Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: K1mvZOlUO/bhsTqZhdpkHNWR5JmXTTT9DzglY1ylbg4=
Subject key identifier: C9:90:70:17:09:9E:83:80:B7:1B:47:90:4C:03:8A:E1:B8:15:C7:F1
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 019873E367990EF4BBFB07A74787B59BD68E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 1358
Signing time: Mon 04 Aug 2025 07:02:19 +0000
Manifest this update: Mon 04 Aug 2025 07:02:19 +0000
Manifest next update: Tue 05 Aug 2025 07:02:19 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: f2of0lZKO1Ga5GiibHcmb71OM2BYeLG3XZgM0FXA6Ok=)
2: cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa (hash: lzijLPFGvwLgwXEhuBP2K7HD20X3oCBqeudRqI1ymvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:67:99:0e:f4:bb:fb:07:a7:47:87:b5:9b:d6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Aug 4 07:02:19 2025 GMT
Not After : Aug 5 07:02:19 2025 GMT
Subject: CN=c9907017099e8380b71b47904c038ae1b815c7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3f:47:1d:cf:de:55:3c:c7:47:b8:6f:dc:4f:
48:84:99:5d:71:22:6c:98:9d:bc:22:fa:3d:be:2c:
b8:a7:84:26:f6:81:d6:db:0c:a7:92:76:ff:46:35:
80:11:8e:88:b6:3f:c0:19:6d:c1:af:f2:d5:a6:34:
3b:ea:f6:a4:07:3f:a7:c0:e1:55:f1:e9:6d:37:64:
14:1e:b2:94:0f:2a:ae:2b:59:f5:dd:e2:c5:d1:12:
20:62:eb:8d:fb:35:47:8f:07:cf:6e:b1:2d:64:2e:
6b:c0:40:92:3b:fa:57:3f:bb:a0:f5:fc:21:5d:12:
95:2a:5e:f0:a3:c5:75:86:35:96:ca:8e:22:0a:07:
31:3d:e8:14:1a:99:63:40:af:bd:54:c5:ce:52:e4:
9e:90:a0:7d:8e:01:85:c6:f4:6b:c4:21:87:32:cb:
af:33:09:b9:a7:9d:48:7a:fa:55:24:eb:7a:d8:44:
3e:9d:1c:23:cd:d3:b3:9e:71:e0:a8:ff:08:f4:65:
22:15:2c:d3:18:26:fa:26:30:61:a1:ad:37:1c:c8:
54:d8:52:fe:5a:d1:3d:55:ed:a4:b1:01:d1:bb:08:
02:52:e4:50:63:2c:30:ee:17:60:a9:68:24:76:fc:
03:0e:36:d6:04:e3:0e:f4:cb:b7:fc:16:c9:6c:8a:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:90:70:17:09:9E:83:80:B7:1B:47:90:4C:03:8A:E1:B8:15:C7:F1
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e7:20:a5:5f:92:cc:cd:d5:f5:ee:60:45:6d:e3:aa:a1:45:
86:d5:3a:25:00:67:86:45:f7:68:c3:ad:19:5a:bf:11:c1:14:
fe:15:e9:87:74:11:c9:03:92:54:69:b1:37:ca:88:0d:6f:f7:
d6:1f:37:8a:84:fe:0f:cd:55:79:ef:48:13:e1:c1:53:f5:28:
67:29:48:5a:08:e3:76:a7:af:0b:33:52:6e:7a:2d:95:52:22:
a0:0d:ea:52:b3:c2:b6:28:b4:ea:b8:a1:a4:82:da:a3:ba:06:
84:7b:ca:ac:b1:9b:6f:b4:b6:ed:a6:82:f1:77:bd:22:0b:88:
05:30:f3:cb:50:8b:b2:91:44:6f:79:82:26:2e:1a:57:73:6b:
16:c6:11:ce:9c:09:db:4d:dd:5c:b0:50:a5:51:70:f5:7f:7d:
5c:45:8d:b8:97:45:a1:76:a4:26:63:aa:98:27:4c:2d:e6:0f:
ba:03:16:03:3d:2e:39:71:1c:55:2e:ee:b6:36:bb:9a:29:f3:
a4:7f:63:e5:51:94:bc:9d:74:61:5a:2e:64:81:4b:4a:ce:cf:
59:ae:98:ec:5e:42:69:c0:e6:a9:e8:f5:24:20:ff:85:3f:c4:
5b:ed:88:67:73:ac:6d:9a:3e:87:c7:b3:b1:17:f6:4e:ac:5c:
1b:ea:64:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:46 2025 by rpki-client