Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
File: F80TGMkZxu8W0kynhGKgt94UugU.mft (raw, json)
Hash identifier: mOffnkCSxJ04ydH4cf1GuONB9kgjI7RU3wqejJxQ71c=
Subject key identifier: 26:54:1D:D0:CC:AF:0F:47:AD:53:89:40:10:C2:4E:79:B9:F9:26:CA
Authority key identifier: 17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
Certificate issuer: /CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Certificate serial: 019A2E8E04AF70F3429089E34E04FF008F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
Manifest number: 86
Signing time: Wed 29 Oct 2025 06:00:50 +0000
Manifest this update: Wed 29 Oct 2025 06:00:50 +0000
Manifest next update: Thu 30 Oct 2025 06:00:50 +0000
Files and hashes: 1: F80TGMkZxu8W0kynhGKgt94UugU.crl (hash: tz599oUVTBzg7dLkKFXIzlLTQLE5jVP6QE69vAcUyOA=)
2: fV1WZCcdLfEsqw2EdlQm5P-L0is.roa (hash: 0XqccHFLFqDbT7tC/mcDP32ySvfNB41cuIO9KikZ3oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:8e:04:af:70:f3:42:90:89:e3:4e:04:ff:00:8f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05
Validity
Not Before: Oct 29 06:00:50 2025 GMT
Not After : Oct 30 06:00:50 2025 GMT
Subject: CN=26541dd0ccaf0f47ad53894010c24e79b9f926ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:53:45:56:b4:a0:5c:c7:41:dc:bc:8d:5f:8a:
b7:1f:cc:28:9f:b2:18:b0:5c:e0:b7:47:6c:98:f7:
30:c0:ae:5f:9c:25:a8:49:11:05:8c:ab:d2:0d:5c:
c6:2c:e1:41:3e:56:07:b9:6b:cf:28:b9:84:1b:f1:
f7:5c:21:6e:73:83:5a:98:77:33:de:3a:48:2f:89:
38:74:86:bc:b1:4b:dc:01:a2:3b:b3:4d:cd:89:42:
d4:0e:85:15:1b:e8:49:c4:1b:8f:34:3c:aa:df:94:
7d:c4:45:f9:7c:74:3a:b1:b4:7f:71:b8:14:7c:d2:
bc:a5:09:75:0f:8c:bc:1a:7f:e3:25:cb:27:4d:b4:
89:5a:81:a2:e1:9c:0a:f6:85:78:a7:cc:d3:4a:f7:
28:39:a3:46:52:65:7b:0b:52:cc:f6:a8:55:11:91:
73:b7:81:50:a1:76:6f:a7:90:29:13:1b:7e:b4:3f:
9c:30:2e:a2:93:03:99:8f:f2:a1:ad:46:b3:9e:06:
6d:da:a6:d8:2c:6e:e9:be:7f:c4:2c:a6:21:1d:12:
45:ed:c1:21:fa:d1:38:45:be:3d:06:c6:46:7b:d3:
7a:a0:6c:d6:f2:b5:af:76:15:27:8d:37:b8:88:96:
d4:ff:24:4e:97:7c:a6:a2:7d:84:41:38:65:88:58:
8c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:54:1D:D0:CC:AF:0F:47:AD:53:89:40:10:C2:4E:79:B9:F9:26:CA
X509v3 Authority Key Identifier:
keyid:17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:39:01:ed:4d:6f:44:25:58:a7:43:2a:53:f1:1f:aa:fe:00:
cc:53:df:ee:6e:50:0e:96:a3:9a:90:18:1b:aa:d8:79:a6:17:
f8:ea:db:21:d6:88:08:6a:f1:54:8f:e7:c7:bb:5c:04:03:35:
cc:54:a2:74:2c:7b:26:fe:2a:b6:99:52:99:fc:89:45:10:b5:
13:e4:5f:54:bd:76:7e:f5:70:2a:8d:dc:1b:6e:59:bc:a3:f9:
72:40:39:8e:1c:eb:da:47:5e:f7:9e:e3:d7:97:7c:2c:1d:25:
a0:e6:12:51:8f:60:56:14:27:29:bc:58:2a:ef:52:e2:43:fa:
74:e3:db:de:5b:bc:71:30:35:26:88:9e:a5:02:e7:27:e0:a9:
6f:c6:62:d5:90:b8:65:b6:31:1b:66:da:d6:56:8f:76:0c:19:
98:94:38:b2:00:49:56:a2:38:0e:14:20:62:64:39:8b:c7:25:
39:47:4f:c3:5f:2e:c9:03:15:1f:f5:f7:52:56:58:45:1b:d3:
01:f4:5f:7e:8e:9f:77:0a:c9:52:6a:d9:02:34:9e:c7:28:29:
46:ea:3b:e2:d6:99:fa:9e:4f:d8:57:10:26:67:62:bc:26:35:
65:cc:98:c2:e5:10:5c:86:92:98:1c:40:70:77:23:24:37:09:
f5:8c:53:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:12:08 2025 by rpki-client