
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
File: T2L75L_BSBjG6c5mewVq1x_vKsM.mft (raw, json)
Hash identifier: 7Qzqy2nkLBbvpSdTndSnNRZXFXMj0l8QzP0Ym9bJgXo=
Subject key identifier: 9F:5A:B5:C2:81:88:39:60:5C:37:F6:58:1A:3E:2E:BC:FC:63:8D:36
Authority key identifier: 4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3
Certificate issuer: /CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
Certificate serial: 0198733DC168ED4F662F4899B156CCCFA6DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
Manifest number: 0114
Signing time: Mon 04 Aug 2025 04:01:23 +0000
Manifest this update: Mon 04 Aug 2025 04:01:23 +0000
Manifest next update: Tue 05 Aug 2025 04:01:23 +0000
Files and hashes: 1: T2L75L_BSBjG6c5mewVq1x_vKsM.crl (hash: sPYfRQMH3jHAcGMwLTU863pJYnEWGbMJkX4iYGVCH84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:c1:68:ed:4f:66:2f:48:99:b1:56:cc:cf:a6:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
Validity
Not Before: Aug 4 04:01:23 2025 GMT
Not After : Aug 5 04:01:23 2025 GMT
Subject: CN=9f5ab5c2818839605c37f6581a3e2ebcfc638d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:25:38:de:63:5f:3f:15:bf:d3:23:7c:18:37:
ef:54:1c:3c:c3:75:9c:e3:c1:5c:4f:92:16:ba:f1:
c7:24:af:64:de:2e:17:4d:98:f7:ba:e7:97:b2:d5:
83:6f:f0:06:01:3c:0c:ab:7e:e2:7c:a0:6e:79:52:
38:84:84:53:93:9d:ac:fe:c5:e7:89:46:93:f9:5b:
a6:29:f9:a0:5a:43:bc:ef:ac:09:bb:a5:a9:c1:55:
e7:0e:3e:22:a2:4a:11:bf:d9:d3:56:a7:d1:7a:6c:
ad:4d:3d:48:e2:b6:43:0f:14:88:d6:41:17:04:e8:
2b:71:da:53:a0:39:1a:55:73:b3:83:43:7c:bb:37:
8a:26:e3:3d:fe:69:93:eb:5b:16:34:4d:96:28:8e:
0d:aa:ff:9f:17:74:6a:ed:aa:15:8a:cf:9f:44:89:
96:26:eb:9c:6b:b0:d2:8d:80:da:b4:2b:6e:71:dd:
d1:a9:fe:87:21:32:08:f1:4c:e8:0b:d3:fb:b5:72:
82:b3:07:90:82:47:11:d7:65:a5:b9:d0:85:4a:e4:
50:09:85:59:1d:42:34:e0:85:58:81:93:90:9d:9e:
68:13:d4:01:14:96:89:60:b9:c7:f8:57:fe:47:57:
02:0c:10:e5:11:5b:4e:54:87:df:06:41:f5:96:e5:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5A:B5:C2:81:88:39:60:5C:37:F6:58:1A:3E:2E:BC:FC:63:8D:36
X509v3 Authority Key Identifier:
keyid:4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0b:08:99:45:bf:bd:6d:07:cd:2a:bf:b7:34:99:f5:92:e4:
f2:d6:ed:32:88:de:7d:ef:dd:49:7a:b4:de:c3:de:fb:66:36:
25:92:eb:08:7a:b8:d3:5f:29:e3:78:88:39:b8:e8:5f:e0:5e:
d8:64:eb:3c:9b:89:2e:51:0a:90:e9:cd:eb:b6:dd:44:48:2f:
9f:4f:3b:13:b7:dc:81:a7:fe:dd:d7:3c:44:9e:ec:aa:f9:7b:
61:2b:9f:df:2b:f8:16:7c:8f:e8:aa:8c:92:69:9f:9d:32:61:
9b:6c:3b:35:9d:24:dc:32:d6:03:3f:61:98:9f:54:10:e3:4c:
e5:46:80:cb:d2:fa:33:8c:dc:bb:e5:a1:72:16:eb:2d:60:cc:
31:c2:f4:30:60:55:64:65:64:62:e1:f7:b5:d5:43:e6:f4:7e:
c9:59:87:58:ae:a8:06:ce:e2:8f:4f:5d:0c:cd:47:d2:fd:3e:
26:71:61:d7:ca:39:f9:14:ef:d8:4a:b0:5d:ba:5b:f7:fa:9e:
d3:6f:93:8a:86:58:29:6c:bc:d9:e7:c7:7d:4d:4d:80:c3:9e:
3e:ca:11:d6:f6:16:78:31:b5:0b:1a:e2:19:43:55:1a:a5:5e:
09:8e:45:3a:96:c5:05:f9:bd:90:f3:f1:93:e4:23:00:d3:2f:
5e:92:ca:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:39 2025 by rpki-client