Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: /fGXRkxH8piVC5z6BYbewrxLThH+gh+BNobaPriipN8=
Subject key identifier: 45:E5:55:D5:61:CA:9F:53:F4:C9:43:56:E5:76:2C:00:70:3F:25:A3
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 0199FAD7AD37EFF81DAF671B4EF2F3EF0CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 052F
Signing time: Sun 19 Oct 2025 05:01:02 +0000
Manifest this update: Sun 19 Oct 2025 05:01:02 +0000
Manifest next update: Mon 20 Oct 2025 05:01:02 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: HOxYU3mJMCGPsdJ3UXDq2oJ/LUnEGhioxPIzZlmps4I=)
2: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (hash: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ad:37:ef:f8:1d:af:67:1b:4e:f2:f3:ef:0c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Oct 19 05:01:02 2025 GMT
Not After : Oct 20 05:01:02 2025 GMT
Subject: CN=45e555d561ca9f53f4c94356e5762c00703f25a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:f2:ad:e3:0d:f7:fb:b0:2a:44:86:6f:e8:
c1:46:9a:a9:0e:d6:51:c8:c8:96:1a:6a:d1:a7:42:
f4:37:97:36:65:57:88:73:a2:cd:3b:15:16:3f:86:
17:49:70:91:a2:e8:a5:93:39:84:ec:44:ff:9a:60:
03:68:58:8d:30:94:9b:64:5e:65:29:f1:59:66:96:
0b:f7:95:f1:42:d1:4f:19:ae:a2:4e:3f:16:51:e7:
58:fc:52:dc:6c:80:ca:6e:fb:d4:1d:e3:ac:0f:fe:
53:be:1b:f2:05:fd:dc:38:99:ae:fb:e1:e1:b4:d7:
25:9b:c7:80:97:80:f6:68:ce:16:dd:39:bb:c7:df:
74:cd:47:57:f2:db:b7:cd:b6:40:8e:42:ea:b3:0a:
ff:7b:10:42:3a:e5:a3:87:2a:cd:86:9f:40:19:de:
50:73:ef:8a:97:40:b7:f7:57:c1:56:04:7b:24:fa:
b6:a8:4b:29:78:0d:fe:f6:eb:0d:27:fa:34:46:9a:
ea:1b:05:01:29:e7:65:a8:3a:ff:13:b5:21:65:1e:
31:49:0d:a6:26:e0:6c:87:df:0a:d2:4b:fa:92:10:
60:b6:a3:5d:15:d0:b1:cd:ab:6d:d3:9e:9d:3b:24:
bc:3d:35:69:52:c4:a8:2e:ad:29:bc:7c:ff:1e:3a:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E5:55:D5:61:CA:9F:53:F4:C9:43:56:E5:76:2C:00:70:3F:25:A3
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:51:b6:4b:31:a9:c9:5e:49:3b:82:f2:0a:70:95:22:dc:30:
e5:97:6d:2a:bf:82:95:aa:ce:5f:a4:bf:a9:60:9c:aa:42:47:
ac:30:eb:27:ae:4e:d0:a9:99:9e:dc:f2:c6:11:19:fc:59:04:
5d:17:dc:5a:3c:ad:70:97:08:3f:a7:dc:c9:21:55:f9:48:2f:
25:03:2a:ae:27:a1:1d:05:b0:7d:36:d6:63:aa:b0:40:b6:da:
30:6f:8b:e5:6b:2f:de:c0:41:6a:96:d1:0f:50:bb:ce:46:33:
b9:5f:ee:4c:c9:92:33:b2:bb:35:ac:a2:23:ce:07:84:bc:44:
33:ea:d1:57:7c:d6:95:51:26:bf:57:d9:bf:60:1e:cf:9e:01:
b3:a2:7b:80:b8:12:38:b7:33:af:bd:e0:57:5b:bf:28:1e:f2:
dd:08:57:72:65:b7:93:dd:29:09:74:40:32:de:77:0d:3b:b9:
6e:37:32:4c:2e:63:67:ce:d8:5a:5c:e8:58:45:de:88:15:67:
7c:f9:03:bc:81:6f:ad:29:fc:62:0d:91:eb:5f:9c:4a:bc:b2:
cf:d8:b1:a1:89:17:c5:0b:73:15:e2:df:5f:7c:d6:22:d7:fb:
76:18:36:02:19:91:fd:eb:82:cd:b6:47:51:28:75:75:1b:d6:
49:83:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:00 2025 by rpki-client