Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: 93+ivLJlQrJ5Rrot0tmRWWv3nKTwXApYOpIVq+P/YiA=
Subject key identifier: A0:49:02:76:74:2F:5E:63:96:0A:54:F1:82:F5:83:1B:ED:33:37:94
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 019849659F1FDA4907140082FEC24C08A4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 1342
Signing time: Sun 27 Jul 2025 01:00:53 +0000
Manifest this update: Sun 27 Jul 2025 01:00:53 +0000
Manifest next update: Mon 28 Jul 2025 01:00:53 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: 5ZSDwqIQfye1R4s9wVhTneeqV4Dp3QGonNqmeSgx6eo=)
2: cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa (hash: lzijLPFGvwLgwXEhuBP2K7HD20X3oCBqeudRqI1ymvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:9f:1f:da:49:07:14:00:82:fe:c2:4c:08:a4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Jul 27 01:00:53 2025 GMT
Not After : Jul 28 01:00:53 2025 GMT
Subject: CN=a0490276742f5e63960a54f182f5831bed333794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:8f:c6:a7:86:ab:70:a7:a0:04:59:51:a5:6e:
15:2e:56:ba:a2:d2:18:dc:4b:2f:44:d2:e7:49:4f:
5f:13:1f:6d:01:76:2a:f4:dc:a7:6f:c0:c8:55:3b:
fb:51:5f:36:01:c2:57:6e:4b:b9:86:8f:a6:dd:d0:
03:e9:d1:72:57:b3:9d:cb:37:07:06:0b:83:95:7a:
7a:25:d6:5a:94:76:a9:cd:46:3f:80:d5:57:b9:7c:
4d:c4:4c:c1:2a:83:12:a7:f1:76:2d:d7:c4:58:b7:
66:bf:cd:8c:de:69:4f:6a:99:dd:b4:26:ac:30:e1:
7a:10:21:6c:54:9c:b8:68:4b:82:94:29:2f:58:17:
2f:92:d2:52:2d:19:eb:b8:ff:1c:20:96:70:f1:64:
13:e5:55:93:fd:59:1a:0a:4b:74:dd:e2:92:fc:54:
08:71:9f:99:56:9d:cb:53:48:06:77:ed:ee:4a:ad:
17:28:92:73:f9:39:84:f0:7a:94:f2:0f:c4:00:7d:
34:95:1a:c9:b5:dc:6c:3d:75:e6:49:b4:ea:f4:77:
81:96:8a:38:02:f0:1c:a2:14:15:49:46:ba:4e:6a:
62:ed:c2:b0:ca:0f:70:b9:57:b9:ff:72:b3:e8:31:
8c:8f:26:34:57:b6:02:a4:ff:71:9c:de:fe:b2:c9:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:49:02:76:74:2F:5E:63:96:0A:54:F1:82:F5:83:1B:ED:33:37:94
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ac:2e:17:1f:19:be:6d:b2:ef:96:bf:c0:49:ae:da:2f:be:
38:26:dd:86:42:69:1b:bb:37:ab:f0:ea:72:d7:2e:ad:2b:c7:
91:b4:10:63:6d:9c:40:27:1c:a2:c6:7d:7b:b6:36:77:5e:23:
a5:0b:6a:32:d5:48:68:ad:97:e9:0b:b8:ad:8a:1d:75:27:58:
a6:4e:c6:12:db:8d:a4:23:bd:34:f7:d2:cd:4e:ea:d0:aa:4a:
e9:26:d2:d5:7e:d6:72:56:90:fe:23:5d:c4:b7:2e:35:af:e9:
b9:ce:70:d2:46:39:f7:cf:13:b8:4e:9d:de:78:b5:7a:22:64:
0b:f6:b3:16:62:90:9a:d6:bb:94:dc:82:a3:f1:00:28:f5:47:
5b:e1:6f:73:a1:56:75:3a:89:50:37:48:91:a0:a8:82:87:44:
15:0b:19:1c:d2:93:7f:95:b8:1b:d0:9b:cd:30:7e:32:a9:40:
46:c6:37:e0:fb:07:54:58:f8:f8:2b:81:06:2e:11:a0:92:28:
07:9f:87:61:6f:4c:2d:86:ab:6a:40:0e:61:a2:1c:bc:00:dc:
f1:ad:25:36:95:b2:d4:2a:30:c9:fe:e7:f7:7e:d5:63:36:d1:
be:08:6b:f1:6a:86:d8:b6:69:b3:00:00:37:b7:1e:c4:2e:4e:
58:ed:5b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZZ8f2kkHFACC/sJMCKT3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz
MjQ4NzMwHhcNMjUwNzI3MDEwMDUzWhcNMjUwNzI4MDEwMDUzWjAzMTEwLwYDVQQD
EyhhMDQ5MDI3Njc0MmY1ZTYzOTYwYTU0ZjE4MmY1ODMxYmVkMzMzNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Y/Gp4arcKegBFlRpW4VLla6otIY
3EsvRNLnSU9fEx9tAXYq9Nynb8DIVTv7UV82AcJXbku5ho+m3dAD6dFyV7OdyzcH
BguDlXp6JdZalHapzUY/gNVXuXxNxEzBKoMSp/F2LdfEWLdmv82M3mlPapndtCas
MOF6ECFsVJy4aEuClCkvWBcvktJSLRnruP8cIJZw8WQT5VWT/VkaCkt03eKS/FQI
cZ+ZVp3LU0gGd+3uSq0XKJJz+TmE8HqU8g/EAH00lRrJtdxsPXXmSbTq9HeBloo4
AvAcohQVSUa6Tmpi7cKwyg9wuVe5/3Kz6DGMjyY0V7YCpP9xnN7+ssmBcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBJAnZ0L15jlgpU8YL1gxvtMzeUMB8GA1UdIwQY
MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt
MWNhZjA2MTEzNzRkLzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk
LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJawuFx8Z
vm2y75a/wEmu2i++OCbdhkJpG7s3q/DqctcurSvHkbQQY22cQCccosZ9e7Y2d14j
pQtqMtVIaK2X6Qu4rYoddSdYpk7GEtuNpCO9NPfSzU7q0KpK6SbS1X7WclaQ/iNd
xLcuNa/puc5w0kY5988TuE6d3ni1eiJkC/azFmKQmta7lNyCo/EAKPVHW+Fvc6FW
dTqJUDdIkaCogodEFQsZHNKTf5W4G9CbzTB+MqlARsY34PsHVFj4+CuBBi4RoJIo
B5+HYW9MLYarakAOYaIcvADc8a0lNpWy1Cowyf7n937VYzbRvghr8WqG2LZpswAA
N7cexC5OWO1bKA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 04:35:10 2025 by rpki-client