Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
File: T2FIll96_-tYYJYV5q1OPuqM68o.mft (raw, json)
Hash identifier: LPx65KcpW0rcW445Ib0kqZuDxHwMH7sx/36MI1u9qic=
Subject key identifier: 25:10:5D:66:0C:13:98:81:87:73:65:B8:00:C7:DB:CD:5A:C1:6E:72
Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
Certificate issuer: /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Certificate serial: 019A70A4E44E86E9E8AF5C123EDD480266BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
Manifest number: 067D
Signing time: Tue 11 Nov 2025 02:00:45 +0000
Manifest this update: Tue 11 Nov 2025 02:00:45 +0000
Manifest next update: Wed 12 Nov 2025 02:00:45 +0000
Files and hashes: 1: T2FIll96_-tYYJYV5q1OPuqM68o.crl (hash: z1UYCg9qaWscmJIgemXU/ih/4hwLwFSlqZYiTDG3VY4=)
2: aeScWSEVmNc0EYb-mhHt5BZ1Oe0.roa (hash: fc/BLsPdy7txjMA7q9xzQpymVU7f1xNFpkeDtKxEBLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e4:4e:86:e9:e8:af:5c:12:3e:dd:48:02:66:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Validity
Not Before: Nov 11 02:00:45 2025 GMT
Not After : Nov 12 02:00:45 2025 GMT
Subject: CN=25105d660c139881877365b800c7dbcd5ac16e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:c4:1e:84:fc:07:84:d3:b8:95:d3:ac:c5:
86:7d:6f:00:68:82:6a:a1:38:ac:d4:06:83:4b:97:
6d:9a:17:94:28:75:c9:02:45:26:e9:a5:54:a7:20:
87:ec:c3:6c:1b:aa:f1:35:8c:32:f6:71:64:3e:d4:
11:f8:01:41:6e:57:ac:d3:61:a2:14:45:fa:8e:55:
d7:5f:51:42:9f:22:ed:92:bd:ee:5c:10:07:07:ae:
23:b3:69:b4:9c:5d:3d:13:74:45:d4:0d:f8:be:fa:
c6:ab:df:44:93:b7:75:35:77:2e:61:43:01:64:bf:
4a:7a:75:78:0a:81:c1:87:fd:0c:2c:44:27:54:41:
f7:19:53:44:15:de:bb:cc:4a:94:65:89:27:78:b7:
76:15:01:ef:97:f2:27:a4:8d:69:7a:7f:77:1a:91:
17:9b:4a:79:44:d3:28:6c:2d:dc:f7:71:51:06:71:
e2:46:e5:fa:5e:e0:46:63:77:23:f4:7f:43:12:7b:
a9:28:5b:38:3f:07:54:71:18:3a:68:22:f3:e5:e9:
15:6f:4a:4d:3e:7d:d9:a7:e3:c1:58:bb:ea:c1:18:
6f:94:31:9b:b7:9a:33:98:d5:cf:13:e0:7c:63:ab:
94:53:04:c6:b1:11:a5:09:38:ed:b2:ef:51:1c:1f:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:10:5D:66:0C:13:98:81:87:73:65:B8:00:C7:DB:CD:5A:C1:6E:72
X509v3 Authority Key Identifier:
keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:76:fd:04:24:9f:c4:81:a8:88:7a:ba:33:12:f7:a3:a5:6e:
53:72:e6:1a:64:16:eb:75:2c:ba:21:83:d4:0e:85:b4:db:da:
bb:29:00:8b:57:65:f5:71:6f:84:aa:77:a7:76:5e:34:ad:3c:
83:a6:90:fc:bd:44:73:3e:62:50:89:b8:8e:e5:c7:6b:f5:de:
f7:36:0d:db:dc:5f:99:19:f5:f5:9c:42:f3:07:c0:ff:5c:7c:
ef:5a:41:25:5a:27:14:bc:42:97:97:ad:43:f1:24:07:4b:cd:
cd:03:ae:06:fc:d4:ad:cd:33:8d:bc:04:e9:0d:72:05:e5:3c:
fe:ca:d8:97:76:58:ee:fe:94:43:33:c7:d4:8b:e1:28:9a:a2:
3d:0d:05:80:f9:65:f9:1b:d8:bd:d6:c5:40:0f:a1:ce:31:7c:
6f:c5:38:85:dc:56:87:92:cb:6d:dd:31:b9:ba:54:c5:52:61:
44:89:ed:78:d9:3c:91:7d:8d:ac:5e:d7:fd:a1:d5:cb:de:7b:
72:68:47:5f:e4:8b:e7:be:75:25:05:77:80:b8:34:22:88:54:
9e:cc:5d:92:4d:a1:3a:5b:52:c5:61:8f:c2:8d:de:c4:59:9f:
61:c2:1b:91:01:37:4d:81:fe:fa:cc:c7:86:62:38:db:09:3d:
5a:39:33:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpOROhunor1wSPt1IAma9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNjE0ODk2NWY3YWZmZWI1ODYwOTYxNWU2YWQ0ZTNlZWE4
Y2ViY2EwHhcNMjUxMTExMDIwMDQ1WhcNMjUxMTEyMDIwMDQ1WjAzMTEwLwYDVQQD
EygyNTEwNWQ2NjBjMTM5ODgxODc3MzY1YjgwMGM3ZGJjZDVhYzE2ZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp3EHoT8B4TTuJXTrMWGfW8AaIJq
oTis1AaDS5dtmheUKHXJAkUm6aVUpyCH7MNsG6rxNYwy9nFkPtQR+AFBbles02Gi
FEX6jlXXX1FCnyLtkr3uXBAHB64js2m0nF09E3RF1A34vvrGq99Ek7d1NXcuYUMB
ZL9KenV4CoHBh/0MLEQnVEH3GVNEFd67zEqUZYkneLd2FQHvl/InpI1pen93GpEX
m0p5RNMobC3c93FRBnHiRuX6XuBGY3cj9H9DEnupKFs4PwdUcRg6aCLz5ekVb0pN
Pn3Zp+PBWLvqwRhvlDGbt5ozmNXPE+B8Y6uUUwTGsRGlCTjtsu9RHB/a6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUQXWYME5iBh3NluADH281awW5yMB8GA1UdIwQY
MBaAFE9hSJZfev/rWGCWFeatTj7qjOvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hMTM1YjItNzkxZS00MWRhLWFmZDct
ZGExYzQxNzU4MDJiLzEvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hMTM1YjItNzkxZS00MWRhLWFmZDctZGExYzQxNzU4MDJi
LzEvVDJGSWxsOTZfLXRZWUpZVjVxMU9QdXFNNjhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHb9BCSf
xIGoiHq6MxL3o6VuU3LmGmQW63UsuiGD1A6FtNvauykAi1dl9XFvhKp3p3ZeNK08
g6aQ/L1Ecz5iUIm4juXHa/Xe9zYN29xfmRn19ZxC8wfA/1x871pBJVonFLxCl5et
Q/EkB0vNzQOuBvzUrc0zjbwE6Q1yBeU8/srYl3ZY7v6UQzPH1IvhKJqiPQ0FgPll
+RvYvdbFQA+hzjF8b8U4hdxWh5LLbd0xubpUxVJhRInteNk8kX2NrF7X/aHVy957
cmhHX+SL5751JQV3gLg0IohUnsxdkk2hOltSxWGPwo3exFmfYcIbkQE3TYH++szH
hmI42wk9WjkzQg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:56 2025 by rpki-client