Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
File: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json)
Hash identifier: imhICU/mwAghJuZ/tXrec94qqxfdMGUhoLKlcfP6Z+0=
Subject key identifier: 9E:E7:B1:AD:82:99:8C:1D:F9:04:06:6E:42:7B:24:B8:AF:BA:38:67
Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
Certificate issuer: /CN=ed32ef0caf0a057529fb928f76962a7425390dba
Certificate serial: 019A221B944F42425E62CC8BE55DB0E0972E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
Manifest number: 01AB
Signing time: Sun 26 Oct 2025 20:00:24 +0000
Manifest this update: Sun 26 Oct 2025 20:00:24 +0000
Manifest next update: Mon 27 Oct 2025 20:00:24 +0000
Files and hashes: 1: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: En2vJ1jToBvrMLYrCCG6FgmMQ2uQ4ApvR5qGgRWo9Q0=)
2: YNy2gXiy30ryCGRriUHpHagAAGw.roa (hash: HxFEjYkihFtU2VF+anVdxPnpIcq/yrQhubN+L8+juKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:94:4f:42:42:5e:62:cc:8b:e5:5d:b0:e0:97:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba
Validity
Not Before: Oct 26 20:00:24 2025 GMT
Not After : Oct 27 20:00:24 2025 GMT
Subject: CN=9ee7b1ad82998c1df904066e427b24b8afba3867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:8c:b8:01:ac:96:f7:f3:87:4b:b1:a2:e8:86:
03:ad:c7:8a:ac:cc:88:fb:c9:64:16:b5:04:0e:bf:
fc:23:5c:18:8d:12:ea:66:c6:5a:2e:f9:9f:3f:51:
38:c1:7b:71:8f:13:f5:4f:5b:7a:92:12:e5:cd:69:
ec:29:99:9f:03:f4:da:25:eb:47:53:0b:60:41:a9:
f6:a1:c2:68:a9:54:9a:01:53:1c:da:07:3a:6a:75:
b6:85:40:c0:85:64:19:44:c0:cc:12:7c:43:52:b5:
9b:bd:a4:2c:28:f3:d4:55:de:56:a8:62:ce:c6:42:
15:b3:14:0b:0d:27:97:2d:d4:83:b1:80:41:c9:85:
13:4f:a1:32:8f:25:c1:ab:11:8a:93:6b:33:db:8f:
08:c5:7b:9c:a9:a6:83:42:d2:bd:02:11:c3:6f:77:
e6:12:d3:6d:56:44:a4:b6:e2:de:dc:59:fd:61:ce:
e4:3a:70:4a:78:00:42:1d:c1:4d:f7:2c:2c:dd:27:
f8:96:6e:23:56:d8:9c:e8:cc:69:4f:d4:bc:51:f8:
53:91:68:81:39:a9:b3:c4:be:60:c6:13:d4:a6:fe:
d6:b8:57:9f:a7:41:1c:fb:6e:bc:81:6c:e2:fd:8d:
ba:7e:4d:2f:d2:6a:05:e8:90:26:33:63:e1:80:a1:
a7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E7:B1:AD:82:99:8C:1D:F9:04:06:6E:42:7B:24:B8:AF:BA:38:67
X509v3 Authority Key Identifier:
keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:b3:4e:7a:15:b1:30:6e:d4:5b:1d:6b:53:71:3c:7d:c5:83:
03:1c:c8:b2:6a:8d:21:ea:62:ba:fd:1a:e7:d4:66:49:95:a9:
05:50:e2:5d:c0:2b:a6:47:2c:0b:a6:6b:eb:0d:a4:89:9d:96:
58:7e:e1:6e:3b:72:14:ea:2b:7c:14:7d:e4:14:33:00:21:41:
5b:ee:68:c1:91:79:a6:a4:d7:46:f9:a4:ca:60:7c:c0:8c:54:
ba:00:5a:12:ca:4c:c3:7b:21:27:6e:47:92:21:76:19:de:de:
85:90:6f:aa:b4:0e:77:dc:9f:a5:37:5e:ad:17:63:56:d0:39:
3e:d4:2f:79:a1:94:ec:6b:28:b7:c9:49:dd:77:23:a1:d4:41:
f1:86:21:c3:33:d3:c3:90:be:ae:6e:b8:5e:0a:73:18:96:a0:
74:bc:ce:d5:a1:41:59:aa:01:b5:f0:b0:0b:2a:d9:c9:85:25:
df:c4:f7:c6:77:75:d3:ea:ff:d7:d6:bc:48:9f:ea:72:fe:3e:
07:db:7e:19:60:14:32:88:b3:9f:54:b8:95:71:9d:95:04:9b:
71:f1:0d:54:2c:c8:0b:ed:82:5e:ed:fe:55:69:fa:35:ad:04:
f8:34:d0:bb:33:e0:26:0b:3d:c1:fa:b0:0b:6e:6c:64:49:82:
e6:18:18:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:14:57 2025 by rpki-client