Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json)
Hash identifier: YDvBVJkO7Qm/JTmgj22v/4vZNrfc1SH+dJ6UY1Mm9/A=
Subject key identifier: 95:51:C7:4D:4F:7C:B5:B3:D9:DA:D1:80:08:0F:48:8F:52:5A:D2:5E
Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Certificate serial: 019A4EF41FD4713487AD7C83598A52472FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:13 +0000
Manifest this update: Tue 04 Nov 2025 13:00:13 +0000
Manifest next update: Wed 05 Nov 2025 13:00:13 +0000
Files and hashes: 1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: D6LnVSbjzaCaz6txPe9wkdUOL5N47APOPdJD+kJhUEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1f:d4:71:34:87:ad:7c:83:59:8a:52:47:2f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754
Validity
Not Before: Nov 4 13:00:13 2025 GMT
Not After : Nov 5 13:00:13 2025 GMT
Subject: CN=9551c74d4f7cb5b3d9dad180080f488f525ad25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:61:d6:4c:d0:c1:18:7d:fe:95:06:2b:5d:
d1:b9:37:02:cd:32:a7:5d:c2:ae:56:e7:31:49:00:
d7:76:c5:3a:05:72:fd:e7:8b:b7:6e:33:21:5f:2d:
2f:1f:c0:53:63:97:63:59:6e:80:71:94:5f:ee:af:
bc:36:7c:cf:66:2a:67:1f:8f:c6:cd:a2:37:bd:5b:
4c:be:ca:f1:ab:02:09:ea:d1:ce:36:5a:9a:f9:07:
78:a9:2f:df:27:99:0f:ea:44:2c:83:e9:53:c8:06:
83:81:67:b2:50:0b:78:13:50:2d:e8:8d:76:55:cd:
b0:8e:b6:5d:e0:07:b4:53:c7:da:aa:2d:33:a9:db:
39:dc:d3:a2:ee:d2:08:17:d4:4a:05:e2:fe:42:da:
9a:b1:d8:21:f7:33:de:f5:18:a0:72:ad:08:1e:c5:
59:be:bc:0f:3e:19:4a:59:7e:a5:57:de:c0:59:98:
69:1c:c3:39:a1:6e:11:44:8b:eb:14:1b:f6:fe:df:
15:e8:82:ab:a3:07:b3:f5:a1:0f:35:32:5b:88:1b:
82:b7:a9:b7:48:1c:bd:31:92:9f:8c:cd:7b:88:3f:
ef:3e:ec:8d:78:18:d2:01:0c:c4:3a:0b:40:96:73:
7b:12:16:ac:79:77:1e:e8:80:27:97:30:5f:7c:9d:
98:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:51:C7:4D:4F:7C:B5:B3:D9:DA:D1:80:08:0F:48:8F:52:5A:D2:5E
X509v3 Authority Key Identifier:
keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d6:e6:7a:6f:2c:5c:ae:91:21:8f:8f:30:87:0a:9b:0d:de:
d5:c9:c0:07:53:90:a8:95:8c:ad:96:1b:cd:1e:32:a2:70:a1:
44:c0:51:9f:8f:f8:ec:90:73:32:30:e0:b2:5b:c4:c9:eb:55:
52:58:85:92:17:ae:af:ec:ad:9d:e6:4c:6c:af:59:a0:5d:34:
60:ab:9d:fe:63:11:ad:d3:f3:bc:e1:ab:f9:93:a2:5e:5e:59:
59:23:ac:2a:aa:36:c2:83:1b:7b:bb:fd:74:d4:a7:6a:38:4c:
82:3c:83:3a:56:d0:42:5e:fe:51:ca:eb:d9:10:f7:a5:96:a4:
73:90:cf:b9:10:06:82:00:c3:6d:6c:43:96:b0:14:02:1b:cb:
45:13:72:e8:00:c5:07:db:62:2d:11:4a:fc:63:00:4b:b1:4b:
58:b1:99:99:5d:2f:7c:6d:ed:c6:81:13:c2:dc:98:f0:50:67:
38:21:e5:32:ce:c2:00:c5:95:ed:95:8f:9b:f7:d0:0f:8f:4e:
71:d8:d3:09:f9:a6:a2:5b:e8:f2:5f:09:00:40:4b:c0:8a:bd:
90:25:e6:53:bf:7d:b8:42:d3:28:e0:21:e8:e3:24:19:0c:72:
6b:12:e5:fe:d0:81:8c:ac:b6:dd:01:af:d5:52:2f:f9:ec:83:
5a:47:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:59 2025 by rpki-client