Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File: SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier: lQlsHqjMmbGIsv3epApG1VjDwjnwKzPVRl1MWztg/mI=
Subject key identifier: 88:58:CB:F6:B1:B0:8D:10:A8:84:03:33:F7:16:7E:B9:6A:01:09:DF
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer: /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial: 0199FC58898C362687FB5FBD45EEAABC2098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number: 0DC2
Signing time: Sun 19 Oct 2025 12:01:24 +0000
Manifest this update: Sun 19 Oct 2025 12:01:24 +0000
Manifest next update: Mon 20 Oct 2025 12:01:24 +0000
Files and hashes: 1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: Qlx9BJUQsiVYeXJWvaqFXKH2JyS7OrAUeGK6VCCr8n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:89:8c:36:26:87:fb:5f:bd:45:ee:aa:bc:20:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Validity
Not Before: Oct 19 12:01:24 2025 GMT
Not After : Oct 20 12:01:24 2025 GMT
Subject: CN=8858cbf6b1b08d10a8840333f7167eb96a0109df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3d:dc:76:68:c6:85:2d:0a:95:9f:b7:cb:46:
e6:55:d4:13:81:f0:86:75:86:fe:de:55:5c:ff:3a:
0e:6d:eb:0a:62:91:c7:8a:08:e5:a6:d9:0e:2a:3d:
57:f9:25:ac:07:39:09:6f:33:07:51:18:76:30:a4:
8d:13:e8:d1:d2:df:a1:2f:5f:38:24:c3:83:85:b7:
85:3f:d2:57:b3:f6:5a:3a:89:60:73:ea:77:20:1f:
ec:45:c0:b2:83:45:7f:d8:5d:1b:c7:a5:4f:9b:f1:
97:82:48:ce:db:da:9f:e4:32:97:7b:ce:58:ec:48:
c4:73:91:85:6f:73:06:fb:cc:9e:2d:39:8e:94:cf:
f4:38:8d:3d:b0:5c:1e:da:af:94:cb:56:05:e1:63:
e6:20:ba:15:4d:15:c9:45:b2:72:a0:02:1a:1f:27:
97:6a:77:6f:bf:40:34:81:64:5f:c7:22:a7:8c:18:
12:ec:23:f0:6a:f6:80:ac:8a:d2:c4:44:58:c2:3f:
e2:a5:06:66:54:3b:47:f5:3e:0d:4c:e1:00:08:29:
04:11:60:c4:85:aa:78:b9:00:e7:ca:d0:18:9e:13:
d6:d3:71:ab:65:ea:59:15:5b:a8:1a:d3:dc:e0:dc:
1e:7f:2c:06:38:f0:9d:9c:a2:94:97:c6:f3:10:1f:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:58:CB:F6:B1:B0:8D:10:A8:84:03:33:F7:16:7E:B9:6A:01:09:DF
X509v3 Authority Key Identifier:
keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3c:b6:12:e6:c4:e1:d2:b9:20:e9:a8:c0:09:b3:1a:0e:4d:
f8:95:d8:d2:b0:43:db:c1:a2:a4:48:23:cf:4f:30:43:d3:f0:
3c:70:00:aa:66:06:b2:00:c0:ec:64:5c:cb:25:fd:ec:c9:90:
50:77:ac:e2:39:3e:3e:6c:17:48:ae:17:1d:b1:62:a2:db:63:
52:9c:ce:1d:1b:c8:9b:c8:86:75:db:2c:3f:bc:bf:72:d2:2d:
45:97:1c:e7:74:8d:8c:63:d4:c4:76:74:aa:48:b2:06:b1:b2:
90:f2:e4:ab:69:37:27:ab:a8:ca:9e:3d:b5:00:5a:30:fd:fe:
38:0c:89:79:a5:80:f2:ba:66:40:5e:87:69:9c:8e:53:67:33:
03:ab:a3:12:64:00:b4:4b:b8:4e:af:c8:0f:e4:a4:e5:b0:9c:
b8:d5:b8:23:43:70:7b:eb:79:21:fd:98:4e:89:d5:b1:52:27:
db:4f:10:bb:bd:b4:f5:94:bb:9d:bd:17:4d:e2:20:09:93:91:
da:af:26:45:05:74:01:22:a8:e7:4a:b2:1a:94:b9:fe:0c:36:
f4:08:2d:8f:b3:e8:60:88:d3:e6:ee:e3:74:25:c5:f2:01:f3:
f1:b5:7b:0b:1e:7d:bc:7a:0a:4d:c6:40:5e:a7:39:fd:07:35:
48:5f:97:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WImMNiaH+1+9Re6qvCCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGYxM2U3YTViYWY2YWU5ZjUxZDI2OWY1OWY2NGQ0Njg0
OTY0MWUwHhcNMjUxMDE5MTIwMTI0WhcNMjUxMDIwMTIwMTI0WjAzMTEwLwYDVQQD
Eyg4ODU4Y2JmNmIxYjA4ZDEwYTg4NDAzMzNmNzE2N2ViOTZhMDEwOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D3cdmjGhS0KlZ+3y0bmVdQTgfCG
dYb+3lVc/zoObesKYpHHigjlptkOKj1X+SWsBzkJbzMHURh2MKSNE+jR0t+hL184
JMODhbeFP9JXs/ZaOolgc+p3IB/sRcCyg0V/2F0bx6VPm/GXgkjO29qf5DKXe85Y
7EjEc5GFb3MG+8yeLTmOlM/0OI09sFwe2q+Uy1YF4WPmILoVTRXJRbJyoAIaHyeX
andvv0A0gWRfxyKnjBgS7CPwavaArIrSxERYwj/ipQZmVDtH9T4NTOEACCkEEWDE
hap4uQDnytAYnhPW03GrZepZFVuoGtPc4NwefywGOPCdnKKUl8bzEB8JRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhYy/axsI0QqIQDM/cWfrlqAQnfMB8GA1UdIwQY
MBaAFEmPE+eluvaun1HSafWfZNRoSWQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYt
Y2UxYjQyMjRlYzQ5LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYtY2UxYjQyMjRlYzQ5
LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGjy2EubE
4dK5IOmowAmzGg5N+JXY0rBD28GipEgjz08wQ9PwPHAAqmYGsgDA7GRcyyX97MmQ
UHes4jk+PmwXSK4XHbFiottjUpzOHRvIm8iGddssP7y/ctItRZcc53SNjGPUxHZ0
qkiyBrGykPLkq2k3J6uoyp49tQBaMP3+OAyJeaWA8rpmQF6HaZyOU2czA6ujEmQA
tEu4Tq/ID+Sk5bCcuNW4I0Nwe+t5If2YTonVsVIn208Qu7209ZS7nb0XTeIgCZOR
2q8mRQV0ASKo50qyGpS5/gw29Agtj7PoYIjT5u7jdCXF8gHz8bV7Cx59vHoKTcZA
Xqc5/Qc1SF+Xvw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:38 2025 by rpki-client