Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: 2JLjXyMbSmlhe2wm7j+VBhmRBLoGbI0ahFUoOlbTwvA=
Subject key identifier: 4B:BD:D4:00:0C:52:A0:DC:50:2C:0C:04:B2:28:A3:1D:94:B7:C7:AE
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 019A71B8FCF76DB77A57C26B94FCAD44B5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:02:20 +0000
Manifest this update: Tue 11 Nov 2025 07:02:20 +0000
Manifest next update: Wed 12 Nov 2025 07:02:20 +0000
Files and hashes: 1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: XR8qInSznbf3sJ5kMZuAF78Gfin7bPjbcoqroasiDkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:fc:f7:6d:b7:7a:57:c2:6b:94:fc:ad:44:b5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Nov 11 07:02:20 2025 GMT
Not After : Nov 12 07:02:20 2025 GMT
Subject: CN=4bbdd4000c52a0dc502c0c04b228a31d94b7c7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:3f:c0:73:4c:1d:2b:f1:03:19:68:cc:0c:
d3:60:ce:20:14:4c:59:cd:58:0e:66:78:64:8e:2e:
b8:5e:50:07:03:f3:e8:a2:4a:da:56:1c:10:56:75:
53:55:6b:80:95:20:2b:f8:b5:88:bf:24:85:fd:61:
5a:80:e2:38:35:20:c6:73:3e:f1:80:98:02:c0:6e:
40:5a:92:0a:21:e6:43:a7:67:72:3c:53:65:5e:77:
3d:d8:8a:88:a6:25:d4:4c:bb:2a:52:7d:74:55:44:
84:93:35:c7:f0:ce:db:09:3a:9d:81:59:4a:28:7f:
41:85:b1:f4:0b:af:eb:6e:bf:ee:bf:ee:b6:5c:4a:
b8:a5:c2:fb:fd:c3:92:75:02:0e:10:9e:b6:f5:f6:
36:3e:f2:59:9f:e1:5a:38:a8:80:87:cf:b7:25:a4:
8a:00:95:bc:20:24:c0:17:ec:2f:57:1f:b7:24:2f:
b8:c9:da:55:9a:10:ea:1e:17:b9:b2:fe:e4:26:84:
33:83:af:3f:a8:85:dc:ca:56:da:d1:9a:e3:77:9c:
06:23:4e:67:9f:dd:87:a0:f1:f6:c6:68:31:1a:ec:
a2:fd:06:d7:e6:47:69:f2:67:d5:23:bc:b7:9d:9f:
a7:a9:db:ff:b8:75:85:d5:e6:5b:31:95:22:d6:9e:
d2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BD:D4:00:0C:52:A0:DC:50:2C:0C:04:B2:28:A3:1D:94:B7:C7:AE
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d7:6b:ec:28:9b:f8:89:18:54:5a:ac:d1:3f:2d:d6:36:ee:
d9:81:b3:42:80:ab:f9:93:fc:d3:2d:dc:9c:3e:8c:e3:4e:7c:
0b:f9:da:51:c7:ad:8b:07:1a:ff:05:d2:0d:8d:cf:63:09:21:
f4:f5:c1:32:ff:2d:ec:88:ee:1a:64:01:2e:e7:22:1b:82:d2:
c4:d5:dd:f2:26:dd:44:e7:12:2b:6d:6e:9c:52:21:d3:09:c7:
c0:a0:b7:99:0c:28:bd:2c:9f:9b:89:30:4e:d4:43:c5:43:3f:
b4:fc:10:f2:fb:65:b2:ac:9f:7a:dd:d5:73:e3:6d:54:62:e2:
3b:1a:f1:e5:c8:6b:ee:c4:dd:b7:a4:c4:4f:5b:fb:ba:2c:9b:
2b:ee:69:6b:3c:9f:97:1f:e8:19:97:6b:f7:dd:2e:98:4c:e7:
94:08:07:5b:51:cc:ef:66:76:9b:a9:98:3e:15:b9:ae:f8:65:
df:c6:2b:47:e1:ea:bf:a5:4e:46:95:44:1e:8c:9f:b1:f4:3c:
65:a6:2d:59:85:1b:d0:01:63:45:78:cf:ce:a7:46:ca:b9:6c:
f9:59:56:51:66:08:fd:60:fd:42:8f:ec:a9:11:3a:d0:6a:30:
99:c5:bd:4e:e5:4a:49:c0:d1:99:1d:d5:ea:76:8c:71:2e:a1:
79:66:a3:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuPz3bbd6V8JrlPytRLX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjcyNTNjODE1YzkxYzE0YTYwYmZhMjQ1NTFjZjQ5ZDM1
ZTQ3NTQwHhcNMjUxMTExMDcwMjIwWhcNMjUxMTEyMDcwMjIwWjAzMTEwLwYDVQQD
Eyg0YmJkZDQwMDBjNTJhMGRjNTAyYzBjMDRiMjI4YTMxZDk0YjdjN2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbU/wHNMHSvxAxlozAzTYM4gFExZ
zVgOZnhkji64XlAHA/PookraVhwQVnVTVWuAlSAr+LWIvySF/WFagOI4NSDGcz7x
gJgCwG5AWpIKIeZDp2dyPFNlXnc92IqIpiXUTLsqUn10VUSEkzXH8M7bCTqdgVlK
KH9BhbH0C6/rbr/uv+62XEq4pcL7/cOSdQIOEJ629fY2PvJZn+FaOKiAh8+3JaSK
AJW8ICTAF+wvVx+3JC+4ydpVmhDqHhe5sv7kJoQzg68/qIXcylba0Zrjd5wGI05n
n92HoPH2xmgxGuyi/QbX5kdp8mfVI7y3nZ+nqdv/uHWF1eZbMZUi1p7SWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu91AAMUqDcUCwMBLIoox2Ut8euMB8GA1UdIwQY
MBaAFAsnJTyBXJHBSmC/okVRz0nTXkdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYt
ZWZjN2JkMmY1ZmZjLzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYtZWZjN2JkMmY1ZmZj
LzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNdr7Cib
+IkYVFqs0T8t1jbu2YGzQoCr+ZP80y3cnD6M4058C/naUcetiwca/wXSDY3PYwkh
9PXBMv8t7IjuGmQBLuciG4LSxNXd8ibdROcSK21unFIh0wnHwKC3mQwovSyfm4kw
TtRDxUM/tPwQ8vtlsqyfet3Vc+NtVGLiOxrx5chr7sTdt6TET1v7uiybK+5pazyf
lx/oGZdr990umEznlAgHW1HM72Z2m6mYPhW5rvhl38YrR+Hqv6VORpVEHoyfsfQ8
ZaYtWYUb0AFjRXjPzqdGyrls+VlWUWYI/WD9Qo/sqRE60GowmcW9TuVKScDRmR3V
6naMcS6heWajCg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:07 2025 by rpki-client