Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
File: T2L75L_BSBjG6c5mewVq1x_vKsM.mft (raw, json)
Hash identifier: pAEqAr20sfEBi5VAo7sPTWgFotU1urJnkAMHzL5AYeI=
Subject key identifier: BB:33:D7:FF:9C:73:5F:04:E2:D4:AC:F6:5F:BE:10:88:03:9D:EB:2C
Authority key identifier: 4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3
Certificate issuer: /CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
Certificate serial: 0197B5FBDC392C7917E90CA7106DDC31063A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
Manifest number: B2
Signing time: Sat 28 Jun 2025 10:01:11 +0000
Manifest this update: Sat 28 Jun 2025 10:01:11 +0000
Manifest next update: Sun 29 Jun 2025 10:01:11 +0000
Files and hashes: 1: T2L75L_BSBjG6c5mewVq1x_vKsM.crl (hash: Ws/HykeHevDpARPsEDq1EEsqQw+chVtWAziLzrUe3pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:dc:39:2c:79:17:e9:0c:a7:10:6d:dc:31:06:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
Validity
Not Before: Jun 28 10:01:11 2025 GMT
Not After : Jun 29 10:01:11 2025 GMT
Subject: CN=bb33d7ff9c735f04e2d4acf65fbe1088039deb2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:21:71:24:de:f4:a6:ce:3e:bc:bc:6e:9a:
4c:e9:49:25:8c:ac:19:4f:12:fa:c8:9e:3c:53:07:
0d:85:24:82:c9:06:33:24:81:d8:e3:40:22:d8:38:
69:2b:dd:15:ab:05:27:ab:7e:ec:79:18:fa:c0:f8:
9e:83:d2:c1:c8:26:6b:d7:eb:47:70:05:77:c4:7b:
ab:a4:e2:ba:aa:e5:2a:19:70:0a:61:80:3d:fa:3d:
b3:7d:8a:c1:a6:b5:f7:23:d7:a7:cd:b0:17:97:1c:
24:be:eb:8e:d2:3a:f2:84:9e:0f:dd:11:24:f0:c5:
c2:1a:e3:e6:ab:a9:81:bd:89:e8:8d:fa:90:c3:3d:
4a:fc:7a:a7:53:84:93:07:3f:55:95:54:cd:26:54:
f2:87:c2:2b:93:ff:70:f8:c1:6f:a6:61:09:80:2c:
a7:75:93:bc:c4:8a:57:80:0b:87:03:3d:d8:26:3c:
20:09:7d:ad:b1:08:be:73:9a:2d:fa:a4:17:c3:bb:
d9:86:a3:f2:0a:28:80:3f:20:18:25:1f:8c:11:5a:
ff:66:62:58:42:b8:e9:be:c3:ed:4f:e0:de:a1:71:
73:56:5c:8d:ce:a3:9a:db:44:af:9f:37:01:27:f4:
86:81:93:76:c2:2c:b3:90:38:a7:8a:ea:bd:d2:fe:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:33:D7:FF:9C:73:5F:04:E2:D4:AC:F6:5F:BE:10:88:03:9D:EB:2C
X509v3 Authority Key Identifier:
keyid:4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b3:7d:e2:b2:f9:27:ce:79:d7:b5:65:db:c0:c1:78:a7:21:
65:d2:07:a1:cc:06:ae:51:53:36:b7:03:20:25:60:02:6c:0b:
0a:e2:e1:ba:dd:07:e7:fa:a7:95:9e:92:70:8d:73:39:4b:8a:
92:4d:79:d8:88:ea:42:e4:5b:1c:17:85:43:70:87:64:e0:ca:
3f:24:6b:11:a2:65:21:02:44:8c:33:35:6c:ef:72:cd:58:51:
34:b1:56:90:85:b4:e8:53:75:6c:a0:b5:bd:59:87:05:4c:5a:
1a:a8:7f:30:51:82:3b:2f:86:cb:00:5b:53:20:39:9a:5a:3a:
59:eb:5d:8d:89:64:33:63:cb:41:44:83:1d:36:fd:a9:28:e2:
dc:11:50:79:0d:9b:e1:de:e9:21:87:ad:90:de:26:15:47:3b:
45:e4:6c:a5:fa:47:a1:d7:63:1a:63:ca:45:a3:19:41:30:ee:
6d:ee:5f:86:fd:21:55:46:72:e8:c4:76:b7:11:68:b3:d7:f7:
a9:f1:e8:d9:62:f0:51:98:00:cb:62:89:ae:51:92:d6:f7:4f:
19:88:fd:53:77:09:f9:df:fd:df:ce:c6:c9:15:e9:1b:a1:cc:
78:43:cd:2c:d7:25:59:c8:25:44:e7:a7:c7:d3:c2:98:51:66:
4f:20:8f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:36 2025 by rpki-client