Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
File: TVSL_7MhSZGpynyfD1tIVFiLl14.mft (raw, json)
Hash identifier: YNcxVM0+mvm/hfe+brJTWy5yyQNwootG139fjUtjnws=
Subject key identifier: CF:14:47:95:6F:EA:B3:0F:39:79:A9:82:D1:5E:93:94:D3:4F:2D:EA
Authority key identifier: 4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
Certificate issuer: /CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Certificate serial: 019A71B83C417871BA045D17393424A4C2C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
Manifest number: 0801
Signing time: Tue 11 Nov 2025 07:01:30 +0000
Manifest this update: Tue 11 Nov 2025 07:01:30 +0000
Manifest next update: Wed 12 Nov 2025 07:01:30 +0000
Files and hashes: 1: TVSL_7MhSZGpynyfD1tIVFiLl14.crl (hash: g+kqiIThMgCUAy4u+mCts1OcYZwKY2xm1WyKRR3jNkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:3c:41:78:71:ba:04:5d:17:39:34:24:a4:c2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Validity
Not Before: Nov 11 07:01:30 2025 GMT
Not After : Nov 12 07:01:30 2025 GMT
Subject: CN=cf1447956feab30f3979a982d15e9394d34f2dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:cd:7d:11:da:8e:c2:8e:0e:75:10:ac:ee:
dd:4d:ff:48:60:b3:7e:63:5d:c1:e6:c8:32:12:7d:
75:c9:b8:e4:e8:5c:a5:55:40:96:91:34:2f:68:6e:
ee:d1:23:7f:c8:13:4d:51:38:5e:46:74:42:76:d9:
49:8b:ed:28:8d:a0:18:90:f6:a5:1e:4f:4d:ec:89:
e9:6c:bc:f8:10:d5:03:3b:de:53:15:23:8f:5d:7a:
ad:a8:52:7d:22:8d:39:69:59:cd:3f:9d:e2:2e:9c:
0d:75:f2:ac:19:fe:1e:70:d7:7b:ce:0f:1e:92:6e:
3f:29:0a:c5:8c:e3:f3:1d:31:81:1c:2b:e0:48:9f:
cf:dd:12:79:e1:83:51:a4:e7:09:90:29:d0:eb:a0:
78:bd:d1:05:9b:5d:42:8a:be:c0:f7:ac:67:ff:57:
d4:6f:fc:57:17:2d:5f:2f:48:dc:76:8f:2e:e7:5a:
b8:88:cb:e8:43:57:72:14:e2:b4:24:76:aa:82:76:
5d:a3:26:ca:75:44:9d:7f:ac:3d:c7:02:3b:51:74:
8f:8d:19:48:36:d3:64:d1:16:95:e4:b7:53:0d:d8:
75:37:1d:33:ab:65:e6:a6:82:e1:44:d7:66:45:d1:
c0:3f:53:80:3c:2e:e2:47:9c:11:29:9c:96:43:f0:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:47:95:6F:EA:B3:0F:39:79:A9:82:D1:5E:93:94:D3:4F:2D:EA
X509v3 Authority Key Identifier:
keyid:4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:0c:84:4b:d8:6e:87:dc:eb:f1:e4:9d:68:a1:06:40:cd:88:
f1:4e:75:9d:4b:22:70:e4:d4:cb:33:00:2e:33:e5:41:e2:f6:
e0:1b:00:f0:63:e0:53:13:a1:84:dc:d4:e5:b3:15:8d:72:2a:
69:00:4f:f2:12:c3:6f:62:71:6d:0b:e5:1e:fc:72:44:af:d5:
f4:21:ef:c0:69:58:fb:ae:1e:a6:f7:6a:2e:ca:df:20:9a:55:
f9:03:38:eb:97:80:8f:5d:9a:cd:8e:98:91:99:41:52:fb:ab:
1d:31:d2:eb:1c:02:a3:4d:ec:e5:14:d4:84:27:fe:b9:ff:3e:
dd:0b:1e:f4:91:88:43:58:47:43:c4:c9:65:d7:dd:b4:95:f2:
fd:6d:8d:c7:52:70:80:49:2b:41:39:13:6f:1b:d1:aa:4e:ab:
ac:95:1f:60:40:2f:d4:24:15:40:8a:b5:7f:bf:71:75:df:40:
1f:d6:46:2a:82:68:66:73:c3:af:23:e1:11:7c:42:80:84:50:
20:44:30:86:2f:41:33:9e:1f:9c:da:d2:c0:72:82:3c:10:81:
e1:26:34:35:94:2d:ac:96:fe:9c:01:42:6d:5d:45:1d:18:60:
eb:73:bb:86:cb:70:94:de:86:08:8b:c7:6c:8e:1c:d1:56:a2:
fa:bc:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:39 2025 by rpki-client