Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File: CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier: fkdTmCu61Q+HqiOkyX4PHumNjqaRYDcgN/zH6WMJyAw=
Subject key identifier: 2C:8D:5B:38:14:9B:31:F3:50:03:B9:C7:37:9A:81:72:3C:DC:14:CC
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 019855DEE026E5AAD5CB94C714B064B1B772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number: 15A5
Signing time: Tue 29 Jul 2025 11:08:46 +0000
Manifest this update: Tue 29 Jul 2025 11:08:46 +0000
Manifest next update: Wed 30 Jul 2025 11:08:46 +0000
Files and hashes: 1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: iH/BK5zGQPWgehAN1PLqxE+QseAg9OpyhUkxMRAuZOk=)
2: OcxfXVrvYxkgLmxQUmK4efpt3cc.roa (hash: 9yuVp8SRMZUYM9hTDLvDJDMqxHqS1ktDbQ1bzB9Zyrs=)
3: ZrXYlOTJguNrpw_diqNoULGzQnw.roa (hash: d5T5b59p4fvwE7Y3eoRBKqf6wXsGrNoqmxfeIGJmwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 11:08:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:de:e0:26:e5:aa:d5:cb:94:c7:14:b0:64:b1:b7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: Jul 29 11:08:46 2025 GMT
Not After : Jul 30 11:08:46 2025 GMT
Subject: CN=2c8d5b38149b31f35003b9c7379a81723cdc14cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fe:83:7e:73:53:50:f2:16:58:29:50:a3:81:
73:6d:84:ba:e9:ac:db:03:a8:13:26:bc:3c:81:ed:
da:3e:6a:d4:b2:c5:15:66:fd:ba:46:24:a0:d2:b2:
63:40:37:b2:29:14:c8:91:9a:f3:6f:63:21:e1:4a:
5d:1a:b5:0b:ec:18:ec:f2:4b:d7:0d:f4:43:ef:2f:
e6:91:e2:2d:24:6f:65:dd:a8:91:cf:c2:4b:f7:b6:
00:c1:1f:9b:32:79:d1:da:a4:2a:a2:c4:e6:cc:cd:
b3:4e:d2:67:77:00:ec:39:d9:f5:47:75:4e:94:0b:
d6:35:bf:15:ae:53:5f:ca:cc:9d:a4:8a:2d:7c:ee:
69:d7:c2:ce:da:79:26:79:85:10:2b:fe:8d:e6:81:
c3:c2:75:10:82:e1:52:ca:f3:73:af:db:ec:1d:3f:
4b:52:c8:c7:53:0e:6a:7c:d7:87:fc:fe:a6:c3:54:
77:28:2c:c7:db:db:4f:ab:c8:45:13:ca:ae:6c:6f:
20:ac:52:59:9f:bf:e1:44:ab:75:7a:85:80:4d:85:
9c:66:4e:12:9f:24:a4:2f:56:53:2a:24:0a:ce:a8:
19:53:e8:91:5b:dc:68:ed:1d:1b:85:ce:86:df:f7:
21:d8:21:3e:07:78:b3:df:50:0b:16:1d:73:f1:89:
24:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8D:5B:38:14:9B:31:F3:50:03:B9:C7:37:9A:81:72:3C:DC:14:CC
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:4a:0c:76:5e:9b:dd:5b:45:93:6f:b2:b1:96:6a:5b:3c:5a:
d2:6e:97:b0:fd:85:1e:69:18:6e:fd:b2:9e:b3:f0:dc:ff:64:
d3:2c:d1:ed:35:6c:d6:29:8c:3e:6c:9e:7e:f4:9a:c7:b1:0e:
a1:e4:7b:8d:2b:9b:3b:0d:16:60:a8:d7:7f:b7:05:cd:89:28:
5a:a5:ba:d6:e1:a2:7b:30:c3:0f:bd:b5:4e:9b:a7:81:21:56:
d8:bd:bf:4b:0e:07:e6:cf:69:41:db:72:04:e9:6d:4a:e1:71:
96:fe:7d:df:39:fc:bb:8e:89:24:2a:a8:68:ca:55:83:6f:c8:
f2:0c:47:06:e2:3b:65:3f:8d:74:3a:6f:e5:9a:42:8d:ab:ed:
99:7e:23:28:86:47:2a:3c:9d:8b:d6:98:d9:cf:e0:27:0d:0d:
71:47:2c:b3:fb:28:a4:2c:8f:f4:9d:e6:c1:9d:2a:82:f4:96:
3f:2d:11:f3:ee:f5:62:39:54:0d:b5:d1:ad:11:89:f0:a0:84:
28:74:1c:a8:13:d9:57:15:d4:ac:7e:5c:2d:83:b2:ad:b8:ed:
2d:bc:18:52:1d:30:ec:d0:0b:f2:0d:40:8f:81:27:49:96:8b:
c8:f3:f1:34:81:7a:5a:9a:88:e8:c7:23:8d:52:24:fe:89:e4:
b7:81:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:58:49 2025 by rpki-client