Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
File: T2FIll96_-tYYJYV5q1OPuqM68o.mft (raw, json)
Hash identifier: VQWhlsdpd/3Q+Q9rt114gdDhmq8U5RwFB9DCIXrx0Fs=
Subject key identifier: C5:12:E6:8C:0E:5E:1D:53:7A:89:CC:01:B7:65:0E:1E:AB:52:EC:47
Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
Certificate issuer: /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Certificate serial: 0199228CA7682D37C26262482E926B0465F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
Manifest number: 05D0
Signing time: Sun 07 Sep 2025 05:01:07 +0000
Manifest this update: Sun 07 Sep 2025 05:01:07 +0000
Manifest next update: Mon 08 Sep 2025 05:01:07 +0000
Files and hashes: 1: T2FIll96_-tYYJYV5q1OPuqM68o.crl (hash: BxrJ5Oz1gVO8eW4PT/sfroJnWLnre+dcClOOmZcUvVg=)
2: aeScWSEVmNc0EYb-mhHt5BZ1Oe0.roa (hash: fc/BLsPdy7txjMA7q9xzQpymVU7f1xNFpkeDtKxEBLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a7:68:2d:37:c2:62:62:48:2e:92:6b:04:65:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Validity
Not Before: Sep 7 05:01:07 2025 GMT
Not After : Sep 8 05:01:07 2025 GMT
Subject: CN=c512e68c0e5e1d537a89cc01b7650e1eab52ec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:05:0b:ef:67:db:b6:2a:23:1d:ca:18:3c:
ed:78:8d:7d:e2:04:0a:94:9c:dd:3b:66:67:85:e5:
d1:69:c1:47:b5:a0:8c:d8:49:d9:78:f1:2f:b1:5c:
31:6c:a7:41:40:42:9f:83:3a:b7:ed:0b:74:9b:48:
51:ab:13:61:9a:0b:9d:eb:cd:46:88:24:27:d6:ba:
a7:eb:85:24:a3:cb:e4:a3:74:a0:25:f3:40:dc:1b:
60:f8:24:a8:38:39:71:42:01:f9:26:8e:9c:d0:df:
b2:ab:04:20:b8:43:88:96:15:9e:25:c3:8d:c9:6b:
f6:5e:d5:03:f4:92:82:b9:74:fa:b0:86:15:48:33:
ca:0d:4c:d1:5c:63:82:36:1b:8d:a8:65:17:9b:ec:
ab:ed:69:d5:54:dd:68:76:c5:82:98:5e:79:11:15:
46:72:28:4a:39:f4:ca:e3:88:82:6b:85:f6:cd:54:
05:53:6c:bc:10:9f:92:29:df:dd:5c:dc:b5:d9:6a:
be:a1:ea:24:ee:fc:61:df:c3:e3:65:91:6e:95:28:
00:a8:64:cc:ef:41:34:5d:57:cb:ee:db:73:6d:b4:
21:4a:56:d2:3d:b7:32:52:c5:54:55:08:cc:80:24:
47:09:5f:22:46:6b:c5:e4:22:3f:06:14:7c:f7:d0:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:12:E6:8C:0E:5E:1D:53:7A:89:CC:01:B7:65:0E:1E:AB:52:EC:47
X509v3 Authority Key Identifier:
keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:45:51:84:a2:89:a8:10:5b:34:6e:67:43:b0:eb:c0:48:31:
0a:c7:1b:fb:57:7b:4f:9d:e2:86:d1:b8:63:63:27:aa:92:ba:
09:dd:79:8c:72:6b:63:60:b1:3b:45:73:7f:e6:6d:93:89:c9:
d5:4e:79:15:6f:92:e5:0a:64:9f:6d:d6:df:64:2a:36:db:ed:
a6:df:07:65:93:a5:f9:21:73:5c:b7:19:09:64:27:d2:50:b2:
2e:b2:db:9b:2c:23:07:5b:78:cb:0f:03:a5:18:eb:4b:b2:76:
9d:5f:fc:71:48:f7:74:09:cc:fe:af:81:0e:56:2a:b8:12:65:
63:57:3a:3e:43:7d:02:08:6a:87:d0:fd:83:0a:9f:79:f0:a4:
45:2b:13:c7:b5:a4:20:8c:e8:9a:0a:9c:1c:e6:a2:0a:c2:9d:
5e:fb:7e:c2:c4:14:56:2e:a2:aa:0e:03:66:7f:3c:ca:5e:95:
27:60:ba:86:d4:d6:fd:d3:ff:d7:f8:d4:ce:b8:42:48:1e:a9:
58:a9:1c:2f:9c:f1:72:96:61:71:70:6d:21:37:75:d0:3a:93:
7a:2f:1e:99:85:16:09:0f:0c:19:1e:8c:bb:a4:b1:ae:3f:63:
48:fc:df:73:1b:a8:33:24:e4:51:d2:f5:f7:06:4d:09:4d:74:
e2:b4:e6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:31 2025 by rpki-client