
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: X39CTAOMImWIunccOY1TqYCz8rnbc2tUw1NcsuO52nk=
Subject key identifier: DD:A2:D8:D2:56:DD:E7:28:20:54:DC:BD:E4:2F:4F:13:98:96:64:E4
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 01987E65BC5B398E06F98EDDD93DCC2020E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 046A
Signing time: Wed 06 Aug 2025 08:00:53 +0000
Manifest this update: Wed 06 Aug 2025 08:00:53 +0000
Manifest next update: Thu 07 Aug 2025 08:00:53 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: HYRyiHXI86M+ydQp4wWOn+9643w6Qnaw3ha+CYPvW9o=)
2: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (hash: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:bc:5b:39:8e:06:f9:8e:dd:d9:3d:cc:20:20:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Aug 6 08:00:53 2025 GMT
Not After : Aug 7 08:00:53 2025 GMT
Subject: CN=dda2d8d256dde7282054dcbde42f4f13989664e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:40:3d:fe:de:5a:cc:47:05:f8:f9:17:e7:
b8:c9:04:9c:5d:4f:6e:88:e8:8f:a1:69:7f:a7:e6:
97:ce:e5:61:30:ba:42:1a:a5:ba:c7:bf:cb:68:61:
4f:d9:be:cb:c8:3e:eb:65:43:9c:cb:c8:39:0b:77:
d4:20:fc:8e:46:bb:ba:93:10:74:9a:d9:87:0f:4a:
d0:32:19:ad:2b:bf:e5:4c:c3:d7:0a:b1:43:84:af:
b1:fd:fa:95:d3:d1:9f:16:19:86:34:1c:b3:8e:35:
d8:b1:f4:5d:8d:ae:12:04:4a:c1:93:b3:1d:72:06:
6b:3e:9b:46:6a:0c:76:98:26:56:c6:bb:3e:da:19:
19:87:05:d7:aa:ae:82:ec:76:52:c4:ab:33:48:15:
92:6e:54:f2:a6:9a:09:18:64:72:83:6a:68:80:9d:
a8:98:4c:fb:fb:84:61:2a:dd:4a:dd:80:64:f3:4c:
be:77:ab:8f:9e:ae:e9:e9:6d:4c:6d:12:37:46:58:
e0:2f:af:13:31:78:10:c4:12:8a:da:6a:af:fb:84:
a5:f3:78:5c:61:41:00:3e:e9:d8:22:20:ef:d7:e5:
d2:04:1e:f8:ee:18:b9:fe:54:78:97:de:4b:83:04:
1c:24:69:6f:2d:20:f5:f2:e0:c2:0b:77:38:b2:98:
fd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A2:D8:D2:56:DD:E7:28:20:54:DC:BD:E4:2F:4F:13:98:96:64:E4
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:75:af:ff:f5:8c:a3:dc:ce:33:e5:31:25:ad:ee:24:eb:19:
96:a8:cd:a8:e5:4e:8f:e5:e8:2f:55:d8:15:fc:db:eb:08:09:
1d:69:0e:7c:1e:46:86:b2:3a:9e:17:7d:0f:36:90:46:c9:ef:
33:c6:1b:97:41:da:6a:6f:ad:70:3b:85:8c:12:25:be:b0:31:
1b:15:49:0e:cb:61:2d:20:e6:73:55:22:b4:75:52:0d:4c:1f:
e9:7c:ff:c5:3d:49:4f:b6:37:72:b1:50:62:59:06:a2:9d:54:
35:2c:df:82:b6:0c:64:d8:ab:88:35:9d:13:a2:ca:d5:bb:e0:
76:08:88:21:e2:57:77:77:6f:0c:e2:67:eb:4b:ad:b6:09:da:
76:c9:c4:5a:30:da:17:47:ac:1d:84:cc:1f:49:96:0f:19:65:
88:a7:f6:5d:20:cc:79:18:2f:40:2a:0a:93:de:31:6e:a4:a4:
70:c7:a1:c9:a5:a2:ac:6f:e0:a2:cd:f1:9f:46:53:dd:50:20:
59:86:5b:3b:b5:b9:6f:c0:df:b6:aa:71:de:c2:0f:08:e6:5c:
58:e4:f0:9e:d4:e3:c1:0c:d8:96:f5:26:77:72:dc:3d:b4:bb:
e2:7f:05:9f:48:ed:49:6a:56:17:f7:b4:71:15:d2:c5:0b:b6:
cf:8a:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:11:50 2025 by rpki-client