Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
File: T2L75L_BSBjG6c5mewVq1x_vKsM.mft (raw, json)
Hash identifier: HajVM9o49a8TK6y4Hf6UQ4vNkF5I2t3KnLSOCDqO/QY=
Subject key identifier: FF:09:74:E0:DC:33:CB:BB:77:62:16:A2:79:78:C8:AF:3C:FA:5F:3B
Authority key identifier: 4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3
Certificate issuer: /CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
Certificate serial: 0199FD33FE1AB535305A5B46AEA5F0DCDAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
Manifest number: 01E0
Signing time: Sun 19 Oct 2025 16:01:07 +0000
Manifest this update: Sun 19 Oct 2025 16:01:07 +0000
Manifest next update: Mon 20 Oct 2025 16:01:07 +0000
Files and hashes: 1: T2L75L_BSBjG6c5mewVq1x_vKsM.crl (hash: XsG1g3vomP1R01ztb5+cq+dcvNQ2UXobrAoAu6ieqwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fe:1a:b5:35:30:5a:5b:46:ae:a5:f0:dc:da:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
Validity
Not Before: Oct 19 16:01:07 2025 GMT
Not After : Oct 20 16:01:07 2025 GMT
Subject: CN=ff0974e0dc33cbbb776216a27978c8af3cfa5f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:93:de:3a:70:bc:40:d4:23:63:b3:04:9c:
6c:79:27:56:65:8c:82:dc:dd:1c:19:9d:49:53:5c:
82:1e:9c:92:10:4b:98:a3:e6:c3:3e:52:8a:a5:86:
74:e3:bf:f3:1b:61:93:8d:a3:47:ee:ec:dc:9d:e2:
88:d9:0d:75:e1:d6:68:da:c2:df:0e:72:98:f0:5e:
a2:26:ae:f6:27:ba:25:7d:8d:fe:36:f0:7f:e2:99:
31:7e:bd:31:a3:f3:3a:5a:44:02:ee:2b:f6:1b:ae:
75:8c:94:aa:6f:15:ff:72:91:07:cd:73:5a:21:23:
fe:b9:74:f7:3b:cc:09:be:2b:99:9a:1a:64:8f:06:
2e:65:5c:43:c0:90:fd:47:52:74:e6:9d:ea:20:9b:
64:5b:70:99:63:fa:d6:c4:24:51:78:e2:ab:6f:63:
d4:40:fd:3a:14:c9:33:3a:31:4d:68:0b:fb:f9:cd:
7d:47:e2:cb:24:02:1c:2f:23:41:b0:bd:4f:92:84:
c8:0f:e0:03:64:8a:01:cf:86:94:ec:b1:82:85:6f:
8b:f3:f4:e7:4f:c6:a5:b5:38:df:ca:4f:1a:8a:5c:
e9:9c:ac:b1:95:73:ab:a9:19:5b:04:9a:a1:0d:12:
d9:a8:11:e5:cc:93:ab:15:3c:3f:dd:6e:34:a9:0a:
e5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:09:74:E0:DC:33:CB:BB:77:62:16:A2:79:78:C8:AF:3C:FA:5F:3B
X509v3 Authority Key Identifier:
keyid:4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:81:9b:9b:28:47:9b:18:85:9f:60:02:c7:00:c8:c6:55:35:
29:43:ae:0e:86:d0:2d:79:57:39:08:87:7d:e7:42:9f:e6:81:
af:cb:b0:8f:77:07:ea:13:f0:be:54:d4:0a:68:1f:9e:cc:a0:
ac:83:14:2e:8a:df:2d:12:a8:9a:bf:93:7a:9d:ad:88:a0:ea:
ac:a3:63:fb:b7:4f:41:e0:be:5d:42:3d:d6:cc:51:0f:08:49:
45:76:89:71:f2:f9:b6:f5:84:d5:4a:f2:bd:b8:ef:6a:5b:8e:
91:c4:e7:4d:f9:a4:4b:21:42:0c:82:dc:14:29:56:d8:f2:e5:
f8:c9:b1:6c:09:5c:4d:98:72:22:2b:2d:20:b4:9a:2d:4c:82:
93:d7:56:28:5c:06:09:b4:55:c1:40:e5:f1:33:ec:6e:66:86:
bb:14:15:8c:2d:5e:78:f4:4b:0a:01:18:6f:38:69:73:21:93:
5d:40:41:95:38:96:85:62:bc:9e:a2:0a:c8:62:13:f2:5d:2b:
6c:72:5c:87:da:0f:01:43:9e:39:66:56:49:af:12:d2:6c:fb:
0a:cc:d9:cd:53:61:3d:41:43:55:67:a0:89:10:2a:ce:5d:fc:
c7:54:86:03:00:1c:bb:9a:5d:d5:42:a8:ff:db:4b:4c:f3:c6:
9b:ac:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:37 2025 by rpki-client