Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
File: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json)
Hash identifier: maxGdzexJ2vU8gJSheWmhTn95+iFrYLwFq4nk13Wlqg=
Subject key identifier: 7A:09:88:61:99:BB:D8:57:B5:A2:E9:4A:5B:9C:72:26:4C:61:3D:82
Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
Certificate issuer: /CN=ed32ef0caf0a057529fb928f76962a7425390dba
Certificate serial: 019873747E54241A177FB3BADC3F73DB6291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
Manifest number: CC
Signing time: Mon 04 Aug 2025 05:01:10 +0000
Manifest this update: Mon 04 Aug 2025 05:01:10 +0000
Manifest next update: Tue 05 Aug 2025 05:01:10 +0000
Files and hashes: 1: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: LaCtys9Hd+pC/PvLsPdw55BM6Q6KQM5CYkX7VOeDf0A=)
2: YNy2gXiy30ryCGRriUHpHagAAGw.roa (hash: HxFEjYkihFtU2VF+anVdxPnpIcq/yrQhubN+L8+juKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:7e:54:24:1a:17:7f:b3:ba:dc:3f:73:db:62:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba
Validity
Not Before: Aug 4 05:01:10 2025 GMT
Not After : Aug 5 05:01:10 2025 GMT
Subject: CN=7a09886199bbd857b5a2e94a5b9c72264c613d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:fa:be:61:d8:6f:d8:cd:fd:ff:60:50:40:
71:85:81:76:22:d5:cc:62:76:28:e9:41:0e:34:7f:
e9:48:a0:56:a9:3f:de:9d:aa:0e:d1:40:03:25:87:
98:e4:c2:af:09:b7:0e:5e:7d:0a:fb:68:93:0a:79:
93:f1:7d:a3:06:61:fd:76:f0:0f:32:a0:59:bc:0c:
e9:b7:93:fb:c3:cb:90:e8:fd:11:aa:fa:41:39:83:
0e:2e:a9:26:35:94:93:e3:dd:ff:6d:41:1f:84:a9:
6d:2d:fc:6a:20:2a:0d:d8:13:07:f1:01:1c:1c:ea:
5c:68:c4:a8:fa:61:75:71:66:e3:ab:b9:ba:cd:0f:
d4:ca:5a:56:8d:3b:4b:50:b7:92:e6:d6:50:52:ff:
58:10:4f:a1:bb:bf:3a:10:2c:7c:66:39:cb:a4:73:
34:99:9e:42:f2:63:43:77:3e:73:b3:8d:2c:9b:50:
0b:09:cd:4a:95:d5:95:8c:73:94:0a:c3:7d:e4:7d:
12:7c:4a:e0:d8:0c:fa:0d:70:c0:98:93:5b:f4:34:
03:80:ae:34:1c:04:a3:b0:d9:50:94:e2:e1:22:31:
2b:cd:92:a0:26:52:89:fb:db:e2:f1:36:a2:08:0a:
bd:3a:04:ea:a5:32:39:3c:ce:fd:fa:cb:35:a7:72:
15:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:09:88:61:99:BB:D8:57:B5:A2:E9:4A:5B:9C:72:26:4C:61:3D:82
X509v3 Authority Key Identifier:
keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:15:5e:2e:3f:c1:2f:79:e3:69:11:87:f6:6e:48:18:78:0c:
f6:f5:9d:68:51:10:dc:51:8b:b7:f9:d8:0d:6d:30:41:be:26:
27:83:2e:19:94:f2:db:21:01:15:83:48:48:7f:cb:a1:69:8b:
bf:6f:11:28:02:50:7e:c9:9e:f2:80:64:54:b5:f0:0d:76:84:
f5:4e:e8:56:ab:e0:18:83:3d:45:bd:05:4a:d8:b0:01:b5:61:
88:e3:a2:0f:4c:60:80:fd:28:46:a9:e2:82:18:89:97:12:20:
d8:31:c0:1c:23:0f:53:93:dd:fd:f3:d6:77:8a:88:5c:b6:39:
77:b8:89:48:41:03:b1:06:53:b3:7a:1c:ed:5b:63:62:fb:b0:
a3:89:1a:ab:44:f2:b1:ce:a4:74:87:17:e7:c9:c2:67:41:9b:
14:80:ff:c3:19:76:ef:b3:81:29:d4:20:38:dd:6f:d5:ae:b6:
81:f0:ef:a1:42:d5:b8:25:df:7e:6d:64:1c:83:5e:80:6e:2f:
6d:24:cc:0c:e0:87:a6:46:37:6b:be:d4:a2:fb:95:4a:3e:f0:
a7:57:84:a0:64:7e:0a:87:e6:71:f2:8e:76:84:fc:cf:5e:ef:
b7:13:37:9c:4b:db:7f:3a:3c:e2:6d:f7:8a:b3:c6:2b:bb:7f:
6f:78:78:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:21 2025 by rpki-client