Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
File: CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft (raw, json)
Hash identifier: COMe6CALqEv3YyN4QpPeLs71fEsMFLMJLoVW80GA0yc=
Subject key identifier: 22:CC:E9:AD:17:F8:99:AB:A1:E6:6B:02:38:A5:4A:7E:C8:85:47:12
Authority key identifier: 08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
Certificate issuer: /CN=08818cbb0f9d1e573773d791138a0122f28bec56
Certificate serial: 0199FCC6864A403E1D33574C8C9F4B005608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
Manifest number: 1680
Signing time: Sun 19 Oct 2025 14:01:32 +0000
Manifest this update: Sun 19 Oct 2025 14:01:32 +0000
Manifest next update: Mon 20 Oct 2025 14:01:32 +0000
Files and hashes: 1: CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl (hash: OwlWHDPGWuz25NZ0VuCoL9F2KpxchUPUn8p377GM2Dk=)
2: OcxfXVrvYxkgLmxQUmK4efpt3cc.roa (hash: 9yuVp8SRMZUYM9hTDLvDJDMqxHqS1ktDbQ1bzB9Zyrs=)
3: ZrXYlOTJguNrpw_diqNoULGzQnw.roa (hash: d5T5b59p4fvwE7Y3eoRBKqf6wXsGrNoqmxfeIGJmwLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:86:4a:40:3e:1d:33:57:4c:8c:9f:4b:00:56:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08818cbb0f9d1e573773d791138a0122f28bec56
Validity
Not Before: Oct 19 14:01:32 2025 GMT
Not After : Oct 20 14:01:32 2025 GMT
Subject: CN=22cce9ad17f899aba1e66b0238a54a7ec8854712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:8d:97:bc:78:c2:8b:8c:77:54:d2:51:6f:
70:b8:11:65:55:52:c0:64:33:a1:14:14:62:58:c8:
8a:ba:73:73:21:56:13:1b:91:3c:e4:ad:31:74:26:
0f:70:a1:3a:fa:95:5d:c0:9f:c5:66:72:02:40:47:
ac:e9:dd:08:60:a9:5f:a2:a6:9b:05:3b:87:63:e7:
e8:62:b6:1e:36:32:46:62:1a:b4:5f:26:91:11:af:
3a:07:1c:bf:51:25:48:ed:1d:9f:5c:74:8f:e3:09:
2e:b9:56:27:e8:9e:78:95:54:b0:59:0e:25:b9:a8:
65:d1:7d:b0:5c:c6:d7:27:f8:12:9f:bc:8c:88:ad:
6d:9e:d4:47:e3:8d:ea:ca:24:92:9b:36:b2:ec:ee:
9c:9a:4a:a9:38:e7:e9:dc:4c:5b:81:4d:8d:c6:c6:
da:26:f3:57:18:0c:cc:78:9d:df:a9:25:26:a3:e0:
2c:bc:e8:16:a3:e0:cf:67:0d:28:3c:6c:39:b9:e1:
68:4b:3b:4a:10:90:a2:d1:eb:b7:dd:5d:ab:b7:e9:
43:5e:ee:ff:29:b5:e0:73:65:64:74:f0:8e:23:5d:
dc:bf:c7:80:a1:4e:df:6a:e8:b2:59:6a:5b:fe:04:
ae:5e:c3:c4:04:cd:19:8c:a7:31:fd:c0:0a:6e:20:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:CC:E9:AD:17:F8:99:AB:A1:E6:6B:02:38:A5:4A:7E:C8:85:47:12
X509v3 Authority Key Identifier:
keyid:08:81:8C:BB:0F:9D:1E:57:37:73:D7:91:13:8A:01:22:F2:8B:EC:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGMuw-dHlc3c9eRE4oBIvKL7FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2e0536-4ca2-4afe-83d6-336e874f3d87/1/CIGMuw-dHlc3c9eRE4oBIvKL7FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:45:f9:00:e1:c8:2a:2a:11:35:75:73:05:61:68:e7:73:6d:
89:24:8b:08:1d:c0:21:59:e3:8b:58:c7:ca:c4:1e:23:8e:60:
d8:d7:cb:6f:25:90:6f:55:9d:41:51:4f:67:ae:dd:77:aa:83:
9a:9c:65:ff:39:1f:5f:97:d1:e9:66:16:9b:d1:30:44:32:6c:
4a:5f:9f:61:79:79:33:b3:b2:60:2e:e7:7a:59:cc:02:6e:f8:
11:67:08:d0:0f:48:ca:55:31:9a:e1:9c:3d:a8:20:b6:0e:2e:
f7:e1:65:8e:7b:d4:7d:16:a7:c9:65:7f:f6:03:42:95:9d:7f:
e2:f6:ff:f2:7e:93:3a:a1:25:5c:2b:f5:a5:55:39:ef:70:8a:
84:9a:e3:51:5a:fc:d8:e1:bd:82:2b:6e:eb:62:87:0b:59:e8:
8f:33:0b:c7:74:2d:7b:b8:b0:6e:60:74:c4:90:62:23:96:7d:
2a:e4:38:e5:9e:9b:fd:5d:03:0c:e2:c7:1a:47:0c:ca:f4:ba:
6f:44:7e:d9:4c:39:cb:1c:e9:11:47:6b:33:57:e1:50:93:a1:
5e:c9:26:df:05:2e:f0:47:42:1c:a7:bb:22:3d:c4:d9:cd:d3:
87:4f:e1:30:28:7d:69:55:f0:a1:13:62:93:5d:47:6d:0b:2a:
55:e8:f0:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xoZKQD4dM1dMjJ9LAFYIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODE4Y2JiMGY5ZDFlNTczNzczZDc5MTEzOGEwMTIyZjI4
YmVjNTYwHhcNMjUxMDE5MTQwMTMyWhcNMjUxMDIwMTQwMTMyWjAzMTEwLwYDVQQD
EygyMmNjZTlhZDE3Zjg5OWFiYTFlNjZiMDIzOGE1NGE3ZWM4ODU0NzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwACNl7x4wouMd1TSUW9wuBFlVVLA
ZDOhFBRiWMiKunNzIVYTG5E85K0xdCYPcKE6+pVdwJ/FZnICQEes6d0IYKlfoqab
BTuHY+foYrYeNjJGYhq0XyaREa86Bxy/USVI7R2fXHSP4wkuuVYn6J54lVSwWQ4l
uahl0X2wXMbXJ/gSn7yMiK1tntRH443qyiSSmzay7O6cmkqpOOfp3ExbgU2Nxsba
JvNXGAzMeJ3fqSUmo+AsvOgWo+DPZw0oPGw5ueFoSztKEJCi0eu33V2rt+lDXu7/
KbXgc2VkdPCOI13cv8eAoU7fauiyWWpb/gSuXsPEBM0ZjKcx/cAKbiDI0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLM6a0X+JmroeZrAjilSn7IhUcSMB8GA1UdIwQY
MBaAFAiBjLsPnR5XN3PXkROKASLyi+xWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lHTXV3LWRIbGMzYzllUkU0b0JJdktMN0ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yZTA1MzYtNGNhMi00YWZlLTgzZDYt
MzM2ZTg3NGYzZDg3LzEvQ0lHTXV3LWRIbGMzYzllUkU0b0JJdktMN0ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yZTA1MzYtNGNhMi00YWZlLTgzZDYtMzM2ZTg3NGYzZDg3
LzEvQ0lHTXV3LWRIbGMzYzllUkU0b0JJdktMN0ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdEX5AOHI
KioRNXVzBWFo53NtiSSLCB3AIVnji1jHysQeI45g2NfLbyWQb1WdQVFPZ67dd6qD
mpxl/zkfX5fR6WYWm9EwRDJsSl+fYXl5M7OyYC7nelnMAm74EWcI0A9IylUxmuGc
Paggtg4u9+FljnvUfRanyWV/9gNClZ1/4vb/8n6TOqElXCv1pVU573CKhJrjUVr8
2OG9gitu62KHC1nojzMLx3Qte7iwbmB0xJBiI5Z9KuQ45Z6b/V0DDOLHGkcMyvS6
b0R+2Uw5yxzpEUdrM1fhUJOhXskm3wUu8EdCHKe7Ij3E2c3Th0/hMCh9aVXwoRNi
k11HbQsqVejwqg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:47 2025 by rpki-client