Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: H++qAE+Z18K2kKFBvOKjqdOS92PZCLO1gGym+AoHOMg=
Subject key identifier: 96:47:2C:AF:06:BB:61:9C:B2:FA:31:27:08:C3:6D:12:33:97:28:74
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 0197B6A0CA3311B65801416417E13A4C38CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:20 +0000
Manifest this update: Sat 28 Jun 2025 13:01:20 +0000
Manifest next update: Sun 29 Jun 2025 13:01:20 +0000
Files and hashes: 1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: C9BvQnslkdSeGqTUjQutsXZj/PEsn5IoMyXig92uKHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ca:33:11:b6:58:01:41:64:17:e1:3a:4c:38:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Jun 28 13:01:20 2025 GMT
Not After : Jun 29 13:01:20 2025 GMT
Subject: CN=96472caf06bb619cb2fa312708c36d1233972874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:e4:e5:43:56:84:12:72:c1:0d:ad:ef:57:
6e:58:13:2b:2c:0c:cb:f9:90:85:5c:1e:8e:02:90:
8a:38:fc:1e:6a:99:ab:fa:65:6e:74:f7:af:4d:9c:
c4:7e:95:e5:50:2e:6f:fd:bb:63:25:00:7d:da:56:
de:b4:9f:2f:3d:ab:23:17:b2:cc:46:8e:be:f0:9e:
61:c7:88:fb:3a:42:45:79:98:6d:3f:77:53:52:0d:
5c:11:ad:ac:66:91:7b:be:05:78:f8:df:6d:d8:97:
ae:93:df:1c:94:ff:7a:ff:31:e8:b1:7f:f8:ec:fa:
e1:b0:d7:6f:7e:c1:a0:04:be:46:ad:db:46:6b:2b:
a9:2b:35:90:ca:64:06:92:09:a0:51:7d:7d:34:d1:
d6:b9:e8:27:d0:e3:53:da:bd:4d:ac:1b:c5:f3:10:
4d:ea:2d:c3:2b:b9:b3:22:e8:14:5f:e0:77:db:ea:
06:95:8d:56:11:58:7a:40:58:f2:c1:f8:b2:da:f1:
d6:cf:ae:79:e4:ce:17:43:3f:1a:bf:82:b8:5c:ba:
e3:cb:6e:58:5b:c8:21:12:22:34:e8:9d:0a:80:cf:
0e:3e:f6:59:01:cd:97:73:0e:0c:23:d3:77:5c:d2:
07:7b:ea:e5:da:00:38:7e:55:b9:69:53:20:dd:70:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:47:2C:AF:06:BB:61:9C:B2:FA:31:27:08:C3:6D:12:33:97:28:74
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:64:7b:c7:8d:e0:0e:b9:ce:58:a0:a6:b6:a2:9e:4f:79:b4:
67:fb:90:62:6b:c5:b1:12:7a:e9:69:1d:51:70:af:09:b1:71:
04:03:2d:37:0e:31:d6:41:96:8d:5f:fc:92:72:54:a6:90:24:
11:02:56:fb:5a:fa:c6:14:0b:77:35:8f:27:30:68:71:9e:b3:
4a:05:3b:31:fc:7a:ce:38:31:47:ec:65:cc:d1:5f:46:1e:2a:
dd:33:a7:e8:cc:b8:6b:46:ac:67:c1:fd:8c:05:cc:22:aa:e7:
70:f5:f7:fc:92:6a:99:04:f5:c7:4a:eb:55:e7:90:b4:b3:05:
e4:a7:58:3c:28:f3:82:9b:a6:42:3d:1a:02:f7:a5:ca:c7:3f:
5e:0c:fc:a6:49:fe:88:5a:6f:d8:9b:34:07:76:58:e0:54:17:
9b:05:ed:89:95:f1:14:18:4f:cf:ff:ed:94:66:e6:da:24:bf:
85:21:82:63:a6:af:27:da:b2:ec:81:e8:56:66:96:24:df:46:
62:87:32:bc:65:62:3b:a7:b2:be:92:f3:97:50:1f:17:00:0c:
92:eb:05:10:ec:da:41:63:28:da:79:da:c0:34:1c:43:2f:c8:
6d:fa:3c:ec:76:58:3c:ee:a8:19:e8:bf:75:86:2a:61:ae:ba:
11:ea:2a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:51 2025 by rpki-client