Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: OIO2Dfjgf4DBmv6a9cc0GFNTuMyXmyXn5kS+pXNVprw=
Subject key identifier: B3:7D:F4:E5:0C:7E:B1:E9:73:E9:F5:46:31:53:AA:4A:14:31:49:44
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 0197B88FBD2703C67D5213EF693681E56036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 12F7
Signing time: Sat 28 Jun 2025 22:01:57 +0000
Manifest this update: Sat 28 Jun 2025 22:01:57 +0000
Manifest next update: Sun 29 Jun 2025 22:01:57 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: klO89eg9eQ08n3247M7pt3kYlCx9M1UjVw7onXs6s9Q=)
2: cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa (hash: lzijLPFGvwLgwXEhuBP2K7HD20X3oCBqeudRqI1ymvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:bd:27:03:c6:7d:52:13:ef:69:36:81:e5:60:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Jun 28 22:01:57 2025 GMT
Not After : Jun 29 22:01:57 2025 GMT
Subject: CN=b37df4e50c7eb1e973e9f5463153aa4a14314944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:99:67:7d:26:44:1f:49:d7:74:44:e2:34:8a:
5f:6e:f9:31:45:21:dc:4f:3c:dd:52:66:c1:b4:bd:
e9:51:27:9f:56:ba:36:3e:79:ed:47:cc:1c:34:1a:
a0:d3:0a:5d:0a:9b:2b:5a:06:53:13:fa:57:77:b2:
ac:fa:67:61:a4:84:46:c5:68:e2:08:28:ba:f2:c2:
b5:fc:c5:02:33:b2:2d:4e:b3:a8:e3:76:3c:a5:f9:
d2:da:75:38:b0:8f:62:d6:76:78:30:fd:81:ac:05:
f1:1a:4b:62:10:d2:22:5c:b8:7b:71:55:b1:d5:ae:
e9:92:30:d6:02:33:e9:9c:b6:d9:3b:7b:7c:0e:fc:
b8:ee:db:f5:d5:26:74:76:b1:56:24:31:76:08:8b:
59:71:c2:d5:c6:e3:e5:76:c9:88:48:77:85:c9:4e:
1b:94:d6:d5:18:28:96:8c:f2:96:8a:c0:e5:cd:7c:
2b:46:09:1f:27:0f:32:1d:9a:41:62:79:c8:60:f2:
73:da:9b:07:17:43:e4:27:13:bc:62:05:93:bf:7e:
0d:9a:e3:ea:fe:8d:e2:6a:48:21:8e:d7:e1:e5:2b:
54:03:4b:d3:1d:4a:d4:6c:d2:18:6b:59:12:5a:ef:
28:a4:ba:85:e2:d3:bf:5c:a8:62:38:d5:c0:a5:3b:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:7D:F4:E5:0C:7E:B1:E9:73:E9:F5:46:31:53:AA:4A:14:31:49:44
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:10:5d:c5:81:ab:fc:4f:12:29:f9:40:f0:c5:2a:07:2a:ee:
60:f3:2e:50:0e:e9:a8:de:db:de:c5:ca:80:73:fd:74:06:ce:
b2:a1:85:5e:81:06:4e:e1:6c:e6:06:b2:72:78:61:af:7f:dc:
78:5c:65:7a:8e:90:8a:84:75:93:82:28:6f:e9:73:2b:76:cf:
2c:80:fb:f1:a4:2f:c1:85:75:cb:45:ef:9a:3a:ed:f8:36:04:
72:d2:d7:56:01:a2:f1:1e:18:e2:04:bd:1c:e4:fd:d4:c2:dd:
5b:5c:75:42:58:bb:b6:86:20:b9:22:29:0f:79:0f:94:02:5b:
00:26:ac:2c:65:5b:a7:d4:33:a3:ee:25:e4:c8:00:1d:19:f9:
73:af:d4:7e:a4:71:c0:fa:b1:96:69:49:4d:97:4d:2e:89:c7:
46:6d:3b:55:46:81:65:7c:34:c1:35:bb:3c:7f:b2:89:6e:b9:
06:bd:31:0c:b9:f1:e6:3c:51:fb:8d:a4:75:e0:0a:ae:13:ed:
9a:54:53:41:de:de:25:d2:81:49:35:0b:14:4a:07:94:f5:30:
a3:48:e9:74:7d:03:5f:10:9f:ad:84:26:e6:fa:36:72:6d:c3:
9e:68:dd:81:6d:9b:93:68:eb:ab:41:8a:c2:b5:a1:ad:5c:7a:
13:8b:62:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:59:43 2025 by rpki-client