Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File: CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier: obNN4fVUtffGSXRNcNip7CAaBkIemohXfrPhMEOQK3o=
Subject key identifier: D2:C3:B2:BE:0C:CE:0A:44:84:70:96:23:B3:EE:10:4F:67:63:0B:D6
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 0196B891732CF63416365C038B7A0958213B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number: 14CF
Signing time: Sat 10 May 2025 05:01:01 +0000
Manifest this update: Sat 10 May 2025 05:01:01 +0000
Manifest next update: Sun 11 May 2025 05:01:01 +0000
Files and hashes: 1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: RGDERc+ED9NZ1TzbzD9vjdVcv6HQV5s4yV1oO0oFAtg=)
2: OcxfXVrvYxkgLmxQUmK4efpt3cc.roa (hash: 9yuVp8SRMZUYM9hTDLvDJDMqxHqS1ktDbQ1bzB9Zyrs=)
3: ZrXYlOTJguNrpw_diqNoULGzQnw.roa (hash: d5T5b59p4fvwE7Y3eoRBKqf6wXsGrNoqmxfeIGJmwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:73:2c:f6:34:16:36:5c:03:8b:7a:09:58:21:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: May 10 05:01:01 2025 GMT
Not After : May 11 05:01:01 2025 GMT
Subject: CN=d2c3b2be0cce0a4484709623b3ee104f67630bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d9:66:6a:57:66:b2:82:aa:49:35:34:f4:e6:
54:f0:d5:99:13:71:7e:d6:b3:57:8a:f1:c8:ad:40:
c0:4f:7a:da:40:94:57:8c:5d:26:4b:8e:ef:a3:3e:
c8:54:4c:fc:f8:69:c3:56:fa:0d:67:d2:b9:aa:6c:
f8:4b:3b:24:b8:4d:a4:e9:05:93:41:23:9a:ab:b7:
fb:46:5b:d5:a7:1c:b6:69:3d:76:b4:6d:c2:57:33:
7e:46:d7:0a:38:c4:31:57:99:57:c6:a2:ab:fe:1f:
f8:a3:49:fd:4a:8a:96:94:27:b4:d9:87:81:5a:ff:
f2:a7:bc:f8:ed:29:3a:2a:fe:06:3c:0a:ab:eb:58:
24:65:a8:96:e2:e1:b1:4e:66:a2:9b:52:a2:58:d5:
fa:9a:dd:62:18:4c:21:7e:f4:1c:63:42:d3:3c:db:
c5:34:a2:d6:d0:2a:76:bb:10:86:28:00:fb:65:be:
32:f2:ab:ee:b3:e8:17:3a:05:dd:75:31:a2:63:fb:
c0:af:78:06:5f:4c:54:b3:db:ba:26:fb:56:c4:95:
df:09:a2:c5:30:94:3f:7a:a7:18:16:a7:cc:9a:c3:
32:ee:6a:5d:74:94:09:91:0d:a5:fd:0f:fa:58:82:
b2:b4:1c:5c:99:fb:42:b6:cd:bb:f9:3d:3b:c9:14:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C3:B2:BE:0C:CE:0A:44:84:70:96:23:B3:EE:10:4F:67:63:0B:D6
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ff:51:e1:90:c5:24:7e:6a:ef:9c:ce:b0:d9:5c:d7:94:c5:
a3:56:07:66:26:e1:62:0b:9f:15:68:54:0d:dd:43:71:f8:f2:
f8:e8:7e:65:27:98:d7:f1:c2:28:1f:cc:c7:a8:64:f3:53:ab:
6c:96:a2:ea:6c:6e:27:5a:07:8e:6e:52:e2:51:93:2d:b6:cc:
ea:f7:e5:8c:4b:63:73:63:67:a4:5a:84:96:df:83:5e:20:44:
be:5a:74:90:0b:e8:82:06:f4:48:0d:21:29:18:08:cb:49:06:
d6:3a:84:ec:56:44:e4:0a:fb:10:6d:05:17:3c:e2:dd:65:84:
a2:32:2c:e3:28:d5:14:35:78:82:e5:b4:bc:4d:71:e1:c7:3a:
35:51:c1:d1:ed:c4:4a:ff:1e:42:a4:36:e4:3f:3e:a8:94:28:
5c:48:cb:26:e8:9a:88:e2:dc:26:e8:3e:7f:c7:e0:98:38:87:
3d:f3:cc:f0:f4:46:71:de:d5:d2:77:67:3f:cc:12:a8:64:80:
99:3c:77:ba:9d:da:d4:95:ba:ba:d2:a6:d8:c2:bf:6c:b0:6b:
52:d4:b2:94:5c:d9:d5:f6:7d:b9:56:8b:6f:98:ea:28:35:31:
c7:76:3a:63:fd:7a:7d:f4:0e:85:fd:a5:2c:aa:56:3d:3b:ea:
47:fc:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:51:52 2025 by rpki-client