Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: gzECNyCHd3aBPBcjWNZDtAH2xOIZc/dB/LcbpnehCtw=
Subject key identifier: 2F:EC:3B:23:7C:46:92:E9:1B:95:92:3D:71:59:C8:9D:19:5F:81:85
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 019A4EF5ABBDF311E695E6E205F62C3C5C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 144E
Signing time: Tue 04 Nov 2025 13:01:54 +0000
Manifest this update: Tue 04 Nov 2025 13:01:54 +0000
Manifest next update: Wed 05 Nov 2025 13:01:54 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: oGkNCLdAfW+bINh7aym6LnI9Papzoyk0R3Qcdpb/pvI=)
2: cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa (hash: lzijLPFGvwLgwXEhuBP2K7HD20X3oCBqeudRqI1ymvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:ab:bd:f3:11:e6:95:e6:e2:05:f6:2c:3c:5c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Nov 4 13:01:54 2025 GMT
Not After : Nov 5 13:01:54 2025 GMT
Subject: CN=2fec3b237c4692e91b95923d7159c89d195f8185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:88:c6:8a:29:0a:ae:95:c2:af:69:fd:3e:21:
ac:72:01:3a:3e:7c:3c:a9:60:d3:67:fa:d6:72:04:
49:c2:aa:69:2f:a2:31:a0:a9:08:29:a0:0d:be:77:
a7:52:0d:27:5e:29:49:f7:a7:7b:2b:99:26:e0:6a:
99:c5:ab:4b:e4:46:b3:b5:39:ef:09:a9:56:d2:b5:
db:83:fa:f8:8e:08:0e:cd:4d:e9:70:fc:7d:77:54:
24:ba:e5:4a:7c:97:76:53:23:ba:e3:2f:59:7c:8f:
07:f5:54:de:7e:31:fa:b9:32:5d:62:f8:69:54:33:
b9:97:d1:fc:5b:60:04:1b:af:bb:cd:ab:72:ad:a2:
2e:fd:a8:55:b8:af:a3:8a:21:98:29:60:7f:89:03:
5c:f6:b1:cf:1d:2c:5e:9f:16:ef:b7:1e:25:a4:a6:
b3:52:96:8f:5f:17:0c:2c:0f:2f:2c:9b:bb:40:d6:
fa:31:4f:df:d9:6e:f5:a2:b2:4f:04:41:4c:19:52:
3c:fe:4a:02:9e:8c:25:e8:fd:97:de:05:73:f8:73:
30:d6:bd:7d:0f:0b:6c:d7:7a:61:7c:54:93:0c:fa:
92:9f:dc:04:27:eb:df:96:63:41:02:5a:40:85:a7:
e7:b7:7a:d1:eb:7b:9c:29:5b:aa:12:cf:30:61:bf:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EC:3B:23:7C:46:92:E9:1B:95:92:3D:71:59:C8:9D:19:5F:81:85
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3b:e1:9a:b8:a9:7e:7d:8f:7d:b6:93:bc:49:4b:f2:d6:52:
d8:b5:20:67:a6:d7:a4:07:09:a6:8d:50:8a:77:1f:8e:36:80:
42:64:38:b3:a6:f7:b6:ee:a8:12:50:04:8f:ba:13:f0:dc:04:
95:31:a3:ea:9a:9b:45:96:52:a1:49:23:a9:30:98:14:09:90:
9e:88:34:61:d0:5d:e4:50:15:70:6b:ce:ab:ea:a9:5a:4f:9b:
d7:c6:4d:91:ff:c0:c8:0d:42:3b:ef:80:2b:33:41:25:6b:a8:
fe:9d:80:90:0c:4b:d0:bc:a7:aa:07:72:70:5e:d7:c5:e1:0a:
c2:20:82:41:d1:88:ff:75:6b:fc:65:44:64:7d:ad:9e:a0:d1:
86:08:71:40:3b:20:f7:57:af:db:d6:32:d5:ac:f0:19:3e:cd:
47:11:26:16:49:86:60:6f:2c:36:29:36:e0:41:e3:41:44:66:
24:57:20:3a:de:d9:59:11:9b:61:d8:f6:b0:13:f9:a1:a9:cb:
a5:26:04:10:5a:9e:73:c6:c5:71:9e:c9:2d:62:45:dc:e3:68:
c4:97:d4:1e:80:4d:00:f3:5e:3e:86:f6:0d:10:b8:18:2b:18:
3a:b4:5e:ad:43:7d:78:7b:a2:ee:c0:40:dd:5a:73:0d:8e:af:
36:a0:08:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:22 2025 by rpki-client