Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
File: 80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json)
Hash identifier: tEsANrEoz2tHZphkushlh+SOocd2EfuInT4BUV3jK5g=
Subject key identifier: C1:33:5C:1C:49:9B:90:22:8C:F8:CD:69:33:C5:13:30:71:62:57:97
Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Certificate serial: 01984AE5CE68AF945ED7FA9E119F46D5E5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
Manifest number: 0BB3
Signing time: Sun 27 Jul 2025 08:00:31 +0000
Manifest this update: Sun 27 Jul 2025 08:00:31 +0000
Manifest next update: Mon 28 Jul 2025 08:00:31 +0000
Files and hashes: 1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: kBb1z7bSXFZ4QjUtJzyYONKD6MGpXcYPcwpiNbBPjDg=)
2: ZyBaJPQxm3-XH0gFju5MJYC4JWg.roa (hash: ySj8+X0dnc9ap4EhtEfAJ9xZUfiKRhH4fcuhqGb+r4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:ce:68:af:94:5e:d7:fa:9e:11:9f:46:d5:e5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Validity
Not Before: Jul 27 08:00:31 2025 GMT
Not After : Jul 28 08:00:31 2025 GMT
Subject: CN=c1335c1c499b90228cf8cd6933c5133071625797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fe:a5:65:f3:5f:30:03:de:18:f2:ff:67:4f:
36:b6:87:36:44:ca:65:f8:ee:22:5f:4a:d9:c3:ed:
b8:11:fa:2c:3f:ea:93:ce:db:4c:b9:8d:ed:99:28:
c0:ff:94:03:c5:a4:3f:cc:15:59:d6:8b:34:bf:79:
20:7d:56:1e:f8:4c:aa:01:71:a6:a0:ae:b4:47:64:
13:c0:3d:6e:58:16:72:a3:44:05:b2:75:c9:4a:d9:
81:4c:d3:64:dc:6a:39:1e:6c:17:88:6e:41:54:b7:
4c:1a:6b:c7:9f:7c:ba:43:ea:a4:d7:02:9f:e6:7f:
a2:d6:c6:2b:49:ea:da:d0:51:6f:eb:8e:bd:56:3c:
d8:49:ab:bd:89:1b:1a:bd:93:df:7b:e5:dd:d3:6c:
84:ff:62:d2:68:cf:2f:cd:fa:75:3c:b1:12:d5:42:
08:90:29:16:46:da:d3:34:f9:88:62:56:91:8a:3c:
d2:d4:a0:2e:48:88:5f:79:ae:86:59:bf:40:81:d7:
0b:f9:f6:16:6f:5f:c7:4b:7e:78:26:20:b0:76:d2:
bb:7c:65:dc:d0:27:71:58:8b:85:f1:d8:b0:47:b2:
7b:97:9d:6c:f6:4b:e3:08:c0:e2:2a:ca:5e:c9:95:
af:2b:db:42:3f:16:b2:46:f2:ad:3b:49:bb:ad:fe:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:33:5C:1C:49:9B:90:22:8C:F8:CD:69:33:C5:13:30:71:62:57:97
X509v3 Authority Key Identifier:
keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f6:92:f6:c1:27:1f:39:02:ab:32:66:cd:34:8a:94:7a:65:
d4:f8:47:59:3f:1b:27:65:4e:00:b1:82:be:f3:8a:8d:45:58:
35:8d:6b:9c:b5:46:5a:ba:a0:2e:12:86:1b:d3:2b:e8:96:1f:
63:37:e6:a7:03:45:7c:8f:ae:c8:7a:9c:bd:25:82:fe:e8:4b:
00:a9:9c:2b:c2:13:4b:a1:30:ca:75:b9:45:df:db:fc:e3:f6:
bd:65:1e:06:36:91:a9:39:4a:a5:c0:34:9e:b2:c1:24:13:a8:
af:14:5e:47:11:2d:e5:1b:c0:ec:d9:78:ed:e1:08:a7:87:bd:
96:1f:44:56:b2:07:81:9f:53:18:87:ae:f5:d6:32:b9:68:17:
35:c9:cb:40:c2:5f:fa:90:2e:fe:60:f6:4d:83:6c:f9:36:45:
a5:95:1f:1e:2b:42:27:74:4b:6a:40:c4:01:63:66:ff:a5:a0:
54:e3:d3:46:a5:45:67:a5:58:4b:42:93:9b:3c:08:6f:8f:91:
59:32:48:fb:45:30:fd:16:2c:7a:f0:48:3a:81:1a:81:78:fc:
0e:af:39:cf:fc:80:a9:d7:32:98:d4:61:df:76:5e:81:3c:3e:
3b:af:d6:73:06:3d:a7:cb:d3:95:52:83:7f:01:5c:58:34:be:
2b:e7:d2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:56:10 2025 by rpki-client