
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: 0/KYjhkt/lvbFb1AB/XQZmtLtuJQiu6Daq+2EMe/3Co=
Subject key identifier: FB:5D:50:4B:32:33:42:FE:86:FB:E6:89:AA:31:94:1A:47:44:C9:49
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 0199FFC83173CCFBDB0B4F61E4BC16152D15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 04:02:13 +0000
Manifest this update: Mon 20 Oct 2025 04:02:13 +0000
Manifest next update: Tue 21 Oct 2025 04:02:13 +0000
Files and hashes: 1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: RjBrAA1g3ycrIvl4TAfofgwz7zIRtsXKOXIJb6UTF+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:31:73:cc:fb:db:0b:4f:61:e4:bc:16:15:2d:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Oct 20 04:02:13 2025 GMT
Not After : Oct 21 04:02:13 2025 GMT
Subject: CN=fb5d504b323342fe86fbe689aa31941a4744c949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9b:4d:92:bf:f3:d5:6e:f1:33:45:86:aa:a9:
70:8c:2e:ef:46:c2:81:5b:7f:f1:ba:9c:88:d4:9f:
3d:56:27:64:36:21:6a:54:20:29:83:e6:46:cd:1d:
17:68:18:7f:23:8d:c0:60:f8:f0:16:87:df:33:66:
6d:03:73:18:11:d3:b4:95:45:e1:54:57:c6:e6:ee:
db:a1:25:56:d7:42:08:5e:bf:32:58:e1:48:36:d0:
aa:e8:d3:45:46:38:e3:b9:4c:d9:0d:87:f4:5c:60:
dd:fa:c6:07:d8:df:17:24:2d:e0:ff:5f:d7:56:eb:
06:30:b1:04:59:cc:a1:1c:8e:f4:d9:d3:e0:86:13:
12:d8:db:07:e2:64:4c:fd:dc:97:58:29:df:05:b0:
fb:29:b2:14:ff:d0:a3:c4:6c:81:5b:73:5f:97:fa:
f1:40:57:4d:72:16:aa:37:95:0a:a9:0e:7a:a3:24:
16:0c:36:11:78:e3:e8:af:e8:34:97:21:8a:25:4a:
3d:72:46:fa:c7:98:24:3b:79:67:61:a1:bb:20:dd:
4c:94:20:c3:49:6c:30:de:a5:58:f6:a4:39:4b:a5:
f8:21:62:b3:5f:45:08:5a:09:f5:6a:8e:07:2d:07:
07:81:7b:0f:d6:03:d1:c6:74:25:33:68:c8:ac:20:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5D:50:4B:32:33:42:FE:86:FB:E6:89:AA:31:94:1A:47:44:C9:49
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:38:93:58:d2:ba:4f:54:38:f2:e7:42:22:54:4e:15:2b:1e:
5f:91:9f:21:9f:64:e2:c9:62:fa:b0:a6:d5:84:c2:18:eb:24:
ab:63:dd:b8:48:23:37:0d:f6:5a:23:47:7b:f9:57:1b:f8:04:
3a:2a:3b:7c:45:ce:56:b5:f3:db:c8:d2:23:b8:e2:ca:ac:80:
84:03:80:0f:33:f1:db:e8:31:09:9c:18:9b:68:4d:dd:fe:00:
c0:85:cc:77:93:93:62:32:fd:19:a2:5a:b7:1b:77:3a:2d:d8:
1b:94:0e:fe:08:35:f1:b6:9a:2a:20:8f:6d:10:6b:eb:dc:1a:
8a:d8:17:57:2d:2f:a9:86:f6:da:b8:07:2f:92:fc:07:ba:c2:
c4:2b:b7:57:2a:0b:66:6d:29:6d:9c:6b:a5:f8:8b:2c:31:ce:
46:4c:a7:83:7c:03:d9:ee:19:78:ee:1a:ba:df:f3:10:cf:18:
a0:52:7c:18:10:8c:eb:68:ec:9a:15:62:8f:55:24:c8:a9:44:
3b:c9:6d:92:99:3a:71:98:69:f3:dd:d4:54:9d:1a:45:91:5a:
d9:a8:32:d4:be:2e:09:7b:43:a4:f8:10:81:61:38:a5:2d:ce:
b2:71:e3:2b:ae:47:96:bf:df:ad:4f:2c:eb:dd:49:25:52:26:
c0:0d:3c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:11:28 2025 by rpki-client