Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: oQV2dUBdVAAbfbU78ObIn1BeUE6yPIRNj4N3mX8JczM=
Subject key identifier: 29:73:25:8F:C8:6D:38:AD:22:48:1A:11:80:48:B2:D0:FF:42:F5:25
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 01976929F36B72E5710C338297B39E632EA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 12CE
Signing time: Fri 13 Jun 2025 12:00:46 +0000
Manifest this update: Fri 13 Jun 2025 12:00:46 +0000
Manifest next update: Sat 14 Jun 2025 12:00:46 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: HgpFQjL10s1gnUZBrRk4ux6F0MMD5/YwSvFXJ/cvgm8=)
2: cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa (hash: lzijLPFGvwLgwXEhuBP2K7HD20X3oCBqeudRqI1ymvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:f3:6b:72:e5:71:0c:33:82:97:b3:9e:63:2e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Jun 13 12:00:46 2025 GMT
Not After : Jun 14 12:00:46 2025 GMT
Subject: CN=2973258fc86d38ad22481a118048b2d0ff42f525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:fd:d0:3b:aa:b9:af:0e:17:29:c0:21:03:
ce:0a:94:85:f1:b1:a6:3d:ae:82:3b:62:b3:82:a7:
15:3c:f2:ee:af:f8:e3:ad:4d:af:44:0d:55:df:6a:
b8:df:9e:79:d3:01:98:81:61:dc:1f:68:53:a7:9c:
fc:0d:0e:46:34:b7:e6:6d:29:0d:77:71:fe:95:e1:
3b:27:bb:f5:b3:4a:87:33:1e:9c:92:21:43:84:4c:
9d:9b:2e:1c:71:bc:cf:9c:54:3e:a0:58:4f:67:fa:
38:57:a1:fe:1f:dc:83:04:2b:bd:de:37:13:19:d2:
54:8f:86:0a:49:fc:24:72:01:fc:89:71:1d:9e:92:
12:1d:da:23:b7:b6:f7:dd:e6:f8:27:0d:a2:54:ca:
64:a7:b5:8a:23:33:92:35:8d:a3:47:d3:43:71:aa:
d4:2a:8d:e6:04:09:fa:89:d5:7e:bc:45:ae:e5:07:
b3:1e:4d:3e:ee:e5:99:70:fb:ec:75:4f:2c:76:0e:
9f:64:62:26:d3:6d:c8:17:6f:48:1a:ce:e3:6e:a2:
61:3b:39:b5:04:27:ad:11:de:6a:18:97:1a:b6:26:
2d:2f:3f:73:1a:ac:c9:9a:ce:58:60:ba:58:2e:0b:
bc:da:44:da:8c:88:00:a0:a8:7b:1b:8d:30:15:36:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:73:25:8F:C8:6D:38:AD:22:48:1A:11:80:48:B2:D0:FF:42:F5:25
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e0:38:4b:dc:5d:e9:5e:ab:e7:67:7a:88:ad:7c:e5:e9:39:
d7:3d:48:78:d9:f5:5d:c3:4c:fc:3e:af:fa:8e:6e:ca:ff:f0:
1f:3f:a8:a3:76:26:b9:39:a9:49:8a:c4:94:94:a0:95:cd:06:
0f:0d:4f:09:6c:9c:b8:1e:3c:8e:06:df:44:8a:a7:b9:fc:c2:
13:99:be:34:08:a6:30:d2:d4:76:2e:79:24:18:b3:13:ec:95:
d7:9d:48:b6:80:2c:47:53:cd:f5:3f:67:36:04:ba:74:d9:77:
8f:5b:16:4c:ab:e5:61:3b:24:5a:51:64:02:38:eb:92:26:08:
85:43:9d:de:54:dd:b3:7d:ad:45:eb:4c:d1:b7:55:fc:58:f3:
73:df:82:0d:50:45:19:1d:43:e4:d7:46:d5:54:42:e6:94:64:
0f:2a:95:bc:e4:01:ac:c2:b2:0a:e9:0e:90:4c:e2:4e:5a:70:
93:c8:c2:2c:24:29:9d:ee:7a:57:bd:43:58:bc:92:d1:8f:c8:
8b:be:2e:19:d3:e8:c8:fb:1d:31:fb:b6:49:eb:8e:03:12:d3:
a7:48:4c:1d:32:6c:a2:db:9a:8d:a2:40:ab:91:e7:de:89:49:
7b:ef:73:3c:fa:9b:b4:57:aa:ec:6b:95:16:e1:df:86:ec:de:
54:2d:57:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKfNrcuVxDDOCl7OeYy6jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz
MjQ4NzMwHhcNMjUwNjEzMTIwMDQ2WhcNMjUwNjE0MTIwMDQ2WjAzMTEwLwYDVQQD
EygyOTczMjU4ZmM4NmQzOGFkMjI0ODFhMTE4MDQ4YjJkMGZmNDJmNTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywT90Duqua8OFynAIQPOCpSF8bGm
Pa6CO2KzgqcVPPLur/jjrU2vRA1V32q435550wGYgWHcH2hTp5z8DQ5GNLfmbSkN
d3H+leE7J7v1s0qHMx6ckiFDhEydmy4ccbzPnFQ+oFhPZ/o4V6H+H9yDBCu93jcT
GdJUj4YKSfwkcgH8iXEdnpISHdojt7b33eb4Jw2iVMpkp7WKIzOSNY2jR9NDcarU
Ko3mBAn6idV+vEWu5QezHk0+7uWZcPvsdU8sdg6fZGIm023IF29IGs7jbqJhOzm1
BCetEd5qGJcatiYtLz9zGqzJms5YYLpYLgu82kTajIgAoKh7G40wFTZlYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClzJY/IbTitIkgaEYBIstD/QvUlMB8GA1UdIwQY
MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt
MWNhZjA2MTEzNzRkLzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk
LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeA4S9xd
6V6r52d6iK185ek51z1IeNn1XcNM/D6v+o5uyv/wHz+oo3YmuTmpSYrElJSglc0G
Dw1PCWycuB48jgbfRIqnufzCE5m+NAimMNLUdi55JBizE+yV151ItoAsR1PN9T9n
NgS6dNl3j1sWTKvlYTskWlFkAjjrkiYIhUOd3lTds32tRetM0bdV/Fjzc9+CDVBF
GR1D5NdG1VRC5pRkDyqVvOQBrMKyCukOkEziTlpwk8jCLCQpne56V71DWLyS0Y/I
i74uGdPoyPsdMfu2SeuOAxLTp0hMHTJsotuajaJAq5Hn3olJe+9zPPqbtFeq7GuV
FuHfhuzeVC1XRg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:27 2025 by rpki-client