Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
File: 7giC55F0FC1OVM0R9xwVum45chM.mft (raw, json)
Hash identifier: cJUDABw8DAxLlnYbHjfdfeoparKxlK9JoaADSjXlw6w=
Subject key identifier: 3E:09:63:27:56:5B:C5:D7:B7:68:A6:F4:BC:94:CF:75:29:AD:7D:F0
Authority key identifier: EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
Certificate issuer: /CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Certificate serial: 0197B6329D21F3290A8A4C20C6574BE410FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
Manifest number: 0C81
Signing time: Sat 28 Jun 2025 11:00:59 +0000
Manifest this update: Sat 28 Jun 2025 11:00:59 +0000
Manifest next update: Sun 29 Jun 2025 11:00:59 +0000
Files and hashes: 1: 1pfssBKaJPTPxd3zeNHxRW_fqlQ.roa (hash: pgbH/xz13H4gqRKangAkvOuybmTQQOZjQXVtcuntEbc=)
2: 7giC55F0FC1OVM0R9xwVum45chM.crl (hash: ywCA7DzsB5wXNdIf+mhbCwCjJwr7AFP+NvChs4LLwKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:9d:21:f3:29:0a:8a:4c:20:c6:57:4b:e4:10:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0882e79174142d4e54cd11f71c15ba6e397213
Validity
Not Before: Jun 28 11:00:59 2025 GMT
Not After : Jun 29 11:00:59 2025 GMT
Subject: CN=3e096327565bc5d7b768a6f4bc94cf7529ad7df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9f:8d:3d:27:e6:eb:6d:45:6e:f1:37:79:da:
be:34:51:4a:43:d9:80:1f:9b:a9:e5:5c:e4:0e:69:
ad:2c:c2:08:00:64:d8:e6:a4:e5:a4:6a:17:ae:92:
b8:55:b7:6e:b2:14:21:f6:27:90:bd:d7:9a:f6:fc:
95:54:66:e2:1b:ee:ce:34:dc:0b:37:a5:33:ab:e3:
c6:32:64:71:6c:cf:93:66:32:4f:f9:18:ba:41:2a:
41:21:cd:7e:60:45:5e:74:cd:54:32:15:a2:90:af:
cf:83:15:29:e1:b2:56:c3:2c:7a:b0:3b:55:29:5d:
23:a3:a8:51:d8:4c:96:4d:5c:66:83:4a:fa:0c:e5:
23:6d:14:c4:11:dd:17:ae:ec:0c:13:c0:c4:c6:b8:
31:df:90:fd:60:2d:4f:46:5f:c6:65:3f:8d:6f:72:
60:5f:16:1f:98:68:99:04:98:0c:9d:99:5a:e2:10:
5b:0e:ff:61:98:d1:f5:36:10:c1:5d:dd:83:4f:cd:
0d:28:71:21:14:f8:19:19:f3:b9:6e:c4:5f:e4:22:
f7:5b:25:03:9a:13:7e:26:7a:55:ea:d8:45:75:d9:
ef:59:90:76:bf:40:60:b2:85:17:d0:a6:0d:40:d1:
55:26:a5:42:35:51:e6:ad:fa:e3:4e:b1:7a:17:bc:
bc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:09:63:27:56:5B:C5:D7:B7:68:A6:F4:BC:94:CF:75:29:AD:7D:F0
X509v3 Authority Key Identifier:
keyid:EE:08:82:E7:91:74:14:2D:4E:54:CD:11:F7:1C:15:BA:6E:39:72:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7giC55F0FC1OVM0R9xwVum45chM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/476034-527d-4939-ad75-4f3c33c08884/1/7giC55F0FC1OVM0R9xwVum45chM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:07:4a:fb:c5:9d:15:ff:3a:d8:b4:ec:37:35:3e:6c:d8:6a:
08:34:00:8a:23:c5:81:c3:86:c5:91:62:21:17:26:fe:b3:aa:
59:6d:cf:9c:06:a2:21:39:a3:1f:60:0e:d1:3b:77:9a:1d:75:
54:2f:6c:4c:11:bd:88:ac:f9:37:63:30:e2:e0:6f:10:a2:39:
97:43:35:a0:74:01:67:5b:9b:86:ee:6a:a6:04:fd:3e:c5:92:
bb:9b:d1:04:19:f5:02:41:3c:d6:45:44:a3:1e:0e:8b:56:48:
ff:58:24:b0:57:aa:d4:ab:a5:9b:f3:eb:14:99:3a:c2:f6:eb:
0f:d4:c0:d1:87:c9:76:80:52:d9:cc:26:58:6e:46:16:8b:3f:
20:3b:16:f2:4b:79:c1:e8:65:88:00:a1:4e:cd:97:54:66:57:
97:75:73:36:56:54:a4:3a:48:4e:d4:22:d7:4f:6a:8f:7d:7c:
c5:e7:34:5d:a5:28:63:ed:0e:cc:3a:f1:83:85:8d:cb:27:93:
76:e2:fe:51:15:73:05:eb:81:68:b0:3d:d5:04:f6:90:a4:b3:
81:e8:2e:8d:4e:aa:08:14:a6:d1:97:2b:a5:f6:f4:56:20:32:
25:8c:1a:b9:6d:60:85:65:82:b0:3d:99:41:8c:d9:4a:10:64:
a2:33:d2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:25 2025 by rpki-client