Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier: NJkorWbyrD609pYnEPeoy6yjy50nWsSo4QBtPm2mZMk=
Subject key identifier: B5:B1:F3:6F:EB:1C:90:E8:98:14:4D:E9:DB:FC:C3:16:85:FF:8C:2C
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial: 01987F0A6A9D70E9067733F0EF5AC8CF8D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number: 0CE9
Signing time: Wed 06 Aug 2025 11:00:45 +0000
Manifest this update: Wed 06 Aug 2025 11:00:45 +0000
Manifest next update: Thu 07 Aug 2025 11:00:45 +0000
Files and hashes: 1: 1pfssBKaJPTPxd3zeNHxRW_fqlQ.roa (hash: pgbH/xz13H4gqRKangAkvOuybmTQQOZjQXVtcuntEbc=)
2: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: zEOkIUJBqGmI9ABPaZhbUfuEJagmbz4uItwQUMsxm4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:6a:9d:70:e9:06:77:33:f0:ef:5a:c8:cf:8d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Validity
Not Before: Aug 6 11:00:45 2025 GMT
Not After : Aug 7 11:00:45 2025 GMT
Subject: CN=b5b1f36feb1c90e898144de9dbfcc31685ff8c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:06:ff:d7:76:1b:1b:b8:69:17:5b:db:ef:93:
cf:4c:37:f0:20:f2:79:f2:0d:74:a0:95:7c:2a:22:
16:a3:34:27:a6:7c:ed:a1:14:76:d5:c5:6c:2e:25:
34:23:b3:30:25:32:bf:0d:5d:0c:2a:8e:6f:1a:44:
e5:2a:a9:a4:e1:26:7e:20:06:18:af:3e:12:45:2a:
e9:04:74:9c:25:9b:68:20:d0:c0:d1:08:9d:3a:e2:
97:03:91:8a:06:6a:d2:04:cb:00:23:21:c7:29:31:
3c:69:b6:7d:35:c9:27:a6:9d:c3:ec:b5:16:b2:0b:
ad:36:03:27:11:47:21:01:34:64:5d:e7:f2:6f:f3:
49:9c:63:cf:34:5b:d0:2f:43:54:64:65:15:f0:fe:
34:4a:ee:b2:e9:b8:17:18:0e:e4:1d:88:fc:b0:ac:
c9:a3:57:4b:bf:ff:f7:3d:00:b2:f2:7a:55:8a:71:
48:68:81:fd:03:19:61:5b:06:b6:c8:86:38:cd:6e:
83:2d:b6:28:70:37:92:3f:bc:c8:a4:a5:91:ca:f1:
32:d1:ff:17:f8:50:8d:cf:9c:35:be:37:a3:ab:a2:
f3:a7:58:50:16:91:7b:e2:87:fe:bf:05:d8:9e:de:
f6:08:7d:81:e0:c0:df:03:9a:25:60:fb:d6:5b:b5:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B1:F3:6F:EB:1C:90:E8:98:14:4D:E9:DB:FC:C3:16:85:FF:8C:2C
X509v3 Authority Key Identifier:
keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4c:7c:3d:44:3b:40:5e:61:6b:ed:c1:3e:19:2f:1d:9a:e3:
25:26:82:5d:aa:2d:e5:08:d4:79:a6:cf:00:1d:fa:84:2f:46:
06:63:95:f8:03:7d:26:bc:7c:0b:63:b2:23:b0:8d:71:a9:7b:
23:b9:79:ff:ee:5a:44:2e:8d:af:85:2e:7f:5c:27:b7:8a:ed:
11:93:91:ea:45:eb:da:85:6a:09:f5:d2:d1:ce:16:20:c4:50:
bf:7d:7c:42:06:58:c8:e1:d3:ae:6b:ca:e0:78:3a:ce:2c:cb:
96:8d:bc:b6:7b:6c:8f:d2:66:8c:fe:e9:08:41:50:cb:98:62:
f2:22:b6:0b:2a:f1:89:cd:93:c4:a6:b9:20:c7:62:49:4a:c2:
7b:ed:86:31:69:84:5d:17:3c:9c:b4:16:41:7b:ce:8e:1d:5e:
ed:ba:9f:ab:e6:33:22:99:73:28:94:fd:d6:6a:79:96:1a:59:
f6:93:ed:23:d7:aa:3d:cd:eb:19:2d:7c:1e:5f:cd:60:37:20:
25:07:ef:b9:db:95:b8:6e:63:35:c9:93:02:4a:20:52:4f:0d:
3f:f4:38:67:b7:0f:41:78:82:7f:08:fd:2d:58:e3:5d:b6:6a:
a6:13:b8:9c:b2:b9:e5:bf:cc:fc:04:cf:92:c6:31:27:d7:26:
ec:4a:eb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:04:02 2025 by rpki-client