Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
File: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json)
Hash identifier: DiB7WXdqtwpPp9VjFPpRY8BKjt5Vw82u43SgFbmkJBM=
Subject key identifier: C1:E0:33:DF:F5:90:EB:B6:63:0E:1E:A8:88:20:C3:BC:7B:F1:55:50
Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
Certificate issuer: /CN=ed32ef0caf0a057529fb928f76962a7425390dba
Certificate serial: 019923310A7182EF0A6D574D5AF42DED449C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
Manifest number: 0127
Signing time: Sun 07 Sep 2025 08:00:40 +0000
Manifest this update: Sun 07 Sep 2025 08:00:40 +0000
Manifest next update: Mon 08 Sep 2025 08:00:40 +0000
Files and hashes: 1: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: G0Y93WoUVwA9LtgOkOzJgWUROsNYp1tvgI9SfmtSnuk=)
2: YNy2gXiy30ryCGRriUHpHagAAGw.roa (hash: HxFEjYkihFtU2VF+anVdxPnpIcq/yrQhubN+L8+juKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:0a:71:82:ef:0a:6d:57:4d:5a:f4:2d:ed:44:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba
Validity
Not Before: Sep 7 08:00:40 2025 GMT
Not After : Sep 8 08:00:40 2025 GMT
Subject: CN=c1e033dff590ebb6630e1ea88820c3bc7bf15550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:21:6f:55:bc:ff:d1:d2:13:74:bc:43:49:19:
b0:b0:b1:a6:55:b7:c6:ba:23:0a:31:08:f7:e6:42:
3e:f6:93:7f:23:2c:3f:6e:0d:db:a7:a4:79:52:2c:
39:62:22:48:46:a1:c9:21:5a:ba:14:20:04:06:a2:
cd:12:6d:d7:8a:9b:5c:47:e5:46:d5:a3:12:99:e2:
78:a9:44:e8:dc:c9:8f:e0:40:8d:b9:54:1d:87:40:
6a:2e:1d:da:a8:51:bc:10:3f:7b:94:d3:27:bd:3e:
d0:2d:83:42:c6:39:8a:4a:50:cf:02:d1:ce:32:b0:
ed:19:aa:69:c4:37:ba:19:35:39:74:90:63:69:bb:
64:d6:fb:c7:9c:92:a3:52:cc:97:99:54:0a:cb:ce:
b1:0e:f0:37:df:f5:f8:ab:a4:53:15:5e:1a:9a:24:
81:12:b5:aa:05:2e:85:8c:d0:fa:f3:a2:e8:a9:13:
4a:1d:ca:df:d4:d0:94:a2:34:71:93:69:1c:8a:33:
e6:7e:68:e3:ae:50:ad:8d:06:29:95:44:c6:e9:27:
8e:64:52:12:67:40:3a:bf:4f:a2:57:c6:9e:c3:30:
39:49:dc:fe:73:90:95:64:44:12:3d:b6:a0:77:4f:
2d:86:d9:ea:3e:a3:ce:9e:35:ea:41:3d:1f:1f:d7:
dd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E0:33:DF:F5:90:EB:B6:63:0E:1E:A8:88:20:C3:BC:7B:F1:55:50
X509v3 Authority Key Identifier:
keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2a:05:f0:5c:6c:d0:df:57:b0:8b:75:fc:a8:ec:4c:f9:92:
57:c1:93:e5:a1:a2:fd:f8:ea:4a:ad:84:1e:99:ef:40:0c:98:
6e:a8:0d:9a:9f:ee:d9:38:92:41:31:a0:4e:dc:08:46:21:ae:
70:17:ff:10:a6:3c:f2:97:b8:78:24:ca:30:e1:51:60:90:75:
e9:38:d5:f5:e0:24:8f:4b:0c:b9:67:67:c9:55:5e:a5:68:44:
44:03:cc:b5:a0:1c:9c:9d:16:3f:65:f2:7d:1c:73:4b:f7:7d:
d0:c8:34:c6:cc:3b:68:a6:63:52:18:88:ff:27:da:e6:5b:44:
e8:7d:d2:65:85:7a:b0:6c:b4:12:d9:74:fa:75:3e:7d:14:a1:
1c:1b:72:d7:df:35:61:44:21:97:b7:e0:10:85:d1:2b:36:0b:
87:15:05:9d:af:f4:f3:f8:04:2e:52:09:05:b4:5c:cb:af:50:
ac:48:64:29:1f:4a:d0:fb:f2:1a:84:38:b3:08:98:94:18:8b:
25:e8:32:81:ae:0b:b1:18:c8:fa:17:2e:05:64:a9:28:e7:e3:
14:95:87:d2:0b:1a:02:31:00:d0:97:08:fe:f1:9d:3f:64:1c:
ae:f0:46:47:48:e1:3a:45:b3:c8:73:2f:e5:05:9f:98:02:73:
68:5b:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:35 2025 by rpki-client