Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier: X5VcfJjFJT1eUX7FBlmTVkhPg6ky5MnTDCBe/aH/eOs=
Subject key identifier: D9:D0:F0:F7:88:9A:12:73:18:8F:81:FC:95:0A:75:70:13:72:5F:C8
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial: 0198D5F1647FC989613BEDF6391468DB6ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number: 0D16
Signing time: Sat 23 Aug 2025 08:00:23 +0000
Manifest this update: Sat 23 Aug 2025 08:00:23 +0000
Manifest next update: Sun 24 Aug 2025 08:00:23 +0000
Files and hashes: 1: 1pfssBKaJPTPxd3zeNHxRW_fqlQ.roa (hash: pgbH/xz13H4gqRKangAkvOuybmTQQOZjQXVtcuntEbc=)
2: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: 2uovvzPxkhFAe+Z78/Py46m32Kk1LKVQedD3ZfoK4GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:64:7f:c9:89:61:3b:ed:f6:39:14:68:db:6a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Validity
Not Before: Aug 23 08:00:23 2025 GMT
Not After : Aug 24 08:00:23 2025 GMT
Subject: CN=d9d0f0f7889a1273188f81fc950a757013725fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ff:f4:9d:ff:15:43:aa:08:2e:bd:24:20:e9:
cb:06:ba:3d:b3:ff:6c:a4:b2:31:33:91:3d:13:28:
f7:f7:1b:ca:96:5d:df:77:09:4a:34:22:e8:93:c8:
c4:1d:2e:3f:e6:fc:5d:c6:3b:25:e1:c3:b2:3c:c0:
7f:78:53:73:0c:be:d4:a8:69:6f:4d:26:9b:44:ba:
31:2e:6e:97:59:b9:4d:06:2a:e0:94:35:88:c5:87:
de:a7:0f:42:b3:74:e5:03:cf:d8:d1:2e:25:8d:3e:
bd:f4:a5:e3:e3:d8:fa:a1:81:a8:6d:ec:a5:53:ea:
66:ff:be:6b:bd:51:ff:cc:eb:d6:b7:70:4a:9c:e0:
72:7e:d9:f5:e8:e7:e4:a9:48:1b:bc:9e:a0:16:60:
4a:32:8e:87:67:d3:2d:4a:33:bd:bd:7c:13:22:01:
d8:63:3b:22:9d:f8:6b:50:81:8d:f9:75:5c:ef:db:
23:64:ab:7c:9d:6e:7f:b0:8f:dc:d0:70:4a:fe:21:
62:05:02:31:70:a3:9f:4c:3e:49:fc:03:1e:90:6b:
d0:07:93:bc:fb:57:c4:01:c2:1a:38:98:05:72:d2:
66:1f:52:b8:88:d3:96:ff:24:e6:53:94:79:73:b1:
80:f9:0c:95:1c:60:35:ea:84:cb:21:ef:55:02:ec:
69:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D0:F0:F7:88:9A:12:73:18:8F:81:FC:95:0A:75:70:13:72:5F:C8
X509v3 Authority Key Identifier:
keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:db:81:be:c9:f3:d8:55:73:f0:b5:7c:d2:67:9b:59:f6:20:
7b:3f:f1:33:e8:d8:9a:32:80:c0:d2:05:fd:6d:1e:96:22:92:
2c:b5:7e:15:6e:bb:f0:65:69:c4:45:bf:19:d8:67:40:68:b9:
29:20:21:71:02:a0:f0:d5:c6:aa:30:45:67:db:ea:8d:bd:c4:
70:37:42:43:db:96:82:d4:c5:d1:19:34:37:96:04:c5:4f:22:
03:d2:0e:ef:19:16:52:fc:69:99:4e:8f:38:ea:11:1e:c7:3c:
63:f5:e1:55:0d:42:27:23:5f:0f:c1:0d:3e:e0:17:67:58:cb:
4a:91:aa:ec:71:14:cc:24:53:20:4d:d1:61:4c:18:d1:53:3e:
e9:7e:30:12:82:2d:83:c1:76:e3:54:46:53:ab:30:ad:84:72:
5f:30:98:84:8a:72:a3:45:57:b1:43:de:5d:41:21:e7:55:94:
9c:cd:06:ef:71:b2:fe:19:4e:f8:2c:1e:90:9a:42:50:3c:03:
3f:a2:1d:ba:ee:77:50:fb:c3:a8:7b:1d:0e:7f:e0:87:d1:10:
06:a9:03:6d:7e:96:b4:87:d8:c6:bc:60:fd:a3:22:7a:b2:d6:
7e:35:31:cb:6e:30:29:8d:01:2a:1f:76:f5:86:af:b2:90:c4:
a1:f4:44:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjV8WR/yYlhO+32ORRo22reMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDg4MmU3OTE3NDE0MmQ0ZTU0Y2QxMWY3MWMxNWJhNmUz
OTcyMTMwHhcNMjUwODIzMDgwMDIzWhcNMjUwODI0MDgwMDIzWjAzMTEwLwYDVQQD
EyhkOWQwZjBmNzg4OWExMjczMTg4ZjgxZmM5NTBhNzU3MDEzNzI1ZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP/0nf8VQ6oILr0kIOnLBro9s/9s
pLIxM5E9Eyj39xvKll3fdwlKNCLok8jEHS4/5vxdxjsl4cOyPMB/eFNzDL7UqGlv
TSabRLoxLm6XWblNBirglDWIxYfepw9Cs3TlA8/Y0S4ljT699KXj49j6oYGobeyl
U+pm/75rvVH/zOvWt3BKnOByftn16OfkqUgbvJ6gFmBKMo6HZ9MtSjO9vXwTIgHY
YzsinfhrUIGN+XVc79sjZKt8nW5/sI/c0HBK/iFiBQIxcKOfTD5J/AMekGvQB5O8
+1fEAcIaOJgFctJmH1K4iNOW/yTmU5R5c7GA+QyVHGA16oTLIe9VAuxp5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnQ8PeImhJzGI+B/JUKdXATcl/IMB8GA1UdIwQY
MBaAFO4IgueRdBQtTlTNEfccFbpuOXITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUt
NGYzYzMzYzA4ODg0LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS80NzYwMzQtNTI3ZC00OTM5LWFkNzUtNGYzYzMzYzA4ODg0
LzEvN2dpQzU1RjBGQzFPVk0wUjl4d1Z1bTQ1Y2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9uBvsnz
2FVz8LV80mebWfYgez/xM+jYmjKAwNIF/W0eliKSLLV+FW678GVpxEW/GdhnQGi5
KSAhcQKg8NXGqjBFZ9vqjb3EcDdCQ9uWgtTF0Rk0N5YExU8iA9IO7xkWUvxpmU6P
OOoRHsc8Y/XhVQ1CJyNfD8ENPuAXZ1jLSpGq7HEUzCRTIE3RYUwY0VM+6X4wEoIt
g8F241RGU6swrYRyXzCYhIpyo0VXsUPeXUEh51WUnM0G73Gy/hlO+CwekJpCUDwD
P6Iduu53UPvDqHsdDn/gh9EQBqkDbX6WtIfYxrxg/aMierLWfjUxy24wKY0BKh92
9YavspDEofRE8g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:16:47 2025 by rpki-client