Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
File: T2L75L_BSBjG6c5mewVq1x_vKsM.mft (raw, json)
Hash identifier: lfkbhpm+ZjpOgT/7B4B/Eg0il1bm/IiHDo4mMPn8va8=
Subject key identifier: 3B:91:E0:6C:AA:37:CC:A8:54:B8:16:34:88:16:4A:FA:28:11:F3:9C
Authority key identifier: 4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3
Certificate issuer: /CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
Certificate serial: 019749D61DF1E24ADA9DEFF0CC3127F90DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
Manifest number: 7A
Signing time: Sat 07 Jun 2025 10:00:58 +0000
Manifest this update: Sat 07 Jun 2025 10:00:58 +0000
Manifest next update: Sun 08 Jun 2025 10:00:58 +0000
Files and hashes: 1: T2L75L_BSBjG6c5mewVq1x_vKsM.crl (hash: FM8zsm9+iy9P+yl2nWsoE/YvQ9e8Qf2nF1EHQZz0KRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:1d:f1:e2:4a:da:9d:ef:f0:cc:31:27:f9:0d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f62fbe4bfc14818c6e9ce667b056ad71fef2ac3
Validity
Not Before: Jun 7 10:00:58 2025 GMT
Not After : Jun 8 10:00:58 2025 GMT
Subject: CN=3b91e06caa37cca854b8163488164afa2811f39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:9d:7c:b5:d8:38:e7:44:31:56:6f:77:12:
9b:1b:da:40:ba:a7:10:7d:f2:fd:a9:38:e1:4e:17:
7b:26:eb:03:b5:0f:d1:7e:b5:33:3f:52:39:eb:02:
71:f1:31:22:cd:2a:d7:c1:f0:03:1f:68:b8:32:1b:
25:d8:0e:8b:04:d0:68:0a:e5:6f:f6:76:cd:8a:d6:
4a:3b:76:1a:42:e1:f8:d2:f9:9b:e8:ad:ee:76:53:
3e:d6:81:cf:93:2b:ae:1e:d4:05:90:77:b9:56:b5:
c3:ed:1c:ed:ca:b1:20:55:8b:1f:3c:4f:83:3d:74:
ba:ce:9f:9a:62:89:97:7c:da:a4:59:62:70:05:f9:
70:3d:cd:2d:c4:c5:5e:b4:2a:ee:b3:48:05:8e:4a:
9b:1d:f0:09:07:c8:fa:2a:bb:67:63:6f:ec:59:58:
08:84:9c:bd:19:32:e9:47:c0:f3:c4:0f:61:ad:bb:
4f:1a:d6:1e:ef:9d:d2:5a:4a:b8:13:f4:c4:91:6f:
44:81:2e:04:f7:1f:f3:10:e9:90:8f:be:67:96:af:
98:51:aa:0a:c9:32:67:52:2e:92:da:50:64:38:fc:
f7:db:6f:76:67:af:f4:5c:a0:50:bc:b6:6c:68:35:
c9:da:8c:34:51:cf:63:3c:f7:a6:21:93:d0:a4:17:
2b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:91:E0:6C:AA:37:CC:A8:54:B8:16:34:88:16:4A:FA:28:11:F3:9C
X509v3 Authority Key Identifier:
keyid:4F:62:FB:E4:BF:C1:48:18:C6:E9:CE:66:7B:05:6A:D7:1F:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2L75L_BSBjG6c5mewVq1x_vKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/4ea9c3-2800-4667-a44c-afaf7fdd8dfd/1/T2L75L_BSBjG6c5mewVq1x_vKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:29:92:0a:8c:80:1d:19:de:f9:44:a0:84:52:44:8b:aa:d4:
22:8f:0e:42:38:3f:a5:d4:fd:28:f2:44:8a:25:96:21:5d:1a:
77:2e:30:57:04:e2:87:f4:2f:08:ca:8b:ae:5f:d8:17:9a:ed:
c6:29:0b:3c:50:8e:17:04:34:49:bb:8d:08:86:23:c0:bb:c9:
d2:f4:02:33:f5:0d:fe:8f:f2:c9:52:71:7e:32:a8:89:6c:d3:
67:8b:c7:e1:10:9b:7b:b9:8f:a1:bf:72:66:50:b9:4d:09:44:
47:83:74:cf:7f:b2:4f:1d:db:93:4e:5b:68:b1:37:e0:13:c2:
65:99:85:8e:75:5d:25:ad:0f:53:7c:b6:cf:8e:d2:e9:20:94:
f2:59:e0:23:ce:f2:13:51:84:b7:c4:8c:2b:3a:15:76:ce:c5:
5c:79:ec:9e:ee:d7:b7:1a:75:b3:d1:42:7e:89:0b:1b:11:3a:
f0:8f:4f:0c:d3:a4:13:30:ab:11:55:82:7f:ee:4e:ad:27:ab:
a4:2d:f0:83:6a:f1:24:8a:31:73:bb:48:94:88:d0:45:7b:af:
1b:44:ec:51:e3:19:72:60:75:22:43:c9:22:a0:82:c3:f9:5e:
e6:4a:c5:ea:ec:2d:a9:da:c0:09:87:04:3d:76:71:49:d9:fe:
25:58:78:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:31:42 2025 by rpki-client