Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: noSRyKBCZptmd4kNoQxn3ZjxpsKxv4elPg/LIIY0vqc=
Subject key identifier: A5:CB:84:00:0C:0B:8A:24:28:ED:16:5B:64:1F:60:24:27:20:76:95
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 019873E3A3E24D4A5BDD1C9DB5170113D719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 1613
Signing time: Mon 04 Aug 2025 07:02:35 +0000
Manifest this update: Mon 04 Aug 2025 07:02:35 +0000
Manifest next update: Tue 05 Aug 2025 07:02:35 +0000
Files and hashes: 1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: f+8kz/2/Y+8/DAHFl8DTJuA3vp1ySBFvdnJR1VOYkA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:a3:e2:4d:4a:5b:dd:1c:9d:b5:17:01:13:d7:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Aug 4 07:02:35 2025 GMT
Not After : Aug 5 07:02:35 2025 GMT
Subject: CN=a5cb84000c0b8a2428ed165b641f602427207695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:b8:00:07:be:a4:38:53:76:f2:37:59:9d:
ef:e2:6e:2c:45:6c:79:e7:4b:3d:0c:99:e6:f6:1f:
1a:ad:f8:ef:a9:af:99:5c:14:31:cd:70:76:e8:1e:
4e:0d:e9:c2:96:3d:d8:09:df:4d:65:ff:76:a9:f3:
ac:c9:14:07:58:30:79:e7:b9:94:eb:54:c2:af:bb:
6b:e9:bd:30:4f:20:a6:56:e9:db:7a:8f:10:ef:29:
a7:6d:c5:38:4c:fb:2a:d8:4d:a0:f4:a8:1f:04:b2:
9e:82:db:bc:ad:1e:e7:71:16:f4:0f:46:ab:67:2b:
6b:c7:68:a2:c2:24:ea:b0:3a:c3:9f:87:b3:df:05:
f3:8d:15:66:7e:bb:27:fb:90:41:2b:c8:63:03:e4:
12:52:28:86:63:5a:d9:f0:47:08:c0:9c:dc:54:4f:
5a:c6:0f:15:0b:cc:db:01:49:69:17:01:bd:57:9a:
a6:85:93:46:be:03:d8:a2:8c:d7:86:72:e7:61:52:
1c:40:62:d0:28:af:2c:f6:ab:53:d8:13:b3:a9:03:
7b:15:2f:9d:14:84:c2:a4:43:2b:72:a1:d5:09:e5:
49:1f:73:a1:71:af:0c:8c:a3:bb:ee:9e:7c:fb:07:
cc:1e:ac:f8:eb:06:9b:7b:ab:2d:45:dd:71:93:e9:
75:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CB:84:00:0C:0B:8A:24:28:ED:16:5B:64:1F:60:24:27:20:76:95
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:32:c6:82:58:e3:26:56:e1:f8:1f:73:b5:10:f2:33:d5:20:
bc:2f:55:44:38:7a:25:81:da:c7:9f:36:79:c6:3e:20:03:52:
35:f1:09:d4:7b:ea:ee:d8:ef:44:f2:86:db:04:f1:02:1b:fc:
c1:e1:f8:d1:d8:23:a9:93:48:4a:68:d5:fd:1e:bb:aa:e2:38:
18:a7:ec:8b:5f:88:cb:d3:76:aa:ff:ff:8f:e7:0f:47:ec:0b:
58:56:e5:4f:69:31:d5:ae:76:d3:06:84:e2:2a:55:79:59:8a:
b4:d1:91:73:e6:df:6a:0e:18:03:5f:56:6b:43:a0:1f:cf:2a:
cc:a9:70:d1:20:78:f7:dd:22:b5:9b:9d:4b:25:49:2d:fe:26:
21:8d:7c:b2:a6:74:35:d0:c1:6a:a2:30:df:a3:81:95:ba:84:
69:8d:0f:d5:f5:3f:0c:e8:83:83:63:02:cb:70:d4:80:44:46:
a8:63:40:c9:05:92:d0:85:e2:48:64:3d:15:32:f8:f7:a0:ba:
f9:06:05:fc:9b:45:0f:fa:30:cd:f0:41:66:a5:d0:f1:92:30:
cc:02:b6:87:94:a4:2e:fd:55:dc:33:84:cd:a9:ec:6c:4d:cc:
77:f4:07:fc:a1:54:88:cc:c3:3e:35:52:f4:45:85:0d:97:e6:
65:6a:ac:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:00 2025 by rpki-client