Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier: y7KufXPBd0M65mtENfOfdL5phd+EVTB671bvU/+xMpA=
Subject key identifier: 51:1A:F0:24:9D:F5:B4:B4:D6:38:D8:56:AF:02:23:B9:B1:F8:FB:6F
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial: 019A7149EB0FDB672FA9861E784356D166FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number: 0DEB
Signing time: Tue 11 Nov 2025 05:01:00 +0000
Manifest this update: Tue 11 Nov 2025 05:01:00 +0000
Manifest next update: Wed 12 Nov 2025 05:01:00 +0000
Files and hashes: 1: 1pfssBKaJPTPxd3zeNHxRW_fqlQ.roa (hash: pgbH/xz13H4gqRKangAkvOuybmTQQOZjQXVtcuntEbc=)
2: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: xajZtSH9yLv85XyQO7RxyKbB1+LJzXK/qK9vcm0PeFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:eb:0f:db:67:2f:a9:86:1e:78:43:56:d1:66:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Validity
Not Before: Nov 11 05:01:00 2025 GMT
Not After : Nov 12 05:01:00 2025 GMT
Subject: CN=511af0249df5b4b4d638d856af0223b9b1f8fb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:48:ca:22:62:68:fb:1b:05:30:ab:f5:e2:39:
43:e2:7f:6b:1f:d9:10:63:ef:7f:4e:e3:84:af:ce:
b5:cf:69:c2:2b:c1:8d:10:30:24:3e:46:b2:78:04:
42:fc:d8:a0:7a:68:a5:02:8a:a5:a0:a8:34:8e:18:
9b:e7:21:b5:5b:8c:88:23:06:54:51:7e:11:49:73:
1d:98:ed:a2:da:37:9f:e9:34:ce:d5:46:4f:1b:03:
58:39:97:90:ec:a4:00:ad:2a:15:2d:d8:ae:c8:1f:
7b:90:66:01:47:11:02:8c:e3:ed:69:da:74:4a:04:
1a:7b:fe:09:39:25:70:ff:6d:02:ca:6b:be:ff:89:
33:22:fc:f1:93:1e:6a:51:74:61:ab:fc:74:04:b9:
6e:1e:41:01:66:49:2c:f2:a8:ed:1a:a5:e8:3f:63:
a1:05:bd:3d:dc:97:2e:4e:3a:38:e4:66:b0:3f:9e:
69:d1:16:e1:4f:91:d2:7d:2e:a8:5a:a7:2b:c5:5b:
e6:d4:4a:43:4f:ff:61:2d:cb:88:7d:6f:b9:98:b6:
16:ea:14:12:c4:5e:8e:bf:3c:4e:21:aa:aa:d7:20:
ae:d8:d2:f2:8a:ec:12:21:c9:02:c3:f4:6b:a8:2b:
5e:21:89:31:4f:30:8a:e6:23:fa:24:4e:25:60:66:
ed:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1A:F0:24:9D:F5:B4:B4:D6:38:D8:56:AF:02:23:B9:B1:F8:FB:6F
X509v3 Authority Key Identifier:
keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:65:2d:d8:d0:00:57:86:13:15:ab:30:79:3e:d9:36:c2:a7:
92:ab:c0:3e:a0:4f:82:dd:a9:0a:bc:13:81:36:e1:cc:c0:ff:
cb:6c:86:ac:60:29:09:dc:d9:a6:c5:73:ce:d1:06:ed:8b:d1:
8f:ba:b1:a7:ea:9f:f4:5b:bb:7c:9c:cd:05:83:94:f6:ba:c3:
a0:bf:fb:94:d8:52:65:93:b3:6a:d3:ba:0e:8f:79:ee:74:5a:
8e:29:3f:81:c6:8d:55:e7:28:74:5e:07:4c:ab:12:83:51:73:
c1:13:23:6d:3a:ef:29:1e:64:92:2d:a2:87:62:e6:64:6e:75:
e6:75:a2:3d:44:4f:2f:0a:65:ce:15:9d:d1:de:ba:01:c6:66:
46:78:35:ef:29:b6:19:77:a7:b9:aa:76:16:69:2a:72:6f:34:
ae:2b:f0:61:69:d9:f9:97:7a:43:82:9c:72:bd:17:cf:d9:11:
a0:02:a8:44:07:6a:0a:89:22:1a:30:15:d0:f2:75:5c:38:c9:
4b:1f:f2:20:16:33:3d:79:ee:18:3b:d7:ae:3d:f4:c4:64:5a:
b9:d2:28:d2:50:fc:ed:64:aa:dd:a7:84:d3:c9:e4:b9:9c:d3:
c2:b2:99:6c:90:d7:d4:55:38:40:4f:d6:44:50:1f:2b:27:af:
58:8c:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:33 2025 by rpki-client