Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: usCEBbYoQoHSdZFdFQIS+WY1JWnaYWa0ucKkL/aT/fU=
Subject key identifier: 85:2F:6D:29:19:8E:61:29:18:39:67:1C:E3:9E:9A:77:27:98:58:85
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 019A51BEB970D800E91EC2AF4A52B4370666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 055C
Signing time: Wed 05 Nov 2025 02:00:44 +0000
Manifest this update: Wed 05 Nov 2025 02:00:44 +0000
Manifest next update: Thu 06 Nov 2025 02:00:44 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: wZWeaqb+qG+i2wWs+95FNduzJIk9kdi9jXrMlG4ZXY0=)
2: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (hash: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:b9:70:d8:00:e9:1e:c2:af:4a:52:b4:37:06:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Nov 5 02:00:44 2025 GMT
Not After : Nov 6 02:00:44 2025 GMT
Subject: CN=852f6d29198e61291839671ce39e9a7727985885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:db:9d:ad:95:97:51:9c:7b:c4:57:64:1c:d5:
4a:7d:80:11:64:73:8d:d2:df:d2:86:ac:9e:3c:16:
17:fb:6d:31:2e:99:81:6d:62:db:99:64:f7:5d:5a:
42:b6:7f:58:df:fd:ba:e1:86:ef:fb:71:49:a7:9b:
89:f5:d2:6a:10:67:ba:f0:7f:09:8d:f9:39:0f:b6:
f0:b1:7e:3b:92:63:e4:84:35:f9:72:e4:45:1d:b8:
c3:8d:bd:61:77:2a:00:78:11:9c:52:e7:0e:1d:40:
78:35:28:15:ce:18:fc:f3:e8:4b:bf:09:25:39:f4:
86:b7:7b:72:bd:b3:4a:3d:9f:96:d6:c1:89:39:54:
92:b0:3a:f9:2f:8e:bf:46:2d:47:7b:8e:5d:95:26:
f5:cf:90:08:e0:9f:d1:27:22:b6:ad:f9:06:19:c0:
4d:1f:82:ef:2d:c3:9d:38:ec:02:66:aa:9b:26:af:
f5:68:d2:93:d2:c9:35:3b:1d:3f:d8:95:0a:89:c2:
92:b3:5a:d0:94:e8:88:c5:93:b4:17:98:ee:06:9e:
32:eb:56:aa:a3:1b:ee:bd:59:ef:86:d4:da:5f:48:
62:7d:c7:29:ec:61:68:84:6c:a1:30:ba:b8:f2:97:
e3:25:af:ad:af:74:66:e7:10:15:5b:c5:4c:4e:8d:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2F:6D:29:19:8E:61:29:18:39:67:1C:E3:9E:9A:77:27:98:58:85
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ca:86:2b:dc:3d:52:41:ec:d7:4d:72:37:cc:a4:14:40:6c:
33:5e:c2:30:db:20:08:2b:d3:7f:b0:61:04:e0:b0:e5:d6:80:
40:e4:38:86:5f:eb:6e:34:f9:51:75:7e:c2:fa:93:92:26:da:
04:8a:8f:ed:64:77:e5:10:58:5c:55:dd:63:e7:d4:88:49:ce:
6e:79:da:ec:c6:12:42:35:65:0f:93:4e:df:b2:69:b1:61:f0:
2c:8e:34:f4:a4:62:fc:73:d2:97:3c:e8:a0:48:37:57:21:a1:
63:fc:d1:06:f3:ef:5b:c8:77:9d:ce:c8:42:78:ca:8c:a5:4e:
53:2c:3e:c5:b3:e3:0d:ce:07:56:cf:4b:91:ee:21:ae:66:2a:
86:25:9d:61:68:16:4b:f4:df:e3:4c:b5:9e:e7:68:73:b3:9c:
83:22:30:05:c1:9f:d6:39:ec:73:44:ec:fd:c8:27:fc:e5:d3:
fb:c6:20:b9:93:c3:cd:43:bd:2a:35:61:7c:5e:44:62:59:90:
1c:df:98:a1:c8:bb:45:59:b0:2b:84:48:28:bd:30:7a:57:57:
24:9e:d9:8e:f1:83:23:bd:9c:d3:c7:04:b1:a3:0f:15:6e:11:
6e:4a:c5:44:15:3d:2c:3a:d3:46:5e:09:a5:23:b0:69:dc:ba:
58:dc:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:17:41 2025 by rpki-client