Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File: CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier: hDyuixgsrxQxcvVaWkBd1RY0bs/LFFYu84HsmOQjbkg=
Subject key identifier: 33:75:57:01:0E:3B:12:EC:F7:5D:5E:41:90:AD:0A:18:F2:1D:1F:3B
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 019773E424EA03D793D56ECCE5DB83D4B00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number: 1530
Signing time: Sun 15 Jun 2025 14:00:20 +0000
Manifest this update: Sun 15 Jun 2025 14:00:20 +0000
Manifest next update: Mon 16 Jun 2025 14:00:20 +0000
Files and hashes: 1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: fCh9arLZOzjZyTvWlKD4bQCULwx0sJIiYW4KvYin33A=)
2: OcxfXVrvYxkgLmxQUmK4efpt3cc.roa (hash: 9yuVp8SRMZUYM9hTDLvDJDMqxHqS1ktDbQ1bzB9Zyrs=)
3: ZrXYlOTJguNrpw_diqNoULGzQnw.roa (hash: d5T5b59p4fvwE7Y3eoRBKqf6wXsGrNoqmxfeIGJmwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:24:ea:03:d7:93:d5:6e:cc:e5:db:83:d4:b0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: Jun 15 14:00:20 2025 GMT
Not After : Jun 16 14:00:20 2025 GMT
Subject: CN=337557010e3b12ecf75d5e4190ad0a18f21d1f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:e8:31:d9:b5:5e:ee:03:38:19:e4:c1:ea:
8e:66:e9:52:06:d6:c7:8c:43:24:11:91:50:ca:52:
a4:c1:70:39:cd:a0:3c:aa:6a:f9:ea:0b:8b:95:02:
e3:70:48:13:b9:58:3d:02:f3:f4:84:b7:0e:6d:3c:
24:47:de:c2:8a:49:06:0a:0c:e8:a0:37:1a:b6:81:
e9:48:3f:b3:fe:af:e0:bd:5e:de:09:2a:f3:c4:3f:
73:cc:14:fb:e0:4e:f4:c9:a6:ee:e3:46:9a:02:c3:
ec:81:39:e8:d2:4c:c1:61:ae:e1:20:e5:c5:bb:67:
9d:42:b0:59:79:b9:14:7c:be:b0:9f:d0:cf:87:e1:
d8:38:d1:c0:f7:b1:6b:fa:00:49:39:e6:92:5d:3a:
67:c6:78:8f:fd:2d:de:bb:a8:bc:1b:c6:96:a5:e4:
18:92:a8:d1:f1:4d:66:b8:18:0c:36:ac:b7:5a:f7:
1a:03:b0:aa:e0:8a:2f:07:2e:11:12:99:18:a7:e4:
c1:e2:a7:b3:a9:6a:f1:ff:81:23:33:41:a3:c0:eb:
a3:c0:7f:77:19:65:aa:7f:e5:3c:20:be:3f:47:23:
76:f6:0b:9e:32:85:f2:4e:4c:6d:de:a7:59:a5:01:
61:6b:56:d9:3b:8a:e4:6e:ca:d0:36:a9:59:22:1a:
30:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:75:57:01:0E:3B:12:EC:F7:5D:5E:41:90:AD:0A:18:F2:1D:1F:3B
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:2e:9e:02:23:6d:d3:53:a8:22:24:70:d3:5e:d3:76:bd:c7:
54:95:b5:82:f9:e9:21:8e:2a:80:9f:37:81:a8:87:29:70:76:
21:d1:fd:80:29:fd:a9:18:84:b3:84:30:8e:74:a4:e5:89:9b:
87:9e:89:a9:73:de:92:11:92:f8:11:aa:f5:3f:05:2a:50:34:
eb:ba:8c:a5:b7:4b:82:98:d9:31:1b:6e:8f:f2:46:85:33:12:
cd:f0:aa:b0:3f:8a:fd:de:43:78:f9:ac:30:fd:e0:f7:c9:e4:
7d:04:58:f2:fe:c3:10:6b:64:cd:79:5b:ce:71:81:9f:5f:09:
3a:de:25:c1:cb:3a:ce:80:ab:de:b3:b9:b2:91:2d:5b:b3:c8:
af:96:46:88:33:a9:2a:1c:dd:82:2b:80:b9:49:a0:49:da:e5:
3e:46:e6:ea:92:c6:dd:ef:55:b7:23:bd:da:3d:b1:27:fc:b9:
d0:ba:bc:0e:b4:22:80:6c:3e:c3:4f:b0:ed:d0:57:c7:df:1f:
9c:7e:49:cc:22:50:4f:e8:10:41:3d:90:66:94:51:d1:ee:53:
11:02:d2:13:60:38:c9:7c:30:04:e3:54:86:6c:b6:79:41:2d:
c3:86:85:0f:03:d4:9b:30:07:ab:4e:19:ef:91:e6:20:47:da:
a8:21:1f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:02:43 2025 by rpki-client