Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: 0QmxS4ld4Q+MF7VN/Uem+7yC9rjEKIwnbpI1sBF4t2c=
Subject key identifier: 20:C0:37:A0:4D:38:12:60:F5:45:88:A4:3B:E1:4A:F9:CE:1B:CB:BF
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 019923A0EC566FB003819DE6D85E6ADCDE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:02:52 +0000
Manifest this update: Sun 07 Sep 2025 10:02:52 +0000
Manifest next update: Mon 08 Sep 2025 10:02:52 +0000
Files and hashes: 1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: S0cVWiVmgxWxjRejMuiBrXa12sUDepAWdD5IeVJdOjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:ec:56:6f:b0:03:81:9d:e6:d8:5e:6a:dc:de:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Sep 7 10:02:52 2025 GMT
Not After : Sep 8 10:02:52 2025 GMT
Subject: CN=20c037a04d381260f54588a43be14af9ce1bcbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:77:fc:e0:05:4d:bb:23:10:93:c5:38:83:
f0:35:5d:6c:17:c0:3c:f5:80:a6:2b:d4:64:68:27:
52:1f:5d:22:bd:f3:c7:10:63:19:70:02:8c:33:73:
ef:79:28:05:51:b6:2d:5f:c5:3e:22:bf:3f:20:35:
1b:4c:bd:e1:81:23:ec:1b:d3:58:32:43:6e:42:de:
d7:7f:b1:a9:d5:53:c0:b1:96:0a:f0:be:77:77:c4:
22:bc:06:d0:91:3a:dc:6c:ca:1c:c4:14:2a:95:fa:
69:54:b4:3a:d8:24:56:66:bd:7c:a9:39:47:d3:aa:
19:d8:11:ac:58:c9:60:5c:89:e8:d8:b8:34:18:a9:
ae:9b:9c:64:cc:00:23:c0:b1:be:3c:b8:ca:fe:68:
b4:e7:20:5c:a9:65:77:78:66:db:fe:83:c0:d5:50:
c4:83:b1:cb:d7:d4:71:53:57:8e:f1:44:e9:4f:87:
f9:f9:96:78:3b:8c:52:d6:d2:ce:55:9c:4c:76:84:
8a:a2:66:7f:4a:89:61:00:d1:d4:bb:78:a5:62:db:
46:68:61:f2:44:e1:a3:c6:90:81:e2:00:2b:26:5c:
8b:a1:a4:ff:c0:62:aa:bf:57:02:09:ab:f5:11:1f:
d2:5b:54:3f:1d:90:ff:fc:01:46:7a:a8:37:bb:9a:
2a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C0:37:A0:4D:38:12:60:F5:45:88:A4:3B:E1:4A:F9:CE:1B:CB:BF
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:5b:04:52:53:1e:e9:17:f1:66:09:4f:7f:e5:86:24:ed:3d:
58:0b:98:3b:50:a5:a9:25:35:62:ce:98:b8:6b:19:00:e8:9f:
b2:70:3b:56:27:fa:7c:53:c7:06:8a:71:1a:a3:50:2e:85:7b:
17:d1:1a:32:dc:02:8b:2c:12:57:a4:ea:17:6d:bb:d9:55:dc:
b7:ad:9b:0f:ba:72:68:25:66:df:e5:35:cc:d3:c8:7b:77:1f:
e7:19:96:90:ad:24:96:0d:5e:9f:2d:e4:48:ab:ab:8b:fa:a8:
27:a2:78:fb:df:5c:82:3b:fc:bc:ba:72:e6:74:e2:2f:b6:0c:
79:83:8e:a9:1f:3a:5f:2f:ce:68:cf:2c:32:de:60:05:27:60:
e3:ff:68:9f:54:5a:82:52:89:ce:33:5c:d5:67:7d:b7:65:1d:
24:b4:8c:3b:76:46:a8:43:3b:0c:e7:d6:42:21:40:9a:06:f4:
de:c4:eb:6d:e7:06:76:2a:e4:84:99:5f:37:26:5f:91:75:df:
ba:d6:31:82:c8:d3:13:56:ba:43:6b:1b:f6:0d:55:54:78:a7:
78:c4:a1:1c:6e:08:02:e2:ef:8e:9b:e6:ab:c4:cf:3c:84:4b:
3a:54:16:eb:0f:f6:85:ef:8f:70:95:9e:4d:dc:1c:c4:ff:8c:
1d:62:0c:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjoOxWb7ADgZ3m2F5q3N4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjcyNTNjODE1YzkxYzE0YTYwYmZhMjQ1NTFjZjQ5ZDM1
ZTQ3NTQwHhcNMjUwOTA3MTAwMjUyWhcNMjUwOTA4MTAwMjUyWjAzMTEwLwYDVQQD
EygyMGMwMzdhMDRkMzgxMjYwZjU0NTg4YTQzYmUxNGFmOWNlMWJjYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo93/OAFTbsjEJPFOIPwNV1sF8A8
9YCmK9RkaCdSH10ivfPHEGMZcAKMM3PveSgFUbYtX8U+Ir8/IDUbTL3hgSPsG9NY
MkNuQt7Xf7Gp1VPAsZYK8L53d8QivAbQkTrcbMocxBQqlfppVLQ62CRWZr18qTlH
06oZ2BGsWMlgXIno2Lg0GKmum5xkzAAjwLG+PLjK/mi05yBcqWV3eGbb/oPA1VDE
g7HL19RxU1eO8UTpT4f5+ZZ4O4xS1tLOVZxMdoSKomZ/SolhANHUu3ilYttGaGHy
ROGjxpCB4gArJlyLoaT/wGKqv1cCCav1ER/SW1Q/HZD//AFGeqg3u5oqwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDAN6BNOBJg9UWIpDvhSvnOG8u/MB8GA1UdIwQY
MBaAFAsnJTyBXJHBSmC/okVRz0nTXkdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYt
ZWZjN2JkMmY1ZmZjLzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYtZWZjN2JkMmY1ZmZj
LzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1sEUlMe
6RfxZglPf+WGJO09WAuYO1ClqSU1Ys6YuGsZAOifsnA7Vif6fFPHBopxGqNQLoV7
F9EaMtwCiywSV6TqF2272VXct62bD7pyaCVm3+U1zNPIe3cf5xmWkK0klg1eny3k
SKuri/qoJ6J4+99cgjv8vLpy5nTiL7YMeYOOqR86Xy/OaM8sMt5gBSdg4/9on1Ra
glKJzjNc1Wd9t2UdJLSMO3ZGqEM7DOfWQiFAmgb03sTrbecGdirkhJlfNyZfkXXf
utYxgsjTE1a6Q2sb9g1VVHineMShHG4IAuLvjpvmq8TPPIRLOlQW6w/2he+PcJWe
TdwcxP+MHWIMHQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:34:16 2025 by rpki-client