Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
File: CIKLx914SFC4lu197ZSD218B4Fk.mft (raw, json)
Hash identifier: 83jEQUKcBGtEE2+Tdd722feRpSqDTrYNzP+8JlEt1JM=
Subject key identifier: 3C:E8:21:1B:A8:A8:82:D3:58:35:94:82:80:FB:5D:9B:59:34:21:E2
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 01976C2B4DCA7E8B53D755ADAA6CAB44C5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
Manifest number: 03DC
Signing time: Sat 14 Jun 2025 02:01:06 +0000
Manifest this update: Sat 14 Jun 2025 02:01:06 +0000
Manifest next update: Sun 15 Jun 2025 02:01:06 +0000
Files and hashes: 1: CIKLx914SFC4lu197ZSD218B4Fk.crl (hash: 4tzKJ3d5WsLFP5MYjkL5H778Je5u9DZ0loqXV+9yPNY=)
2: V0Wj0jhw0RxatZH_nx8jTrLFEcc.roa (hash: mmVGDQsdur6eI4Kol0nAjQzRZYdIuybWdILnc/qmeGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:4d:ca:7e:8b:53:d7:55:ad:aa:6c:ab:44:c5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Jun 14 02:01:06 2025 GMT
Not After : Jun 15 02:01:06 2025 GMT
Subject: CN=3ce8211ba8a882d35835948280fb5d9b593421e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:ea:86:fb:a3:34:bc:06:27:01:81:90:27:
9c:19:6e:b0:46:ec:7d:3b:97:71:e3:51:a7:fb:5a:
4f:94:6b:de:36:63:1f:c6:02:35:11:5d:9f:38:8f:
51:63:88:b4:2c:24:e7:29:ef:4e:01:9f:39:ab:9f:
f1:c8:e7:b6:22:cf:bd:24:1b:5b:d6:89:a2:6f:8b:
d7:ed:08:10:c2:0d:86:52:c4:2e:8c:93:a4:87:0a:
3e:bd:f0:0b:6b:b9:a6:fb:95:e3:41:0a:59:3e:fc:
0e:15:d4:1c:a9:97:97:dc:2b:94:47:fc:8e:ed:31:
94:81:72:7f:6a:89:0c:80:c9:bf:c0:26:88:82:06:
5b:1b:21:bd:a8:32:af:66:89:09:0c:c5:9b:11:25:
8b:61:7a:ec:ed:fa:4d:7a:9d:1a:ed:36:38:ce:4f:
32:9c:e7:c4:37:69:cc:f7:8b:74:08:72:2b:0c:d8:
4d:32:14:f4:e1:d0:23:fc:b0:6c:db:7e:62:90:d9:
31:27:06:73:19:0e:c3:53:57:91:07:92:60:e8:df:
63:db:a1:75:a0:70:f2:4a:b6:56:eb:9a:cd:5a:d7:
80:ad:93:23:02:36:89:dc:ea:09:cd:a5:b6:76:8b:
c6:b2:14:44:a2:dd:14:5f:6a:14:c1:17:71:4a:77:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E8:21:1B:A8:A8:82:D3:58:35:94:82:80:FB:5D:9B:59:34:21:E2
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:af:d7:1d:c1:7c:18:bd:d8:16:99:3f:3e:fb:d4:e5:c4:52:
93:c4:5d:49:9e:12:ab:10:7e:c6:82:07:79:ff:ba:d3:87:c3:
ba:5b:86:e1:45:3d:8a:a0:d0:21:61:49:7a:0d:09:aa:52:b2:
e7:2b:c5:77:c5:68:d6:1a:a5:be:e9:2f:eb:01:d5:16:42:28:
c3:8a:93:19:cf:42:cb:8a:b6:47:ef:ad:c2:44:b7:06:60:6d:
85:bb:f4:e6:f0:2a:68:a8:6a:4d:61:23:a8:0a:d4:fa:04:68:
4e:33:ed:a7:3c:91:57:91:4c:01:ca:ae:2b:5c:d7:fa:35:a8:
c8:ea:4a:fa:87:6d:17:66:3b:04:a1:54:19:a4:9b:78:21:90:
77:0c:03:48:b3:db:17:0e:23:55:98:91:7d:ec:03:70:da:4f:
20:a2:50:64:2c:87:29:18:3c:40:6d:44:77:29:03:a6:46:25:
45:56:41:46:00:f5:e3:70:f8:cd:a9:c7:c8:90:66:ac:c2:6d:
d2:d9:39:70:37:82:7d:43:82:d9:55:bb:b6:3a:e9:fd:99:15:
82:6d:95:98:47:77:ae:fa:6b:96:42:a0:5a:c5:63:c7:7e:d7:
bb:56:02:53:31:3a:ec:ac:07:2c:5b:18:5e:b7:84:9a:31:c2:
05:e7:82:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:07:20 2025 by rpki-client