
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json)
Hash identifier: 1JDYd2gAYpnPWBjH3uZmh/P8jQEf0MTStdIp/1oiHiM=
Subject key identifier: 52:0F:E7:DF:7F:8F:33:5C:DC:7F:20:B8:AA:83:21:24:EB:D4:B7:3F
Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873
Certificate serial: 0199FBEC4D656AE98B2F3FCA09D77DCFC0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
Manifest number: 1423
Signing time: Sun 19 Oct 2025 10:03:11 +0000
Manifest this update: Sun 19 Oct 2025 10:03:11 +0000
Manifest next update: Mon 20 Oct 2025 10:03:11 +0000
Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: EfDQtjwj+C/BWaaxvC5P/5GxfppRMQ7eil6tEZa1cDE=)
2: cwmq1wJ6AkXK6Pc0pO2YSXjmyM4.roa (hash: lzijLPFGvwLgwXEhuBP2K7HD20X3oCBqeudRqI1ymvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:4d:65:6a:e9:8b:2f:3f:ca:09:d7:7d:cf:c0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873
Validity
Not Before: Oct 19 10:03:11 2025 GMT
Not After : Oct 20 10:03:11 2025 GMT
Subject: CN=520fe7df7f8f335cdc7f20b8aa832124ebd4b73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:a0:24:75:57:fa:f5:b6:1b:e6:23:c8:ab:
58:c6:76:4c:05:d6:27:88:52:ef:69:2c:e5:e5:bd:
22:a4:28:e3:c6:11:ab:ac:90:e3:7a:65:33:32:54:
63:28:08:fb:66:74:fd:d8:9d:0d:6b:70:de:18:e2:
c7:17:91:7a:d4:21:f5:a3:7c:46:87:93:08:19:aa:
00:7b:d8:e0:27:b4:56:ce:bd:88:cc:f2:4b:24:39:
cc:8e:b0:b6:30:57:fd:a4:53:b6:98:ad:ab:5c:87:
49:ac:53:8d:6f:05:3f:d1:30:33:ea:8b:4f:85:18:
00:dc:96:02:1f:97:c7:bd:08:e2:ef:5e:0c:f2:f3:
a8:ab:07:80:6c:1b:de:ad:79:48:b4:2f:6a:51:8a:
a1:d4:c0:47:23:82:fa:cf:b6:4f:78:3e:8d:7d:5e:
49:de:12:5c:83:3b:2d:1e:7e:42:05:b8:1a:cd:70:
28:f8:a7:b5:59:8b:ab:7f:9c:f7:4f:57:59:9c:12:
59:22:bb:19:63:c1:83:3e:aa:cf:13:c7:b9:99:0c:
47:43:96:44:06:11:ff:9b:28:b7:bb:0f:8c:2e:58:
85:ba:13:f0:5b:96:cf:14:bd:12:43:83:ce:4e:08:
84:4c:18:13:76:97:4e:f4:db:46:7d:b7:cc:fb:8a:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0F:E7:DF:7F:8F:33:5C:DC:7F:20:B8:AA:83:21:24:EB:D4:B7:3F
X509v3 Authority Key Identifier:
keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a6:8c:05:c5:e3:61:23:4c:65:86:c9:6b:86:54:23:6d:21:
7f:87:7a:dd:68:d4:d4:35:dc:00:27:da:98:e5:34:d3:a7:9b:
2b:5b:ae:c4:3e:86:1c:a6:37:9b:61:73:90:28:07:3d:f0:fd:
53:75:7e:8a:10:c5:bf:dc:a1:1f:58:3c:42:63:7b:1f:b5:de:
23:dd:a8:66:79:44:e0:40:d3:ee:3e:d0:03:f8:67:4b:2c:b8:
79:27:5d:71:47:e4:70:b1:3e:2f:a2:a6:7e:fb:bb:55:c3:fc:
a4:20:c3:ef:20:5f:32:24:4d:48:d9:2a:48:ca:88:97:b7:ce:
27:bc:84:3e:56:be:c4:af:c9:82:35:f7:58:4c:8c:de:fd:bb:
1c:ec:c7:42:3a:95:fc:5a:12:70:d0:6c:36:8f:a3:5b:2a:c7:
55:c8:86:35:6f:18:dc:1a:86:97:32:cf:8d:1c:ff:46:61:4f:
e6:df:be:fb:ab:10:70:83:55:3a:eb:45:79:b0:8a:71:bf:47:
b1:12:84:3d:34:ca:0e:de:5b:9f:d9:b7:7b:ce:14:2f:62:a0:
6a:02:c1:ff:42:d4:05:79:b5:53:c1:b2:58:5a:72:76:34:d5:
8e:d0:cb:ea:9e:0f:b1:e1:65:82:92:dd:63:b8:56:27:19:12:
14:bd:15:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:09 2025 by rpki-client