
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
File: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft (raw, json)
Hash identifier: m7kIhiv102vZ7XiOqyWdwINv5JvOurd5VXpCKQ7gf/U=
Subject key identifier: 61:F2:CD:D6:6C:D8:0B:5A:27:31:36:22:EE:B4:9A:C8:89:D9:66:75
Authority key identifier: ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
Certificate issuer: /CN=ed32ef0caf0a057529fb928f76962a7425390dba
Certificate serial: 0199FB7D039408A04CDCB7A17BB354579D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
Manifest number: 0197
Signing time: Sun 19 Oct 2025 08:01:38 +0000
Manifest this update: Sun 19 Oct 2025 08:01:38 +0000
Manifest next update: Mon 20 Oct 2025 08:01:38 +0000
Files and hashes: 1: 7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl (hash: zeazIuJ4rhHGdezb4/a0g+aAQU44jcFwenPc+5VXE2o=)
2: YNy2gXiy30ryCGRriUHpHagAAGw.roa (hash: HxFEjYkihFtU2VF+anVdxPnpIcq/yrQhubN+L8+juKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:03:94:08:a0:4c:dc:b7:a1:7b:b3:54:57:9d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed32ef0caf0a057529fb928f76962a7425390dba
Validity
Not Before: Oct 19 08:01:38 2025 GMT
Not After : Oct 20 08:01:38 2025 GMT
Subject: CN=61f2cdd66cd80b5a27313622eeb49ac889d96675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ea:71:6f:a4:16:d8:d7:88:f5:3e:f8:2d:04:
ff:4a:f7:fd:ef:da:50:32:ec:b8:65:c4:61:09:80:
16:15:fd:e2:37:74:0a:f2:22:c8:e9:ae:65:82:66:
93:dc:d9:a9:d8:0c:5c:ee:7c:5e:b7:64:36:12:b8:
e3:bd:28:d3:7a:72:0c:be:cd:fb:58:64:e4:22:37:
97:f4:2f:e9:b8:2d:9f:a2:39:b4:f7:d8:49:91:52:
b0:f3:d7:ef:95:f7:83:1b:31:7c:3e:dd:e4:0f:95:
bb:59:10:2a:52:f2:42:34:33:f7:4a:b1:5d:ad:32:
0f:c1:06:8b:2d:b1:69:db:db:0e:ab:01:a4:c7:a1:
c9:9b:54:b4:3c:80:3b:b8:aa:4c:18:48:dd:88:dd:
7c:ab:23:86:d6:dc:1d:92:7d:0f:2c:32:de:c3:bf:
c8:74:c2:b2:c4:13:cc:b0:94:0b:0a:67:93:a5:6b:
49:5f:28:d6:2a:6b:98:f6:7e:7f:31:6e:3a:86:a1:
d2:30:c0:37:a2:9a:d2:bf:6c:99:08:dd:c7:d9:89:
94:a8:39:aa:a1:ef:6c:fd:c3:b9:21:aa:41:cd:1b:
e0:ef:2d:15:7c:ca:a3:b8:ec:0b:9a:81:34:c0:00:
f9:68:8e:ee:d5:62:43:58:25:ea:60:7f:43:7a:3b:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F2:CD:D6:6C:D8:0B:5A:27:31:36:22:EE:B4:9A:C8:89:D9:66:75
X509v3 Authority Key Identifier:
keyid:ED:32:EF:0C:AF:0A:05:75:29:FB:92:8F:76:96:2A:74:25:39:0D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5f632f-e256-4f26-821a-1db531c9d2d8/1/7TLvDK8KBXUp-5KPdpYqdCU5Dbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7d:8d:28:ff:43:d0:73:87:7b:d5:aa:04:6d:90:b6:e6:27:
9f:18:ad:39:2b:49:93:28:10:4f:c5:12:06:f6:9a:3d:16:76:
5b:34:e7:77:6e:4a:a8:61:0f:da:88:9b:18:ef:c4:f9:9d:5e:
f8:2c:df:ef:a6:2b:38:a5:29:c2:c3:de:2f:a1:f6:cc:c3:b9:
74:ab:a2:6f:a2:dc:a7:9b:23:1d:bd:b3:2a:51:d3:c5:eb:7e:
a9:91:59:d1:b7:4d:25:2d:67:ea:db:20:d4:69:a8:f1:c0:9d:
96:c8:85:cf:14:b9:08:24:e3:e4:f2:11:73:58:90:c5:95:78:
a7:2e:90:d3:63:bd:e7:76:e2:55:13:12:41:07:82:81:93:12:
27:0c:25:ba:b8:2a:18:9c:80:4e:e9:8d:5e:a7:fc:a6:68:2b:
e3:89:6e:03:26:b4:46:d6:4c:82:b5:89:df:ed:f8:16:cd:e3:
45:8d:67:54:00:c1:b0:a1:c0:ab:09:22:5e:99:69:b1:68:99:
25:f5:77:34:11:28:17:eb:29:ab:3b:4a:07:76:91:2b:39:89:
57:c1:6d:7e:e3:0e:50:e1:0a:75:3e:1f:0c:45:cf:e1:97:bc:
9e:08:35:6e:a7:c2:6d:4d:3e:bc:cc:26:10:4a:50:2b:2b:d0:
bf:c0:72:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:03 2025 by rpki-client