Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File: CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier: efSCE+9lsoaWfigpRvmANG31AUv1zOOFaym4APiF7W4=
Subject key identifier: C5:FF:BA:EC:0E:C5:3C:CB:80:EC:48:CE:68:C6:05:DE:60:29:17:03
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 019676E80CD428E2606A854368ECDE381075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number: 14AD
Signing time: Sun 27 Apr 2025 11:00:41 +0000
Manifest this update: Sun 27 Apr 2025 11:00:41 +0000
Manifest next update: Mon 28 Apr 2025 11:00:41 +0000
Files and hashes: 1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: /hpzEY9S+HuI3M1lXX75o3gK6uJiSeE02HCQ5sVtKHY=)
2: OcxfXVrvYxkgLmxQUmK4efpt3cc.roa (hash: 9yuVp8SRMZUYM9hTDLvDJDMqxHqS1ktDbQ1bzB9Zyrs=)
3: ZrXYlOTJguNrpw_diqNoULGzQnw.roa (hash: d5T5b59p4fvwE7Y3eoRBKqf6wXsGrNoqmxfeIGJmwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:0c:d4:28:e2:60:6a:85:43:68:ec:de:38:10:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: Apr 27 11:00:41 2025 GMT
Not After : Apr 28 11:00:41 2025 GMT
Subject: CN=c5ffbaec0ec53ccb80ec48ce68c605de60291703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4f:cd:49:d9:61:58:8d:04:0c:d6:b5:2d:d1:
35:68:ec:c4:5f:1c:bd:a1:bc:95:6c:41:ef:52:3c:
e8:12:d9:b7:cf:11:f8:f4:cf:02:93:27:0c:83:b7:
16:b0:6b:ef:c7:d9:8d:71:53:54:45:8c:cb:07:c8:
c3:51:a8:b4:11:77:e2:73:8a:ed:70:9a:5c:dd:db:
93:b9:bf:9f:7e:7e:ca:53:c4:3d:f4:de:61:f8:9e:
71:af:d7:75:54:33:6f:ee:6b:c5:a5:21:81:a5:20:
54:be:5a:69:2b:f3:e5:73:de:46:f3:4d:cb:ab:c9:
9e:f2:f8:33:fc:7a:77:d8:2e:25:e7:92:4e:d8:ef:
f1:c8:db:a8:fd:b3:c5:12:e2:83:4c:46:15:cc:7d:
51:09:48:2a:a6:e5:fc:2e:5b:c3:e2:c8:99:d1:ae:
00:33:1c:ab:43:47:69:7a:ee:18:26:15:aa:f4:fe:
51:81:38:18:53:4c:d1:d5:5e:9d:2a:a2:20:5f:94:
81:b8:ec:48:5f:f9:e0:6b:0d:92:57:a3:05:a9:fc:
74:c9:57:68:89:5c:13:84:e2:22:14:2f:b6:47:7d:
c5:16:72:07:dc:d7:7b:20:b5:3a:02:b8:af:b3:6e:
82:5a:36:46:a0:bb:bb:38:c0:73:7b:0d:7f:03:fd:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FF:BA:EC:0E:C5:3C:CB:80:EC:48:CE:68:C6:05:DE:60:29:17:03
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8a:54:d5:d6:83:29:03:9d:0b:a3:19:4b:3d:9d:ed:06:4f:
76:9c:13:63:7c:1a:43:bc:1d:fa:34:0b:cc:00:d8:17:33:2d:
ce:65:60:2f:1c:f2:f2:c1:44:04:0e:7f:68:e3:1d:67:45:7d:
ae:a6:b9:bf:a6:ba:72:c3:4e:6b:ef:b1:dc:ad:f2:94:cc:c8:
e8:ee:f1:bb:8d:1c:40:72:13:bc:66:51:e6:c7:19:27:ea:b8:
b2:b3:a7:64:43:fd:30:04:e8:97:64:64:13:42:13:aa:c6:a3:
e4:ad:3e:48:a8:9b:6a:6c:9a:33:f4:f8:a6:79:a7:c8:78:1e:
82:f1:e4:93:72:dc:90:11:9b:b5:f2:7f:9f:b3:9b:4f:09:5e:
9b:84:b5:6f:c8:a1:f3:d4:4a:d4:e3:50:23:13:23:74:ed:c5:
99:e5:1f:90:ff:11:f8:92:3f:ab:df:35:7b:71:4c:27:d5:22:
04:f4:f8:bc:a2:86:18:02:46:2a:f4:6a:22:39:6d:a5:52:2b:
ed:cc:94:f0:26:12:e6:6d:25:f4:cb:73:e6:8f:e9:45:e4:34:
82:97:9a:2a:ab:5a:60:88:e6:3a:34:d4:39:4e:ff:91:31:77:
8d:d3:57:a7:89:23:c2:3c:c2:5a:a4:c3:a5:2f:ec:01:ff:80:
04:18:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:01:12 2025 by rpki-client