Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File: CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier: KOPntf3IEakS+lZ/5ut0a673mBX8se48duQI3eu3K1U=
Subject key identifier: D0:7E:98:D7:1F:B6:27:4E:EF:B6:EE:AD:6D:10:63:87:4F:46:E8:0F
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 0198D92BB376B9F1DEEBFB799E50C5B86D7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number: 15E9
Signing time: Sat 23 Aug 2025 23:02:56 +0000
Manifest this update: Sat 23 Aug 2025 23:02:56 +0000
Manifest next update: Sun 24 Aug 2025 23:02:56 +0000
Files and hashes: 1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: SqGHlNZloRnmsFwBgHvCTGbBrrZP137r/7LcaVh+yd0=)
2: OcxfXVrvYxkgLmxQUmK4efpt3cc.roa (hash: 9yuVp8SRMZUYM9hTDLvDJDMqxHqS1ktDbQ1bzB9Zyrs=)
3: ZrXYlOTJguNrpw_diqNoULGzQnw.roa (hash: d5T5b59p4fvwE7Y3eoRBKqf6wXsGrNoqmxfeIGJmwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:b3:76:b9:f1:de:eb:fb:79:9e:50:c5:b8:6d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: Aug 23 23:02:56 2025 GMT
Not After : Aug 24 23:02:56 2025 GMT
Subject: CN=d07e98d71fb6274eefb6eead6d1063874f46e80f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:49:6b:35:38:c0:5c:d4:e0:54:1b:dc:03:9e:
d4:bc:21:8f:00:b4:46:d3:93:58:1d:4e:b9:6c:ee:
f0:2e:cd:c7:cd:65:6e:4c:a4:d6:8a:04:b8:c1:84:
79:41:a4:7b:e9:b6:d2:e6:19:2f:ee:78:94:49:37:
ae:20:78:fe:d3:2c:ab:01:ef:33:b2:f9:bb:9f:5e:
b5:54:e4:a4:42:62:eb:7a:3f:88:b4:4c:1b:7d:fb:
1e:68:9a:e9:b3:73:fe:23:20:6e:ae:01:de:4d:71:
61:d1:6c:92:7b:74:bb:0f:76:30:e5:fe:80:cb:02:
08:35:c4:6f:00:81:20:a8:da:14:73:1b:a2:67:bb:
22:4c:f1:c7:56:41:23:4c:79:4b:83:1d:03:14:59:
a8:54:a8:89:f3:71:0c:1c:c5:e8:f2:2e:de:b7:01:
35:f1:35:e3:ed:f7:45:94:14:d0:04:e7:ea:c3:ef:
5d:72:89:49:70:c5:43:40:27:9a:bb:53:9c:95:37:
5d:1e:c6:4a:70:b6:90:b2:29:44:c6:15:80:72:00:
ae:59:8d:b3:55:ab:44:07:f9:cb:f8:af:0a:70:06:
11:67:ea:b3:49:74:40:0f:6b:23:9b:61:fa:83:2d:
79:ef:c5:f7:c6:49:b5:62:c2:96:80:27:44:25:8f:
7a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7E:98:D7:1F:B6:27:4E:EF:B6:EE:AD:6D:10:63:87:4F:46:E8:0F
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:05:ee:cc:47:ce:74:bf:15:1f:82:64:21:a4:75:ea:6e:da:
db:d6:ec:60:50:6d:6f:05:e3:6a:93:1e:a3:ed:93:4b:72:a3:
8f:fe:4a:8c:fe:80:c2:32:ea:45:67:88:2a:8e:c5:5b:dc:09:
8a:48:0a:37:0c:6f:15:c3:76:c0:f0:6c:06:c9:33:d6:6b:2d:
79:97:54:68:81:25:4f:00:e1:6c:97:31:b0:4d:4b:df:a9:6c:
a9:c9:e8:ef:a7:1e:62:4e:ad:73:1c:c9:01:04:16:f9:ef:6d:
8d:6c:b0:c1:22:3c:7b:b5:36:fb:b0:37:b6:f3:d0:49:69:5c:
22:b9:66:dd:d8:d1:56:f0:fc:13:e8:8b:57:97:e2:a4:b1:4f:
db:12:cd:5d:59:38:20:9f:02:34:29:87:39:de:b4:e9:0d:9a:
b5:1d:f1:03:10:a9:e7:51:bc:3f:d8:d3:83:d7:9f:50:03:a5:
c5:b6:3e:73:9b:3e:91:72:42:e5:90:75:65:60:4a:30:85:d7:
d3:7f:b1:c6:8a:18:2f:7f:83:b4:04:86:53:96:f8:c5:da:e0:
a7:3a:0f:48:57:85:b6:6d:b6:10:02:ba:6f:d9:15:58:41:29:
e8:4f:d3:59:d0:24:f2:cd:26:ea:be:a5:9c:0c:ed:29:10:7d:
0a:83:ea:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:25:42 2025 by rpki-client