Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: /vYkM5gBOdMB21+hFsjB8oloxU93uwpsGrSYD/NUuOc=
Subject key identifier: A1:87:C4:39:63:FE:BD:99:C5:32:F0:DF:CD:BC:E6:E4:C9:7C:6D:25
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 019A085B93C6DCEF1581908DC63E26531B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 0536
Signing time: Tue 21 Oct 2025 20:00:10 +0000
Manifest this update: Tue 21 Oct 2025 20:00:10 +0000
Manifest next update: Wed 22 Oct 2025 20:00:10 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: gDW4pNm6GAd5Kru4m3GEwJ9mle4JWpMBcqalZIBqpVE=)
2: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (hash: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:5b:93:c6:dc:ef:15:81:90:8d:c6:3e:26:53:1b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Oct 21 20:00:10 2025 GMT
Not After : Oct 22 20:00:10 2025 GMT
Subject: CN=a187c43963febd99c532f0dfcdbce6e4c97c6d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:44:62:80:06:db:cb:7a:e4:f4:36:97:e9:
2a:91:1c:df:71:10:24:2a:46:ba:1e:b3:7c:5a:33:
29:91:fc:26:b9:97:c5:e8:6b:4f:f1:3d:c2:c1:d9:
71:32:87:5e:a3:9c:11:ec:bc:b4:6d:27:e2:0d:4a:
6f:d2:ef:95:23:ff:cb:2a:21:1c:1b:00:06:1c:a1:
cf:ed:ab:eb:ff:32:78:77:db:f8:72:e6:63:67:76:
b3:d1:bf:9e:2b:04:9d:1b:a2:08:c0:a8:cc:32:83:
55:ae:11:01:ca:49:32:78:70:4d:f9:dd:91:70:fd:
cd:17:2f:8a:21:6a:20:6d:f0:ec:36:ff:0b:34:ef:
8f:20:9c:dc:0e:b5:b1:c5:b3:00:d5:7c:8e:5a:90:
50:5a:5d:4a:45:82:58:b7:26:50:3c:61:34:87:32:
70:76:a7:18:f2:74:88:31:7a:60:b0:23:d8:6d:4d:
0d:bb:e8:97:2f:d9:9d:70:b4:e8:32:cc:05:57:fa:
7e:f8:46:2a:27:fd:ea:53:f0:99:e5:13:b1:39:48:
41:18:99:65:9c:bc:b5:4f:53:6c:22:03:3c:95:ed:
30:3e:95:d3:79:1c:a8:96:6f:e8:ae:39:0e:c0:ca:
eb:d9:1a:ae:d3:e3:e4:d6:39:5c:01:5c:35:72:4f:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:87:C4:39:63:FE:BD:99:C5:32:F0:DF:CD:BC:E6:E4:C9:7C:6D:25
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:07:66:07:cf:7f:29:75:86:54:6e:2e:6a:80:ca:70:8a:69:
be:21:bd:0d:c3:86:ce:6b:4c:63:73:5a:fc:83:23:2a:8a:f1:
a6:5f:75:8e:40:ff:90:76:75:89:86:30:0c:8a:35:d3:73:87:
be:51:b2:73:b6:74:3e:ed:82:4d:04:67:95:b0:83:1c:dd:70:
56:71:a0:cc:2d:1e:b0:fa:67:ee:bc:2d:84:80:bc:aa:56:a6:
61:7d:c9:74:ea:ec:ba:af:3f:c0:57:fc:8c:71:19:0a:e3:cf:
8f:f2:5b:34:f2:5b:43:3f:c2:9b:a7:6d:8e:20:97:f2:be:85:
38:16:28:c0:24:27:c7:d9:4d:93:54:15:27:25:b9:b7:78:b4:
5a:76:a5:62:2e:05:3f:db:fc:2f:5c:c0:6d:52:06:f8:b7:3c:
25:c3:24:8f:79:71:db:a5:87:9c:d1:3a:b9:29:90:7d:57:94:
17:05:9b:97:be:22:b1:dc:d8:53:69:b3:73:e2:9b:f7:21:4c:
93:28:56:bf:e2:e7:c3:16:ee:ff:47:f1:87:61:14:d8:16:fa:
75:58:c1:9d:e8:b1:aa:90:ac:d9:61:2a:2e:73:08:e0:16:dd:
4c:b6:79:73:31:4b:48:71:00:80:8a:b3:96:d8:d1:5c:29:d5:
21:c7:c8:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoIW5PG3O8VgZCNxj4mUxtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODI4YmM3ZGQ3ODQ4NTBiODk2ZWQ3ZGVkOTQ4M2RiNWYw
MWUwNTkwHhcNMjUxMDIxMjAwMDEwWhcNMjUxMDIyMjAwMDEwWjAzMTEwLwYDVQQD
EyhhMTg3YzQzOTYzZmViZDk5YzUzMmYwZGZjZGJjZTZlNGM5N2M2ZDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpZEYoAG28t65PQ2l+kqkRzfcRAk
Kka6HrN8WjMpkfwmuZfF6GtP8T3CwdlxModeo5wR7Ly0bSfiDUpv0u+VI//LKiEc
GwAGHKHP7avr/zJ4d9v4cuZjZ3az0b+eKwSdG6IIwKjMMoNVrhEBykkyeHBN+d2R
cP3NFy+KIWogbfDsNv8LNO+PIJzcDrWxxbMA1XyOWpBQWl1KRYJYtyZQPGE0hzJw
dqcY8nSIMXpgsCPYbU0Nu+iXL9mdcLToMswFV/p++EYqJ/3qU/CZ5ROxOUhBGJll
nLy1T1NsIgM8le0wPpXTeRyolm/orjkOwMrr2Rqu0+Pk1jlcAVw1ck/aSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGHxDlj/r2ZxTLw38285uTJfG0lMB8GA1UdIwQY
MBaAFAiCi8fdeEhQuJbtfe2Ug9tfAeBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAt
NmMwNDAzYzlhNDQwLzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAtNmMwNDAzYzlhNDQw
LzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgdmB89/
KXWGVG4uaoDKcIppviG9DcOGzmtMY3Na/IMjKorxpl91jkD/kHZ1iYYwDIo103OH
vlGyc7Z0Pu2CTQRnlbCDHN1wVnGgzC0esPpn7rwthIC8qlamYX3JdOrsuq8/wFf8
jHEZCuPPj/JbNPJbQz/Cm6dtjiCX8r6FOBYowCQnx9lNk1QVJyW5t3i0WnalYi4F
P9v8L1zAbVIG+Lc8JcMkj3lx26WHnNE6uSmQfVeUFwWbl74isdzYU2mzc+Kb9yFM
kyhWv+Lnwxbu/0fxh2EU2Bb6dVjBneixqpCs2WEqLnMI4BbdTLZ5czFLSHEAgIqz
ltjRXCnVIcfIag==
-----END CERTIFICATE-----
Generated at Tue Oct 21 22:59:15 2025 by rpki-client