Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: gx6iWt+7o5XaaJcdTvFtcThJcutnlrq7tuntE9eNscE=
Subject key identifier: 57:EC:0B:E4:82:82:26:28:E8:9F:84:D0:B1:48:95:F6:D0:F8:D4:CC
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 0197B77C79EB12DFDD45E58D859A09351EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 0403
Signing time: Sat 28 Jun 2025 17:01:17 +0000
Manifest this update: Sat 28 Jun 2025 17:01:17 +0000
Manifest next update: Sun 29 Jun 2025 17:01:17 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: tJtSa+0K8919gigWXV460U4wmhGPIds/acOBDqrdmy4=)
2: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (hash: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:79:eb:12:df:dd:45:e5:8d:85:9a:09:35:1e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Jun 28 17:01:17 2025 GMT
Not After : Jun 29 17:01:17 2025 GMT
Subject: CN=57ec0be482822628e89f84d0b14895f6d0f8d4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:58:41:f5:93:a0:bf:74:21:18:c3:5f:e6:6c:
3b:d9:53:d0:db:97:2e:b1:3e:7f:23:95:15:7c:9a:
b4:2f:72:f4:7f:44:fb:22:33:55:3f:5b:7e:7a:d9:
78:f5:b4:c5:12:c0:78:59:f1:25:a9:f0:9c:55:be:
82:54:59:9d:b5:43:15:49:7d:9b:33:a3:38:16:5a:
d7:4e:61:06:6e:c6:23:23:8c:2d:67:e9:a2:32:89:
5e:e9:8b:6a:11:37:8c:b3:3e:6c:de:5b:d1:d8:ea:
82:3d:4b:d1:ad:4c:9a:e9:1d:f4:c4:ce:7d:89:d6:
91:c2:a4:64:29:50:bc:bb:bd:35:be:b0:01:67:b5:
78:dc:c8:f9:aa:40:90:fa:84:d9:1d:80:6b:e7:72:
d5:ad:8f:14:52:0a:0b:48:27:f5:e9:f0:8c:eb:b6:
a6:c2:97:dd:84:a3:c3:08:34:de:7c:0f:b3:5c:64:
af:a6:69:65:eb:c8:55:ff:ac:3e:2a:f8:ef:63:dc:
de:b6:ea:68:4e:82:23:7e:02:de:e8:9a:78:d4:ea:
01:a3:f2:1b:2d:26:dc:49:45:5c:3e:14:e6:07:0d:
ea:bc:0b:07:04:da:ab:5b:77:55:75:a5:e1:b3:99:
92:48:89:30:09:a2:bd:ea:f6:25:80:f7:5d:6e:9c:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EC:0B:E4:82:82:26:28:E8:9F:84:D0:B1:48:95:F6:D0:F8:D4:CC
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bb:a7:78:8e:c6:20:6d:54:fe:fe:ad:83:e3:cf:05:96:d9:
61:1e:48:33:2a:a3:42:cb:ee:3e:c0:95:3e:fb:8e:32:f0:8e:
29:e0:61:a9:e3:cc:16:c4:d9:dc:90:de:fb:c3:9c:dc:d0:89:
93:8a:6a:6a:f9:1e:21:20:86:56:ac:32:95:77:d7:ce:dc:80:
17:b5:55:21:07:18:21:26:cc:18:da:59:f8:3d:31:25:92:3c:
ec:6a:02:01:9f:ee:38:d4:0c:f9:9d:9b:b3:e0:74:1d:1b:c8:
8e:fe:20:eb:df:dd:0a:29:a9:6d:34:bb:72:b9:ee:7b:20:d9:
8c:c0:12:42:8b:9c:27:7b:d8:31:06:f3:b3:42:bc:0e:65:9b:
81:83:ea:2d:87:c7:10:e3:da:00:26:aa:7f:83:cd:d1:34:c9:
39:78:6f:dc:d5:04:8c:5e:92:d3:67:0a:df:a9:25:cf:2e:b4:
65:fa:a8:e2:63:14:17:58:63:9e:22:d9:f5:3f:61:45:df:22:
fa:40:ed:b3:20:1b:ed:d3:b6:20:16:c1:6b:ca:45:ec:e2:5c:
4f:92:b1:bd:bb:d9:1f:e7:fd:80:b2:81:fa:d0:aa:07:3d:99:
b9:c9:89:7f:1d:12:d5:08:fb:ca:68:88:06:78:a7:4f:35:b7:
01:c9:bd:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fHnrEt/dReWNhZoJNR79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODI4YmM3ZGQ3ODQ4NTBiODk2ZWQ3ZGVkOTQ4M2RiNWYw
MWUwNTkwHhcNMjUwNjI4MTcwMTE3WhcNMjUwNjI5MTcwMTE3WjAzMTEwLwYDVQQD
Eyg1N2VjMGJlNDgyODIyNjI4ZTg5Zjg0ZDBiMTQ4OTVmNmQwZjhkNGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlhB9ZOgv3QhGMNf5mw72VPQ25cu
sT5/I5UVfJq0L3L0f0T7IjNVP1t+etl49bTFEsB4WfElqfCcVb6CVFmdtUMVSX2b
M6M4FlrXTmEGbsYjI4wtZ+miMole6YtqETeMsz5s3lvR2OqCPUvRrUya6R30xM59
idaRwqRkKVC8u701vrABZ7V43Mj5qkCQ+oTZHYBr53LVrY8UUgoLSCf16fCM67am
wpfdhKPDCDTefA+zXGSvpmll68hV/6w+KvjvY9zetupoToIjfgLe6Jp41OoBo/Ib
LSbcSUVcPhTmBw3qvAsHBNqrW3dVdaXhs5mSSIkwCaK96vYlgPddbpzWQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfsC+SCgiYo6J+E0LFIlfbQ+NTMMB8GA1UdIwQY
MBaAFAiCi8fdeEhQuJbtfe2Ug9tfAeBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAt
NmMwNDAzYzlhNDQwLzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy84NjY3NTQtZjBlZi00OTAwLThkZDAtNmMwNDAzYzlhNDQw
LzEvQ0lLTHg5MTRTRkM0bHUxOTdaU0QyMThCNEZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLuneI7G
IG1U/v6tg+PPBZbZYR5IMyqjQsvuPsCVPvuOMvCOKeBhqePMFsTZ3JDe+8Oc3NCJ
k4pqavkeISCGVqwylXfXztyAF7VVIQcYISbMGNpZ+D0xJZI87GoCAZ/uONQM+Z2b
s+B0HRvIjv4g69/dCimpbTS7crnueyDZjMASQoucJ3vYMQbzs0K8DmWbgYPqLYfH
EOPaACaqf4PN0TTJOXhv3NUEjF6S02cK36klzy60Zfqo4mMUF1hjniLZ9T9hRd8i
+kDtsyAb7dO2IBbBa8pF7OJcT5KxvbvZH+f9gLKB+tCqBz2ZucmJfx0S1Qj7ymiI
BninTzW3Acm9zQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:26 2025 by rpki-client