Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: 5Oo7qHWjhahPyph6XXFMHZHVZwWyQ+euq/HcQ7E9w+8=
Subject key identifier: AE:D0:75:55:8D:8A:5B:9D:1A:48:51:B6:B5:26:A0:17:87:2C:2A:1B
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 0196B8916DA6DBD93C3336B38C552ADCAE05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 037F
Signing time: Sat 10 May 2025 05:01:00 +0000
Manifest this update: Sat 10 May 2025 05:01:00 +0000
Manifest next update: Sun 11 May 2025 05:01:00 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: jipgzA5LUaxzKtmEPWStksLRlGO9u5XiFc++Rw+DnTk=)
2: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (hash: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:6d:a6:db:d9:3c:33:36:b3:8c:55:2a:dc:ae:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: May 10 05:01:00 2025 GMT
Not After : May 11 05:01:00 2025 GMT
Subject: CN=aed075558d8a5b9d1a4851b6b526a017872c2a1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:ab:88:fa:ba:2a:a9:72:b5:e2:1f:2e:2a:
17:7c:89:14:75:ad:e6:82:91:f4:7b:56:1f:de:34:
bc:5a:44:7f:97:dc:df:e5:1f:9e:fb:bc:2c:8e:04:
9e:ce:a3:5f:a0:c8:c9:16:06:d2:c5:33:37:8b:d9:
28:1e:9d:6b:a2:88:b9:99:35:58:12:17:03:af:2a:
56:97:b2:93:15:59:97:27:d7:03:0b:6f:d4:0e:58:
8b:77:d0:33:81:ab:0c:4d:41:e1:d4:e5:d2:da:e9:
60:62:96:f5:4f:cb:f0:0f:d3:61:9c:94:a1:36:03:
00:b8:ce:ad:9a:c3:a8:53:f1:25:90:13:cf:ca:e2:
4d:fc:de:49:14:2f:e7:d0:8d:3d:66:60:02:4e:d7:
1c:c3:ff:a2:e7:00:6a:d4:b0:3a:9a:64:e4:38:35:
85:cb:ed:8c:74:26:77:32:44:b0:18:b3:b2:01:56:
0f:b3:fc:a6:f1:fe:14:bf:25:7a:a6:81:0b:b9:f2:
0f:45:3d:2d:f2:f3:d4:8f:c0:d9:57:63:f8:a2:11:
24:e9:f6:fe:96:a4:ca:6e:7f:50:07:0b:f5:0c:b6:
f1:1d:6a:33:d8:3f:8e:6f:de:e8:82:4f:ec:bb:94:
c6:af:2a:a7:8c:13:a7:6c:19:e0:89:44:da:ee:67:
2f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D0:75:55:8D:8A:5B:9D:1A:48:51:B6:B5:26:A0:17:87:2C:2A:1B
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:99:93:62:e6:7f:59:3e:9e:c3:17:22:bc:b9:5a:af:5f:e3:
3b:2b:e4:2b:3f:ba:92:d4:46:ea:a7:8e:00:e7:2b:0e:9c:62:
28:1e:ba:b8:46:73:db:55:d9:88:5c:9a:45:fb:d7:89:33:46:
b4:a0:1f:cc:dd:a4:47:25:a3:0c:6a:6e:e3:c2:74:8e:8b:72:
04:bd:0c:be:ef:51:a5:b9:75:5f:c3:b2:72:b2:43:19:31:9c:
9f:21:37:64:84:15:b8:2d:34:45:12:80:3b:94:da:5c:71:33:
71:63:d6:85:3b:cf:f0:e6:80:69:5e:cb:ba:8c:55:17:bc:68:
9d:69:1d:cf:13:6c:9d:e3:9b:49:0b:f6:d6:28:14:db:5d:fd:
01:82:79:35:ba:4a:76:5f:46:7b:ec:09:e4:37:7f:48:74:6f:
ba:65:52:d5:80:aa:68:38:73:d3:3e:42:b4:dc:59:9d:89:94:
3f:12:0c:0b:b9:eb:63:eb:fa:39:5b:66:88:72:cb:c0:1b:ac:
e7:ea:2a:27:7b:cd:da:3e:4b:33:6a:64:9d:3d:07:49:a8:50:
eb:97:57:e6:26:9c:2f:8b:e7:21:a7:ba:3b:ea:4c:44:51:55:
1b:34:dc:d0:5f:10:5d:e5:1b:12:84:2d:ee:68:d5:8d:81:f0:
5a:87:fd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:48:29 2025 by rpki-client