
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
File: T2FIll96_-tYYJYV5q1OPuqM68o.mft (raw, json)
Hash identifier: jlMoujO7BJQZ+SI04JkP7teCO+lGRNkAy1SG3qCuMRM=
Subject key identifier: 27:A7:E3:EE:4F:97:6E:42:9F:57:42:B4:CA:8E:FF:75:21:29:1E:6C
Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
Certificate issuer: /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Certificate serial: 0196C4279C8D0AB94418278048226AD75578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
Manifest number: 0496
Signing time: Mon 12 May 2025 11:00:52 +0000
Manifest this update: Mon 12 May 2025 11:00:52 +0000
Manifest next update: Tue 13 May 2025 11:00:52 +0000
Files and hashes: 1: T2FIll96_-tYYJYV5q1OPuqM68o.crl (hash: GTILlYUM8p6NEMztjp2ammm/lXYobrrImPQfZLA8gpc=)
2: aeScWSEVmNc0EYb-mhHt5BZ1Oe0.roa (hash: fc/BLsPdy7txjMA7q9xzQpymVU7f1xNFpkeDtKxEBLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:9c:8d:0a:b9:44:18:27:80:48:22:6a:d7:55:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Validity
Not Before: May 12 11:00:52 2025 GMT
Not After : May 13 11:00:52 2025 GMT
Subject: CN=27a7e3ee4f976e429f5742b4ca8eff7521291e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:bc:30:5d:2a:6e:4d:c8:7d:da:df:e7:19:
8b:ea:ed:6a:09:67:ad:aa:42:4a:3a:95:1a:50:96:
80:1b:26:b8:79:a1:1f:71:17:99:71:db:e0:9b:8b:
26:06:75:6d:f7:1b:cb:ff:da:86:a3:d8:91:d3:6d:
05:bd:15:bc:fd:9f:18:0b:e2:ff:e0:0a:fd:55:ef:
eb:e6:0b:90:0d:6b:82:b5:de:2e:a9:a1:0f:69:ae:
98:28:ce:e4:7f:19:2d:23:63:71:af:df:c8:eb:a5:
2f:1a:4b:cc:9c:0e:77:63:06:0d:6b:83:aa:d5:4c:
34:8a:73:74:82:5c:0b:74:99:60:ef:a7:7c:28:f1:
69:76:66:dd:c6:17:5f:25:e2:5c:7f:4f:92:e2:21:
31:2d:b8:12:b0:16:0d:22:7e:56:17:6b:82:db:f2:
73:15:d4:0e:14:81:9e:58:70:90:96:dd:b9:42:9e:
7e:db:19:89:67:b4:e5:84:a5:2d:0b:a2:3e:ed:9e:
af:22:95:b4:b7:b6:9c:11:14:8c:5d:59:b9:ae:b3:
25:a4:d0:33:69:f7:4c:ba:98:68:5f:2b:0e:c8:c7:
ce:27:78:94:bf:8b:f5:1c:5c:f4:59:3a:08:ea:b1:
85:3b:97:89:ab:7c:e1:e0:0d:c9:4c:29:ce:e0:2f:
b4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A7:E3:EE:4F:97:6E:42:9F:57:42:B4:CA:8E:FF:75:21:29:1E:6C
X509v3 Authority Key Identifier:
keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:86:f6:f4:7e:59:15:9f:7b:4d:b2:df:43:ca:4e:8b:01:5e:
b1:8a:dc:12:0c:09:a5:80:d3:4c:f0:22:43:c6:f1:c6:b4:55:
2c:f6:5d:aa:c4:fa:3b:5b:db:b4:ea:3d:da:17:55:14:66:d4:
5b:fa:25:0c:49:af:94:65:dc:b8:c1:99:02:d1:cb:a7:82:d1:
3b:65:ed:7a:10:d4:15:a8:30:9b:da:45:05:ea:59:35:fb:8b:
96:cb:dd:38:30:71:03:7f:b3:a6:4f:2c:84:5a:38:16:dd:6e:
c2:67:f0:a8:ea:fd:69:1a:ec:fe:7b:72:6c:1e:88:eb:52:d0:
2a:3e:b3:34:b7:5b:a8:87:d5:34:3b:52:c3:9f:bb:50:df:36:
ab:11:1b:6a:c4:63:bd:b8:cb:c3:40:ec:5c:bd:ad:af:7b:7c:
11:df:3a:e6:60:4b:27:42:f2:28:55:1f:f8:87:24:85:58:e5:
b6:0a:25:17:d9:99:a4:42:0e:95:c2:fc:9e:08:65:21:85:c9:
88:ba:68:05:4e:96:22:b8:cc:4e:d7:59:7a:c5:76:ec:0d:a2:
cf:9d:22:a0:cd:9a:4c:30:a8:10:1a:06:52:e0:e7:ba:df:27:
9a:28:db:1e:8d:60:da:a9:c0:45:dd:34:c0:74:f2:e0:ee:4a:
20:58:35:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJ5yNCrlEGCeASCJq11V4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNjE0ODk2NWY3YWZmZWI1ODYwOTYxNWU2YWQ0ZTNlZWE4
Y2ViY2EwHhcNMjUwNTEyMTEwMDUyWhcNMjUwNTEzMTEwMDUyWjAzMTEwLwYDVQQD
EygyN2E3ZTNlZTRmOTc2ZTQyOWY1NzQyYjRjYThlZmY3NTIxMjkxZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvye8MF0qbk3Ifdrf5xmL6u1qCWet
qkJKOpUaUJaAGya4eaEfcReZcdvgm4smBnVt9xvL/9qGo9iR020FvRW8/Z8YC+L/
4Ar9Ve/r5guQDWuCtd4uqaEPaa6YKM7kfxktI2Nxr9/I66UvGkvMnA53YwYNa4Oq
1Uw0inN0glwLdJlg76d8KPFpdmbdxhdfJeJcf0+S4iExLbgSsBYNIn5WF2uC2/Jz
FdQOFIGeWHCQlt25Qp5+2xmJZ7TlhKUtC6I+7Z6vIpW0t7acERSMXVm5rrMlpNAz
afdMuphoXysOyMfOJ3iUv4v1HFz0WToI6rGFO5eJq3zh4A3JTCnO4C+0ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCen4+5Pl25Cn1dCtMqO/3UhKR5sMB8GA1UdIwQY
MBaAFE9hSJZfev/rWGCWFeatTj7qjOvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMTM1YjItNzkxZS00MWRhLWFmZDct
ZGExYzQxNzU4MDJiLzEvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMTM1YjItNzkxZS00MWRhLWFmZDctZGExYzQxNzU4MDJi
LzEvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYb29H5Z
FZ97TbLfQ8pOiwFesYrcEgwJpYDTTPAiQ8bxxrRVLPZdqsT6O1vbtOo92hdVFGbU
W/olDEmvlGXcuMGZAtHLp4LRO2XtehDUFagwm9pFBepZNfuLlsvdODBxA3+zpk8s
hFo4Ft1uwmfwqOr9aRrs/ntybB6I61LQKj6zNLdbqIfVNDtSw5+7UN82qxEbasRj
vbjLw0DsXL2tr3t8Ed865mBLJ0LyKFUf+IckhVjltgolF9mZpEIOlcL8nghlIYXJ
iLpoBU6WIrjMTtdZesV27A2iz50ioM2aTDCoEBoGUuDnut8nmijbHo1g2qnARd00
wHTy4O5KIFg1FA==
-----END CERTIFICATE-----
Generated at Mon May 12 15:51:47 2025 by rpki-client