Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: OJ5soCik8J4yDPajKV6vjSVj8SzBlgrBzqtjzS4HyEE=
Subject key identifier: BC:0B:C8:BD:3D:6A:29:F7:86:E2:55:82:60:0D:33:E1:2B:60:42:07
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 01974A4396953D3D66427D2514250836C07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 12BE
Signing time: Sat 07 Jun 2025 12:00:32 +0000
Manifest this update: Sat 07 Jun 2025 12:00:32 +0000
Manifest next update: Sun 08 Jun 2025 12:00:32 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: FhtXU+1pJJJGhC0sdOJdegUJaunNnVtz++N0EXrt468=)
2: cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa (hash: lzijLPFGvwLgwXEhuBP2K7HD20X3oCBqeudRqI1ymvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:96:95:3d:3d:66:42:7d:25:14:25:08:36:c0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Jun 7 12:00:32 2025 GMT
Not After : Jun 8 12:00:32 2025 GMT
Subject: CN=bc0bc8bd3d6a29f786e25582600d33e12b604207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:3c:ba:05:b6:33:6f:58:a9:8f:7f:e7:b0:
73:6c:69:02:aa:14:d6:ae:8b:9b:ab:ea:63:05:ca:
dc:0d:98:99:42:f6:4e:ee:ac:d0:83:b2:91:c5:29:
bc:11:14:bd:ca:7c:eb:cc:37:c6:b3:52:65:8c:33:
6c:02:0e:f6:6c:9a:27:1f:b6:04:01:bb:16:b8:df:
b2:41:4f:43:99:d2:25:65:86:d3:67:3c:69:02:4e:
57:73:90:30:0c:df:bf:e4:34:53:da:d2:98:42:2c:
64:47:a5:f5:98:53:21:ec:d2:d0:96:ec:59:4d:66:
fb:6e:50:58:db:67:de:f6:d2:c2:03:c5:6e:64:24:
94:16:7c:5c:3f:41:d4:e9:3e:bc:96:cd:53:82:5f:
1c:8a:85:bc:51:23:e5:b1:1d:60:6e:bb:ee:0b:45:
12:fd:2a:f0:7a:a6:b8:4e:87:56:dd:b7:98:11:b2:
02:12:37:c8:86:96:e7:0c:44:a0:1d:e9:d6:66:eb:
cd:71:75:95:1c:77:b4:30:bd:5d:95:07:b2:8d:95:
b0:23:eb:a7:02:9c:12:c0:33:d0:fb:bf:05:66:92:
c1:f1:51:46:c9:a6:9a:7e:d2:5f:84:4f:2d:85:8d:
98:71:97:af:ee:29:14:64:a6:8b:55:b8:1e:db:3c:
8a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0B:C8:BD:3D:6A:29:F7:86:E2:55:82:60:0D:33:E1:2B:60:42:07
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:34:d6:e9:28:cd:aa:a7:ea:8d:0d:cd:8e:28:aa:33:e5:ea:
fa:fe:41:49:fd:a4:26:7a:b6:23:97:04:60:6c:3a:9b:fd:14:
24:76:7a:f2:d0:20:f0:f2:e4:82:a8:c8:27:df:f9:46:88:1a:
35:64:d7:c1:e3:da:ed:89:81:c9:72:6a:54:37:8f:15:6b:75:
e4:e8:06:13:2b:f1:77:a1:37:55:ea:51:d0:9b:e4:14:29:72:
df:75:8d:e6:4d:25:59:40:b0:ef:fe:29:d6:f2:f9:cb:1e:7a:
cc:22:68:c7:0c:3a:09:be:4e:25:da:07:cc:fb:ed:94:b8:75:
6f:3f:ba:c2:f4:e2:19:9e:24:10:bc:f8:c4:53:83:2a:0a:a5:
b2:49:34:29:45:e5:8f:e5:87:3b:f1:3e:00:22:3c:cc:89:f0:
2c:04:3f:c8:30:36:4d:0b:91:0a:dd:e7:58:bb:28:e4:5b:17:
9b:d5:9c:22:76:9c:69:04:04:5d:cd:56:5b:61:fc:94:a7:57:
ac:30:38:c7:3f:20:4a:4f:9e:f2:d6:90:22:0f:de:e6:18:1d:
49:0d:90:f1:ff:d4:7b:d8:ac:c3:67:cf:0c:c9:34:59:a5:bd:
6d:82:a7:c2:1a:27:bc:f2:00:fd:04:b4:5c:76:05:c0:28:f8:
21:71:0f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ5aVPT1mQn0lFCUINsB9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz
MjQ4NzMwHhcNMjUwNjA3MTIwMDMyWhcNMjUwNjA4MTIwMDMyWjAzMTEwLwYDVQQD
EyhiYzBiYzhiZDNkNmEyOWY3ODZlMjU1ODI2MDBkMzNlMTJiNjA0MjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQg8ugW2M29YqY9/57BzbGkCqhTW
roubq+pjBcrcDZiZQvZO7qzQg7KRxSm8ERS9ynzrzDfGs1JljDNsAg72bJonH7YE
AbsWuN+yQU9DmdIlZYbTZzxpAk5Xc5AwDN+/5DRT2tKYQixkR6X1mFMh7NLQluxZ
TWb7blBY22fe9tLCA8VuZCSUFnxcP0HU6T68ls1Tgl8cioW8USPlsR1gbrvuC0US
/Srweqa4TodW3beYEbICEjfIhpbnDESgHenWZuvNcXWVHHe0ML1dlQeyjZWwI+un
ApwSwDPQ+78FZpLB8VFGyaaaftJfhE8thY2YcZev7ikUZKaLVbge2zyKZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwLyL09ain3huJVgmANM+ErYEIHMB8GA1UdIwQY
MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt
MWNhZjA2MTEzNzRkLzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk
LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTTW6SjN
qqfqjQ3NjiiqM+Xq+v5BSf2kJnq2I5cEYGw6m/0UJHZ68tAg8PLkgqjIJ9/5Roga
NWTXwePa7YmByXJqVDePFWt15OgGEyvxd6E3VepR0JvkFCly33WN5k0lWUCw7/4p
1vL5yx56zCJoxww6Cb5OJdoHzPvtlLh1bz+6wvTiGZ4kELz4xFODKgqlskk0KUXl
j+WHO/E+ACI8zInwLAQ/yDA2TQuRCt3nWLso5FsXm9WcInacaQQEXc1WW2H8lKdX
rDA4xz8gSk+e8taQIg/e5hgdSQ2Q8f/Ue9isw2fPDMk0WaW9bYKnwhonvPIA/QS0
XHYFwCj4IXEPAw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:01:00 2025 by rpki-client