Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier: /I9bJAA8ZYTte+Okx47UdbI/+9MCvKc+UWBb7pTdXt0=
Subject key identifier: 27:61:8F:42:59:83:72:7C:C2:5C:BC:28:E3:C9:C0:6D:59:C8:78:0F
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial: 019A5451F6C34A6DC0B3F0A21641188A2789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number: 0DDC
Signing time: Wed 05 Nov 2025 14:00:48 +0000
Manifest this update: Wed 05 Nov 2025 14:00:48 +0000
Manifest next update: Thu 06 Nov 2025 14:00:48 +0000
Files and hashes: 1: 1pfssBKaJPTPxd3zeNHxRW_fqlQ.roa (hash: pgbH/xz13H4gqRKangAkvOuybmTQQOZjQXVtcuntEbc=)
2: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: SGw5RXW3Xfd/gv+RvLhghxb0mPFjcArPJlRK2tJOuAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:f6:c3:4a:6d:c0:b3:f0:a2:16:41:18:8a:27:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Validity
Not Before: Nov 5 14:00:48 2025 GMT
Not After : Nov 6 14:00:48 2025 GMT
Subject: CN=27618f425983727cc25cbc28e3c9c06d59c8780f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b1:7a:48:ff:0e:e7:df:82:fa:dc:9f:64:cc:
70:a0:fa:2f:50:4d:53:77:c2:e9:6a:02:04:77:54:
1c:e3:f4:69:1d:b3:25:70:93:75:63:ae:a8:9a:ae:
67:db:be:d9:7b:4e:75:ff:64:8c:72:1a:9e:39:f6:
75:f7:7d:43:9c:e9:2a:d5:ad:66:4f:c3:98:c0:39:
37:80:27:5d:88:c8:e3:9a:01:a3:c4:4a:6f:b1:d7:
11:64:95:ec:73:df:ce:20:66:7d:a3:ee:1e:9e:72:
50:42:cd:7f:a8:0b:6c:c1:f8:91:06:09:1c:20:5d:
d2:52:00:ed:78:e3:18:4e:2b:3c:7f:5c:f8:76:88:
c1:c4:87:10:82:b3:8e:ff:11:cd:40:76:39:54:b6:
f7:a3:b1:22:81:3c:c8:ba:32:29:70:34:78:e1:3d:
1a:51:75:ab:c7:5c:a3:f7:65:24:a1:99:0c:15:c2:
96:ab:41:48:9f:f4:6c:91:0c:5f:b8:71:1e:08:8d:
46:9c:e4:bd:80:8a:46:45:41:61:0e:32:b1:d3:8c:
68:f7:4e:cb:28:dc:e9:2e:a0:a0:33:ba:44:2a:61:
40:41:af:e3:86:3b:39:56:3d:de:36:59:05:b4:ac:
9e:0d:83:00:08:2e:4f:2b:1f:60:6c:68:e6:23:2e:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:61:8F:42:59:83:72:7C:C2:5C:BC:28:E3:C9:C0:6D:59:C8:78:0F
X509v3 Authority Key Identifier:
keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:80:22:bb:0c:6e:85:25:9c:76:0c:15:58:55:10:54:57:0d:
ee:ce:08:67:ed:87:a0:8e:c9:71:6e:a1:cb:b3:d6:34:f8:89:
87:6e:dc:b2:00:6a:7e:35:e2:76:80:37:79:31:46:51:d3:da:
d7:b5:20:7e:39:12:b4:78:67:15:53:86:ad:ab:23:47:ae:51:
43:40:dd:4f:77:f1:2f:30:0e:57:c8:76:6f:59:c5:b3:cf:05:
b7:f6:35:71:89:0c:88:9e:84:a0:fa:50:18:ab:c3:9d:d3:84:
55:66:9f:81:e8:b1:15:30:14:e7:59:44:a7:79:bf:58:e3:fe:
94:1f:19:a3:4a:f1:cc:ab:9c:65:87:28:c0:0f:07:46:db:7e:
85:09:fb:da:1d:76:b4:29:80:20:92:92:12:22:87:02:3e:32:
11:27:78:79:47:3e:6a:bb:0f:c6:ab:c4:ab:6b:d7:79:c5:74:
fd:cd:3d:09:1b:26:64:70:6a:ba:39:bb:2b:9a:5f:73:59:c1:
f2:5d:8a:16:95:01:1e:71:22:72:63:83:0d:ec:71:f0:f3:4d:
75:7c:ee:85:60:ad:6a:bb:75:8b:da:b8:73:3c:fa:49:58:2b:
2e:35:ff:26:61:16:f9:11:ca:a3:31:1a:45:18:75:28:10:64:
64:fc:85:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpUUfbDSm3As/CiFkEYiieJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDg4MmU3OTE3NDE0MmQ0ZTU0Y2QxMWY3MWMxNWJhNmUz
OTcyMTMwHhcNMjUxMTA1MTQwMDQ4WhcNMjUxMTA2MTQwMDQ4WjAzMTEwLwYDVQQD
EygyNzYxOGY0MjU5ODM3MjdjYzI1Y2JjMjhlM2M5YzA2ZDU5Yzg3ODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rF6SP8O59+C+tyfZMxwoPovUE1T
d8LpagIEd1Qc4/RpHbMlcJN1Y66omq5n277Ze051/2SMchqeOfZ1931DnOkq1a1m
T8OYwDk3gCddiMjjmgGjxEpvsdcRZJXsc9/OIGZ9o+4ennJQQs1/qAtswfiRBgkc
IF3SUgDteOMYTis8f1z4dojBxIcQgrOO/xHNQHY5VLb3o7EigTzIujIpcDR44T0a
UXWrx1yj92UkoZkMFcKWq0FIn/RskQxfuHEeCI1GnOS9gIpGRUFhDjKx04xo907L
KNzpLqCgM7pEKmFAQa/jhjs5Vj3eNlkFtKyeDYMACC5PKx9gbGjmIy6IBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdhj0JZg3J8wly8KOPJwG1ZyHgPMB8GA1UdIwQY
MBaAFO4IgueRdBQtTlTNEfccFbpuOXITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUt
NGYzYzMzYzA4ODg0LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUtNGYzYzMzYzA4ODg0
LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYAiuwxu
hSWcdgwVWFUQVFcN7s4IZ+2HoI7JcW6hy7PWNPiJh27csgBqfjXidoA3eTFGUdPa
17UgfjkStHhnFVOGrasjR65RQ0DdT3fxLzAOV8h2b1nFs88Ft/Y1cYkMiJ6EoPpQ
GKvDndOEVWafgeixFTAU51lEp3m/WOP+lB8Zo0rxzKucZYcowA8HRtt+hQn72h12
tCmAIJKSEiKHAj4yESd4eUc+arsPxqvEq2vXecV0/c09CRsmZHBqujm7K5pfc1nB
8l2KFpUBHnEicmODDexx8PNNdXzuhWCtart1i9q4czz6SVgrLjX/JmEW+RHKozEa
RRh1KBBkZPyFmw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 16:23:03 2025 by rpki-client