Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
File: SIkYymYYDe4Hm69FBT5M61dikr0.mft (raw, json)
Hash identifier: O5ImJ617N0+YPRpZWZcK5QHrsyqlo5mh6sqM/B/As+k=
Subject key identifier: A0:6A:76:5F:F4:98:DF:7A:3D:B9:5E:1A:25:92:52:75:46:4F:1D:50
Authority key identifier: 48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
Certificate issuer: /CN=488918ca66180dee079baf45053e4ceb576292bd
Certificate serial: 019849656C3F35EF6E6246588D3A262E1543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
Manifest number: 1591
Signing time: Sun 27 Jul 2025 01:00:40 +0000
Manifest this update: Sun 27 Jul 2025 01:00:40 +0000
Manifest next update: Mon 28 Jul 2025 01:00:40 +0000
Files and hashes: 1: SIkYymYYDe4Hm69FBT5M61dikr0.crl (hash: mcx2eMMw8V8WzXX1SoC8u/zEOLkInmR+raxy5zfUDxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:6c:3f:35:ef:6e:62:46:58:8d:3a:26:2e:15:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488918ca66180dee079baf45053e4ceb576292bd
Validity
Not Before: Jul 27 01:00:40 2025 GMT
Not After : Jul 28 01:00:40 2025 GMT
Subject: CN=a06a765ff498df7a3db95e1a25925275464f1d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:09:51:fa:26:67:d1:c3:e9:5f:52:95:99:
81:96:67:8f:1f:fa:44:2c:af:e8:88:b5:eb:0f:76:
9b:e2:7d:3a:13:be:a8:3c:e7:88:c7:3e:72:21:c5:
d2:d1:f7:54:12:4a:cd:28:d5:99:e6:20:43:a6:0e:
c7:ba:40:85:41:de:46:d2:7a:6d:84:19:9b:75:77:
85:1c:87:17:7a:d9:bd:1b:8a:ae:52:5d:17:5e:6d:
48:ec:86:8f:ca:b7:7c:dd:ce:dc:67:60:6a:a5:4e:
a4:6c:68:e1:de:0b:a4:01:ed:cc:61:84:b4:6f:c0:
5c:08:c6:bd:6f:e6:59:08:34:bc:ae:34:49:48:31:
c8:58:69:f5:b5:2a:02:75:41:a9:cc:55:c9:8f:b3:
3d:08:ee:b2:a2:a3:c1:cb:8f:74:04:4b:fc:a1:00:
79:a9:e7:29:43:67:04:1d:1c:e8:82:ea:67:96:fe:
98:5f:c4:26:cd:bd:3f:e1:1e:83:60:9d:ab:02:36:
fc:e4:5a:2a:d4:9d:dd:28:11:94:64:43:e3:18:83:
e2:ad:76:e8:16:16:af:18:52:97:e3:a6:83:ba:23:
0a:7e:32:5f:c9:69:ee:74:86:b6:1a:fa:90:c7:c3:
fb:5c:1f:c5:5a:d1:e4:1f:2a:8c:8a:a7:e3:61:54:
de:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6A:76:5F:F4:98:DF:7A:3D:B9:5E:1A:25:92:52:75:46:4F:1D:50
X509v3 Authority Key Identifier:
keyid:48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fa:94:4d:20:bc:bd:05:f5:35:70:11:d8:f9:63:2e:1c:33:
ce:0b:87:95:f4:08:1c:08:f6:e3:f1:20:37:37:48:4e:b5:ed:
6a:05:bb:84:e8:88:41:62:5d:59:b9:63:67:80:b6:11:d7:db:
fe:21:c4:f9:b0:a7:fc:15:0d:e2:28:16:03:bf:c1:27:32:9c:
8b:d3:a8:ef:77:8c:1e:93:3a:61:c2:1c:f6:02:17:dc:f6:5e:
7b:e6:92:5a:e8:17:e2:75:e6:bd:13:81:42:63:8a:4e:b5:c7:
2e:2d:9b:f6:06:1c:b0:83:2d:fb:9a:b0:fb:92:fd:96:25:03:
a2:f9:d5:8d:2a:c2:ae:59:6d:4b:fd:83:d6:81:74:0b:6d:cc:
1f:4b:88:70:b1:9a:d2:ef:a4:14:9a:1e:da:58:21:be:71:7a:
ee:94:66:9f:50:87:75:79:1d:7a:aa:03:6c:94:b6:a0:bf:23:
67:ae:f1:21:74:5b:3f:e0:75:23:7b:5a:69:77:e0:03:96:c0:
64:30:69:8c:5b:4d:8c:6e:05:c3:81:b7:da:a5:64:2a:35:90:
9a:ed:ad:74:b3:ef:41:68:f3:61:dc:03:9f:54:5d:b8:57:f1:
ca:34:93:4e:54:15:1c:ee:3f:92:0d:78:a2:02:6b:a0:85:8b:
75:07:25:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZWw/Ne9uYkZYjTomLhVDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ODkxOGNhNjYxODBkZWUwNzliYWY0NTA1M2U0Y2ViNTc2
MjkyYmQwHhcNMjUwNzI3MDEwMDQwWhcNMjUwNzI4MDEwMDQwWjAzMTEwLwYDVQQD
EyhhMDZhNzY1ZmY0OThkZjdhM2RiOTVlMWEyNTkyNTI3NTQ2NGYxZDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3IJUfomZ9HD6V9SlZmBlmePH/pE
LK/oiLXrD3ab4n06E76oPOeIxz5yIcXS0fdUEkrNKNWZ5iBDpg7HukCFQd5G0npt
hBmbdXeFHIcXetm9G4quUl0XXm1I7IaPyrd83c7cZ2BqpU6kbGjh3gukAe3MYYS0
b8BcCMa9b+ZZCDS8rjRJSDHIWGn1tSoCdUGpzFXJj7M9CO6yoqPBy490BEv8oQB5
qecpQ2cEHRzogupnlv6YX8Qmzb0/4R6DYJ2rAjb85Foq1J3dKBGUZEPjGIPirXbo
FhavGFKX46aDuiMKfjJfyWnudIa2GvqQx8P7XB/FWtHkHyqMiqfjYVTeQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBqdl/0mN96PbleGiWSUnVGTx1QMB8GA1UdIwQY
MBaAFEiJGMpmGA3uB5uvRQU+TOtXYpK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQt
ZDJjZmQ1ZjIyZTdhLzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQtZDJjZmQ1ZjIyZTdh
LzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPqUTSC8
vQX1NXAR2PljLhwzzguHlfQIHAj24/EgNzdITrXtagW7hOiIQWJdWbljZ4C2Edfb
/iHE+bCn/BUN4igWA7/BJzKci9Oo73eMHpM6YcIc9gIX3PZee+aSWugX4nXmvROB
QmOKTrXHLi2b9gYcsIMt+5qw+5L9liUDovnVjSrCrlltS/2D1oF0C23MH0uIcLGa
0u+kFJoe2lghvnF67pRmn1CHdXkdeqoDbJS2oL8jZ67xIXRbP+B1I3taaXfgA5bA
ZDBpjFtNjG4Fw4G32qVkKjWQmu2tdLPvQWjzYdwDn1RduFfxyjSTTlQVHO4/kg14
ogJroIWLdQclkg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:48:07 2025 by rpki-client