Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
File: SIkYymYYDe4Hm69FBT5M61dikr0.mft (raw, json)
Hash identifier: hb7/i0n6SmlIS939QFJuF6emxBP5PU32vni7eVmWJHg=
Subject key identifier: 76:2D:98:EA:E0:26:88:E9:2D:6B:1C:ED:C8:8C:57:FD:A9:32:6B:F6
Authority key identifier: 48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
Certificate issuer: /CN=488918ca66180dee079baf45053e4ceb576292bd
Certificate serial: 019A71B88E6FED10B7B0BCBD20A049D7FBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 07:01:51 +0000
Manifest this update: Tue 11 Nov 2025 07:01:51 +0000
Manifest next update: Wed 12 Nov 2025 07:01:51 +0000
Files and hashes: 1: SIkYymYYDe4Hm69FBT5M61dikr0.crl (hash: LbdohTFt2a7A6X9la/2HDr94uRvBPU1VFkG5j51L9NY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:8e:6f:ed:10:b7:b0:bc:bd:20:a0:49:d7:fb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=488918ca66180dee079baf45053e4ceb576292bd
Validity
Not Before: Nov 11 07:01:51 2025 GMT
Not After : Nov 12 07:01:51 2025 GMT
Subject: CN=762d98eae02688e92d6b1cedc88c57fda9326bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:45:9e:c8:36:8c:2a:30:f7:f1:83:d3:e3:92:
83:80:02:13:9b:e3:48:90:82:f2:4d:8c:7f:69:39:
80:5e:3c:c1:77:82:ef:f0:ca:5c:9d:48:2a:ca:fe:
8c:51:fc:43:0c:72:47:8e:53:3f:28:e5:04:bb:59:
32:fa:49:54:0c:25:74:cb:fa:2c:47:26:cf:82:16:
f6:cb:59:b1:cd:31:aa:08:8a:eb:61:fc:3f:e2:2b:
9c:01:0d:08:bb:73:4b:97:fd:9f:70:c8:93:64:87:
c2:1e:a8:ed:0b:ff:f7:4f:c0:b2:35:e1:2c:c6:69:
b7:46:4f:86:84:f2:b6:64:24:f5:da:a0:da:25:3f:
37:35:b0:39:6d:a5:c5:a7:d4:5b:b1:67:9b:60:8a:
4c:51:14:aa:4a:23:65:20:82:75:ec:5b:e6:de:c1:
f5:e8:fa:13:bd:23:f1:8f:51:5d:5c:d3:4e:18:e9:
58:37:b0:2d:f2:79:75:3b:97:dd:68:15:d0:d1:c5:
c6:31:60:ba:b0:db:71:ca:5f:75:27:c7:cf:1a:da:
80:a0:79:e7:4c:4d:de:5d:86:ea:72:06:11:32:0c:
5e:d7:00:8c:0b:c9:a7:f0:70:cb:d8:39:ff:d8:d5:
0f:08:ce:3f:0d:07:93:d8:41:1c:83:ea:4d:27:6c:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2D:98:EA:E0:26:88:E9:2D:6B:1C:ED:C8:8C:57:FD:A9:32:6B:F6
X509v3 Authority Key Identifier:
keyid:48:89:18:CA:66:18:0D:EE:07:9B:AF:45:05:3E:4C:EB:57:62:92:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIkYymYYDe4Hm69FBT5M61dikr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b24936-097f-41e3-b58d-d2cfd5f22e7a/1/SIkYymYYDe4Hm69FBT5M61dikr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c5:7b:c5:0a:6f:80:8c:ee:b4:88:59:5a:9a:ea:8a:19:8d:
87:36:92:cb:e5:64:3f:f8:6e:c5:cd:51:7a:01:cf:55:1c:df:
6d:a0:7a:92:fa:a0:03:91:6b:75:ad:46:ce:e4:03:b7:01:a7:
7b:a3:78:36:d6:5b:eb:25:36:6f:3f:d4:d5:0c:24:68:8b:95:
a3:46:05:54:05:71:13:7b:d4:c7:85:e6:cf:79:25:f5:67:35:
54:75:39:86:ea:de:0b:a5:bb:02:dd:0c:4f:35:1c:43:0e:62:
63:84:3d:59:9a:b0:68:dc:60:7f:c8:54:51:0c:0c:47:09:fd:
27:d5:d0:07:74:fd:57:e2:8d:6c:c6:46:16:dc:01:5d:7c:85:
8e:f1:a2:8a:d6:7c:e8:7d:0d:03:31:a6:1d:94:3e:71:3e:50:
1e:c1:03:46:e8:b9:3a:c3:65:9f:24:dd:64:6b:db:25:c3:23:
59:7c:17:c2:fc:40:e4:3d:93:e0:52:4b:3a:12:f1:98:d3:3a:
2f:fc:92:2d:4c:a2:20:78:79:9c:ee:3a:4c:da:b1:77:78:1b:
91:47:14:1b:96:c7:2e:10:14:dc:fb:c7:ba:40:ca:70:a1:3f:
5c:54:29:d0:25:67:c0:48:93:cc:07:40:08:e0:a1:25:95:19:
6e:29:94:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuI5v7RC3sLy9IKBJ1/vCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ODkxOGNhNjYxODBkZWUwNzliYWY0NTA1M2U0Y2ViNTc2
MjkyYmQwHhcNMjUxMTExMDcwMTUxWhcNMjUxMTEyMDcwMTUxWjAzMTEwLwYDVQQD
Eyg3NjJkOThlYWUwMjY4OGU5MmQ2YjFjZWRjODhjNTdmZGE5MzI2YmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80WeyDaMKjD38YPT45KDgAITm+NI
kILyTYx/aTmAXjzBd4Lv8MpcnUgqyv6MUfxDDHJHjlM/KOUEu1ky+klUDCV0y/os
RybPghb2y1mxzTGqCIrrYfw/4iucAQ0Iu3NLl/2fcMiTZIfCHqjtC//3T8CyNeEs
xmm3Rk+GhPK2ZCT12qDaJT83NbA5baXFp9RbsWebYIpMURSqSiNlIIJ17Fvm3sH1
6PoTvSPxj1FdXNNOGOlYN7At8nl1O5fdaBXQ0cXGMWC6sNtxyl91J8fPGtqAoHnn
TE3eXYbqcgYRMgxe1wCMC8mn8HDL2Dn/2NUPCM4/DQeT2EEcg+pNJ2wyaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYtmOrgJojpLWsc7ciMV/2pMmv2MB8GA1UdIwQY
MBaAFEiJGMpmGA3uB5uvRQU+TOtXYpK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQt
ZDJjZmQ1ZjIyZTdhLzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9iMjQ5MzYtMDk3Zi00MWUzLWI1OGQtZDJjZmQ1ZjIyZTdh
LzEvU0lrWXltWVlEZTRIbTY5RkJUNU02MWRpa3IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzsV7xQpv
gIzutIhZWprqihmNhzaSy+VkP/huxc1RegHPVRzfbaB6kvqgA5Frda1GzuQDtwGn
e6N4NtZb6yU2bz/U1QwkaIuVo0YFVAVxE3vUx4Xmz3kl9Wc1VHU5hureC6W7At0M
TzUcQw5iY4Q9WZqwaNxgf8hUUQwMRwn9J9XQB3T9V+KNbMZGFtwBXXyFjvGiitZ8
6H0NAzGmHZQ+cT5QHsEDRui5OsNlnyTdZGvbJcMjWXwXwvxA5D2T4FJLOhLxmNM6
L/ySLUyiIHh5nO46TNqxd3gbkUcUG5bHLhAU3PvHukDKcKE/XFQp0CVnwEiTzAdA
COChJZUZbimUnA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:48 2025 by rpki-client