Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: RNivTjhvg8gUwNTNr0IK7U+VZ6Ae/XyzT43mxVeMQ24=
Subject key identifier: 9C:81:5D:15:79:E6:3B:8B:FF:46:FE:F3:F8:83:39:49:F8:D7:EF:53
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 0198D84FD1BE43F90F4CCF07ADD66F4C864F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 19:02:46 +0000
Manifest this update: Sat 23 Aug 2025 19:02:46 +0000
Manifest next update: Sun 24 Aug 2025 19:02:46 +0000
Files and hashes: 1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: nQ4nE1h1mn/kgYG4efXxOiW0Nvv3XJbQ2MntTOexPUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:d1:be:43:f9:0f:4c:cf:07:ad:d6:6f:4c:86:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Aug 23 19:02:46 2025 GMT
Not After : Aug 24 19:02:46 2025 GMT
Subject: CN=9c815d1579e63b8bff46fef3f8833949f8d7ef53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:04:22:09:5c:9d:41:19:65:1f:19:62:c6:
14:a1:0d:f8:90:70:a5:ad:c8:92:63:2a:bc:0c:73:
a5:f8:fb:b9:4c:b4:13:d1:fd:77:bf:2e:84:eb:cd:
79:96:98:a2:e9:26:8e:62:93:82:4e:7e:ad:13:35:
43:78:a7:c1:ef:6a:8c:ec:9d:9e:0e:de:e2:8f:9c:
21:c8:30:c1:a4:3e:da:a3:39:51:4d:4e:40:ad:3f:
28:1c:36:4d:3f:d5:05:83:5f:52:d6:6f:82:ee:52:
1e:d4:b4:15:a0:72:42:a0:09:35:cc:44:04:53:3c:
bd:70:f6:f0:36:d7:d3:0e:5e:7c:09:ce:05:7d:00:
b1:fa:b0:ae:1d:3b:fb:87:fe:ad:66:ca:5a:8a:3b:
81:f5:a6:d9:bc:89:bc:83:5d:6d:6b:a8:65:4c:3e:
9e:84:34:8e:18:dd:ae:3f:b5:76:df:94:40:63:04:
76:78:00:c8:33:bb:56:23:a3:72:ac:e9:17:90:c0:
0d:02:33:72:8b:d5:02:f2:df:78:3c:dc:96:12:9b:
06:d3:91:c6:2d:88:81:bc:24:b1:82:0a:16:45:33:
29:60:ac:99:d9:8b:3f:70:f9:28:0c:20:7d:b4:ab:
21:3f:b1:fc:84:45:6d:3e:07:24:6d:da:d0:49:c7:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:81:5D:15:79:E6:3B:8B:FF:46:FE:F3:F8:83:39:49:F8:D7:EF:53
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:6f:d3:5d:95:8f:31:1b:7a:aa:1d:94:89:18:ac:06:bd:31:
08:38:69:19:45:60:0f:d2:5f:69:93:38:d2:4d:55:2f:12:82:
26:78:30:1b:43:64:3f:45:a4:ab:6e:af:e7:16:9d:ff:32:5e:
7a:36:66:9c:47:43:ab:15:a8:2f:5f:38:7b:3c:92:ee:c5:44:
66:ba:7c:24:b5:35:78:f6:f8:04:ba:67:22:43:67:a3:b5:b2:
2d:e6:5f:dd:c3:4d:8d:fc:0e:a8:44:80:87:89:5a:b0:b8:31:
d7:88:5e:0d:0e:a2:0f:c6:6d:5d:17:be:f7:e2:57:c0:55:84:
46:a9:3c:87:02:c8:01:08:8c:36:40:81:c7:e1:10:90:ee:8f:
1b:5b:6c:14:5e:13:fd:d8:95:d5:b0:ab:28:7c:09:69:00:ac:
91:f6:df:67:14:ce:bc:e1:ec:43:da:c1:1c:41:a7:b1:80:14:
ca:8c:b8:b9:7c:9d:c1:a3:95:97:72:81:47:c2:02:9e:9b:85:
a5:8a:ee:3b:11:a5:ec:5c:65:2e:b2:2c:a7:92:1b:bc:53:26:
11:af:57:ff:4d:b9:ab:e8:de:34:21:99:c4:07:81:75:8c:cd:
fe:4f:71:c6:b1:8f:e4:5f:0a:20:e0:05:4a:6c:4e:fa:35:23:
21:ce:98:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT9G+Q/kPTM8HrdZvTIZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMjcyNTNjODE1YzkxYzE0YTYwYmZhMjQ1NTFjZjQ5ZDM1
ZTQ3NTQwHhcNMjUwODIzMTkwMjQ2WhcNMjUwODI0MTkwMjQ2WjAzMTEwLwYDVQQD
Eyg5YzgxNWQxNTc5ZTYzYjhiZmY0NmZlZjNmODgzMzk0OWY4ZDdlZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqQEIglcnUEZZR8ZYsYUoQ34kHCl
rciSYyq8DHOl+Pu5TLQT0f13vy6E6815lpii6SaOYpOCTn6tEzVDeKfB72qM7J2e
Dt7ij5whyDDBpD7aozlRTU5ArT8oHDZNP9UFg19S1m+C7lIe1LQVoHJCoAk1zEQE
Uzy9cPbwNtfTDl58Cc4FfQCx+rCuHTv7h/6tZspaijuB9abZvIm8g11ta6hlTD6e
hDSOGN2uP7V235RAYwR2eADIM7tWI6NyrOkXkMANAjNyi9UC8t94PNyWEpsG05HG
LYiBvCSxggoWRTMpYKyZ2Ys/cPkoDCB9tKshP7H8hEVtPgckbdrQSccwCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyBXRV55juL/0b+8/iDOUn41+9TMB8GA1UdIwQY
MBaAFAsnJTyBXJHBSmC/okVRz0nTXkdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYt
ZWZjN2JkMmY1ZmZjLzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYtZWZjN2JkMmY1ZmZj
LzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfG/TXZWP
MRt6qh2UiRisBr0xCDhpGUVgD9JfaZM40k1VLxKCJngwG0NkP0Wkq26v5xad/zJe
ejZmnEdDqxWoL184ezyS7sVEZrp8JLU1ePb4BLpnIkNno7WyLeZf3cNNjfwOqESA
h4lasLgx14heDQ6iD8ZtXRe+9+JXwFWERqk8hwLIAQiMNkCBx+EQkO6PG1tsFF4T
/diV1bCrKHwJaQCskfbfZxTOvOHsQ9rBHEGnsYAUyoy4uXydwaOVl3KBR8ICnpuF
pYruOxGl7FxlLrIsp5IbvFMmEa9X/025q+jeNCGZxAeBdYzN/k9xxrGP5F8KIOAF
SmxO+jUjIc6YVA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:21:43 2025 by rpki-client