Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File: CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier: fbrwHD0tNV5RzLKYBp8/ajLydLjjMg+8ZLIXCdDjVnE=
Subject key identifier: D3:3B:51:72:88:26:21:08:2F:CC:A4:15:D9:D9:11:E5:A6:A6:9D:64
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 0196523658D71111A8DC33BFDA34B29AE95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number: 149A
Signing time: Sun 20 Apr 2025 08:00:15 +0000
Manifest this update: Sun 20 Apr 2025 08:00:15 +0000
Manifest next update: Mon 21 Apr 2025 08:00:15 +0000
Files and hashes: 1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: uRPT6mBh6UqVB7NGP9C5tqXyAcOGueOx/8XGp8D9MUA=)
2: OcxfXVrvYxkgLmxQUmK4efpt3cc.roa (hash: 9yuVp8SRMZUYM9hTDLvDJDMqxHqS1ktDbQ1bzB9Zyrs=)
3: ZrXYlOTJguNrpw_diqNoULGzQnw.roa (hash: d5T5b59p4fvwE7Y3eoRBKqf6wXsGrNoqmxfeIGJmwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:58:d7:11:11:a8:dc:33:bf:da:34:b2:9a:e9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: Apr 20 08:00:15 2025 GMT
Not After : Apr 21 08:00:15 2025 GMT
Subject: CN=d33b5172882621082fcca415d9d911e5a6a69d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:9e:5d:83:91:cc:0e:f1:a8:c0:0a:6a:a2:
99:44:e5:b0:d5:09:fa:12:b6:3c:9c:4d:f6:0e:49:
1e:b1:6a:2c:a2:3c:88:43:14:4e:42:8e:4c:f7:2e:
01:e7:31:28:1c:39:02:22:74:66:9f:97:8d:e4:25:
83:ee:98:ee:2f:dc:c0:04:af:8d:d5:f8:99:78:89:
19:7a:46:12:5e:d8:23:b3:d4:c7:70:a1:c5:28:e3:
8f:77:1b:03:f2:5d:6f:35:3e:84:f0:ad:8b:a7:8b:
5c:e8:ed:8e:a0:6c:9a:23:00:51:7c:77:ee:e1:11:
94:f4:ad:0f:8f:c2:68:20:bc:92:5f:5d:12:8e:5d:
f5:ea:6f:2b:f8:38:19:6e:50:93:9a:a9:59:8a:b4:
53:16:ee:20:a0:61:97:86:f3:40:3b:0f:19:67:a7:
c0:74:11:b7:9b:43:03:1a:84:05:8c:9e:ac:01:8c:
bd:5d:27:bb:ea:0a:89:f8:00:b6:8a:74:87:77:64:
d4:4e:2a:b6:2e:66:44:42:1d:1a:4f:fa:1a:08:56:
82:1a:bb:18:2e:5b:be:92:3a:ae:24:8b:93:e3:48:
71:36:80:00:62:c3:27:1f:07:fa:c4:4c:c1:a9:27:
fa:9e:8a:29:15:7d:28:b2:63:23:62:04:77:d5:f9:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3B:51:72:88:26:21:08:2F:CC:A4:15:D9:D9:11:E5:A6:A6:9D:64
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:63:c0:37:fc:e6:c1:3c:ac:6b:ac:a2:44:93:e3:53:64:cc:
59:cf:53:7a:af:04:f3:f0:bf:c9:60:45:b3:5e:83:38:95:93:
4a:1e:cf:ee:8d:60:b2:0d:b6:5c:48:bd:8b:04:66:c0:4b:76:
7a:a6:45:39:62:7e:03:57:c9:75:36:be:2b:26:51:f3:08:93:
3f:7e:a3:32:e1:89:30:8c:21:81:0d:6b:3e:6d:05:bd:d8:b8:
42:28:67:8a:b1:e2:5b:82:84:c9:c9:f6:46:5f:ff:c7:6c:1b:
16:f6:ef:e9:59:35:5f:1f:e2:ed:71:fc:91:c3:24:2f:a9:e2:
e0:86:15:25:c7:0c:18:4a:46:e6:68:09:cf:e7:06:38:fb:fe:
ff:40:fe:d0:13:4a:85:ea:7c:29:ae:07:aa:b4:02:50:0c:dd:
f9:ec:bc:10:4d:ad:91:c0:93:53:03:d4:12:f5:31:91:ad:f6:
3b:33:b1:c7:b4:8b:70:e6:f8:5f:8a:60:ee:6a:c7:f5:c8:74:
86:53:c7:21:0c:8e:ef:1a:ed:d7:4f:9e:64:ba:f6:df:8b:4f:
a8:e0:a5:ba:40:31:74:cd:d3:9c:19:7c:dc:3f:2f:73:9d:de:
83:07:b7:b7:eb:77:15:2d:f7:6c:25:1f:f9:05:af:d4:8f:77:
04:3b:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:13 2025 by rpki-client