 2025 22:00:24 +0000
Manifest this update: Tue 04 Nov 2025 22:00:24 +0000
Manifest next update: Wed 05 Nov 2025 22:00:24 +0000
Files and hashes: 1: 4J7Io1jEwgS2RhtnGjopliZ5_no.roa (hash: QO5aB2FmunA0lEdEAxyr6sEsO8466VD4EugW4s0Q6Rw=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: CuHi88JASXWTyXFYXnu3eimHU5+YML/7aUyBqshXo9o=)
3: ge3kV53d3-LqnCvvkoEAivLZ1y8.roa (hash: SauMWlDrg7IfvsdJxQ9Eu8dcWvkF6O4OvV9rmn3sxVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:af:94:36:f8:7b:dc:75:8a:2c:40:39:86:71:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Nov 4 22:00:24 2025 GMT
Not After : Nov 5 22:00:24 2025 GMT
Subject: CN=7e99ab80f2d5e8c1ef596d0b7824114029a9fae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3d:5f:95:5d:a4:b7:d1:bf:a8:27:54:dc:7b:
c2:a8:ea:58:a8:fe:36:30:35:61:93:ca:85:6e:b6:
8e:39:ac:d0:69:e8:5f:d7:e2:92:97:75:a6:83:45:
55:03:04:51:d6:10:f5:de:e3:3d:3f:96:cc:f3:b8:
19:59:07:06:59:2c:83:7e:4b:06:96:69:02:2c:05:
f0:eb:99:fd:3e:a9:87:c0:42:08:d5:f4:c3:81:86:
25:7e:fa:f1:9d:62:31:8e:87:47:29:17:93:66:80:
83:e9:83:7c:ac:ca:9d:07:a6:a9:03:ea:0e:ed:dd:
5f:e0:10:80:36:4d:6c:00:ea:ce:e1:a1:68:42:1b:
ee:b7:39:1d:6e:ca:ec:25:6c:96:db:98:14:79:28:
2c:8c:09:f0:45:88:85:1d:4e:5e:19:63:09:2c:fb:
cc:50:86:da:a5:f6:7d:c3:d0:20:c9:5f:3f:f6:03:
d5:fa:d7:dd:71:44:44:a9:d5:b9:0c:d6:bb:0b:9f:
a7:8e:06:bb:c1:0e:a3:36:44:1a:c2:a5:7e:33:28:
fe:f6:7e:93:54:c6:39:95:03:fc:44:9e:2f:29:88:
93:97:4f:90:bf:51:4a:b6:9d:4a:23:b7:f8:53:3d:
78:91:1a:62:fe:dc:02:c7:5b:bf:18:8a:a0:70:b6:
05:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:99:AB:80:F2:D5:E8:C1:EF:59:6D:0B:78:24:11:40:29:A9:FA:E0
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0c:01:5d:33:36:90:fd:e3:dc:63:67:87:33:5f:30:3e:2f:
a3:c9:36:21:fb:2d:b7:88:74:a3:65:84:6a:9f:a8:a7:a2:f8:
00:b0:a1:50:d8:f0:8a:37:e6:0a:77:ee:88:8e:e6:a3:b4:a5:
5d:11:4f:2d:e9:fc:ba:f8:2f:74:2a:77:df:e4:f2:6a:bd:75:
50:e2:9b:ec:38:b9:d2:42:03:af:cf:b7:e0:55:25:18:7e:84:
25:97:1b:a5:fd:5b:92:98:b9:6e:dc:bd:6b:33:da:6e:cd:29:
4c:74:b7:3e:9b:ec:05:21:a6:55:d7:4d:76:13:03:3d:a7:b6:
09:f0:61:8a:c4:de:df:d7:77:67:59:bd:94:20:3b:6f:d5:6b:
9d:fa:54:2b:ce:37:fb:5e:28:2b:f7:4a:dc:b4:d9:b9:07:95:
c5:60:8e:62:e9:40:e4:50:e6:52:55:fc:48:e0:a7:a4:13:fb:
67:76:ef:95:0d:b3:e5:d9:91:42:95:3d:6f:0e:52:ca:03:47:
0b:91:4f:1c:86:73:e0:f0:45:2a:da:ef:a7:b5:24:87:d2:f4:
fd:a4:1f:51:19:e8:e4:84:4e:bd:05:9f:16:88:61:2d:68:1a:
97:13:7b:56:0e:64:9c:eb:26:01:80:74:29:08:54:48:80:f6:
40:5c:b0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:50:44 2025 by rpki-client