Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: Lmp+7qyfYbc5hPQE17yt9RecHqaw+brkN3Z66WZWTjs=
Subject key identifier: 68:3A:11:B0:DD:71:3A:AE:5B:F2:50:A3:38:88:08:1A:D7:53:97:C2
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 01984A4125DD4FB6BA550D76CF553FBDCDF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 044F
Signing time: Sun 27 Jul 2025 05:00:40 +0000
Manifest this update: Sun 27 Jul 2025 05:00:40 +0000
Manifest next update: Mon 28 Jul 2025 05:00:40 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: n4Vmk26CDdajl393EljWv5fnVrWmUvHt8WQL80G86YY=)
2: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (hash: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:25:dd:4f:b6:ba:55:0d:76:cf:55:3f:bd:cd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Jul 27 05:00:40 2025 GMT
Not After : Jul 28 05:00:40 2025 GMT
Subject: CN=683a11b0dd713aae5bf250a33888081ad75397c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a8:c5:c2:1b:e7:93:78:45:1a:aa:36:b9:06:
f2:6f:4d:6c:0e:64:44:2f:c3:f9:9b:e6:cf:23:fe:
c3:a0:d2:6b:51:70:36:9d:0d:93:a6:3f:04:e6:48:
bc:93:64:f2:8e:00:68:c1:cc:35:69:98:f9:79:c4:
a2:b2:d7:ae:29:30:54:ce:3c:0d:29:46:f1:ee:4f:
42:9a:e5:c3:29:7a:a9:fe:23:e7:9a:49:db:fd:1d:
ef:a6:54:84:9e:42:59:48:fd:29:ff:05:d7:f8:98:
7a:6c:ea:b0:dc:45:c5:14:96:97:54:fb:5c:1b:9b:
a6:d0:db:90:e0:3d:c9:50:d0:6b:67:7c:69:fc:f2:
26:f7:8c:31:de:53:b6:ff:98:15:dd:d8:52:90:bd:
80:33:d4:68:b4:3c:c9:f7:5d:7b:81:94:e5:86:d1:
80:70:a8:a7:63:42:eb:7b:bd:f2:47:0c:ab:35:3b:
1c:80:07:13:9c:3d:3f:6c:60:d0:7e:d7:88:cc:52:
7a:81:6d:c1:19:5d:7e:aa:1f:9e:60:88:9f:0c:6a:
e3:ae:78:d9:05:37:54:8a:6d:1f:62:7d:73:a3:dc:
69:a5:d4:f2:29:b3:14:8a:84:e2:a1:48:bb:a9:f4:
f7:57:be:24:67:e4:a6:25:fb:a4:49:a7:91:54:ed:
97:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3A:11:B0:DD:71:3A:AE:5B:F2:50:A3:38:88:08:1A:D7:53:97:C2
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3b:24:3a:f3:90:df:b8:c7:2c:ae:00:8e:54:96:b8:05:ac:
85:4c:24:e9:82:76:39:2d:1b:ab:02:f6:dd:60:7c:6a:e8:43:
1c:03:a9:8c:be:e4:92:7f:56:fb:dd:d0:d0:55:7e:da:12:e1:
b2:27:fd:3f:4c:a0:b5:13:ae:1a:30:ca:58:c3:0c:a6:75:16:
c7:af:39:af:70:b8:d5:a4:de:9e:97:fc:45:30:71:95:bd:d0:
9f:e6:c1:0f:65:f7:3c:8a:d5:6d:f6:61:ed:fb:dc:36:9d:2d:
45:24:9c:50:b0:21:e1:5a:e0:ec:3b:75:66:d3:7d:8e:ba:f0:
8a:76:87:c5:c5:9d:3c:03:ab:e7:b9:d3:ac:60:c4:d9:4f:98:
3c:dc:7e:65:ff:19:41:c3:f4:fc:0f:38:d1:44:0e:8e:2a:15:
77:64:b1:58:23:8c:21:38:95:39:04:da:80:cd:9b:a6:77:e3:
53:c5:60:b2:4d:d7:cb:f9:72:dc:27:5b:b9:cf:80:05:c2:c0:
6d:6e:63:29:c2:5e:87:6d:de:8e:ed:9a:1a:5c:3b:ad:db:16:
ef:45:b7:77:25:97:a8:58:8f:64:26:e9:bd:f6:00:16:14:18:
e3:7a:ce:95:96:6f:3e:e7:50:41:b2:bd:57:d2:04:31:53:50:
97:37:c4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:13 2025 by rpki-client