Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
File: 80HP7DgTH4OuPfaZj6AoN1hckd0.mft (raw, json)
Hash identifier: OTvzcSA/VX9VhI1vWVoD20b7v6BIH+8QzIFb9ESOh/g=
Subject key identifier: A6:2B:C4:EA:2E:5F:C6:09:FC:66:2A:90:EA:7C:26:C1:D6:9B:D6:31
Authority key identifier: F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
Certificate issuer: /CN=f341cfec38131f83ae3df6998fa02837585c91dd
Certificate serial: 01991763C5DF222E4711E47834FBA64C6455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
Manifest number: 1602
Signing time: Fri 05 Sep 2025 01:00:38 +0000
Manifest this update: Fri 05 Sep 2025 01:00:38 +0000
Manifest next update: Sat 06 Sep 2025 01:00:38 +0000
Files and hashes: 1: 80HP7DgTH4OuPfaZj6AoN1hckd0.crl (hash: LOnBR2pHzOvD1nQPyMuPUr7sFxRIdgMvC2qW3jjEGU0=)
2: 8wprXMKHFgaJbtrRl-7EoukrioE.roa (hash: q8PQ3gfYER2buU7f4CIdxjaKSrkMPorOzRr37JwbNA8=)
3: 9xeSR24sxZMuke8WWQxRtYGVLEg.roa (hash: oz0m8zrhKTQoSNw6FTxtRasHRF9fge7GFhftXk33fk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:63:c5:df:22:2e:47:11:e4:78:34:fb:a6:4c:64:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f341cfec38131f83ae3df6998fa02837585c91dd
Validity
Not Before: Sep 5 01:00:38 2025 GMT
Not After : Sep 6 01:00:38 2025 GMT
Subject: CN=a62bc4ea2e5fc609fc662a90ea7c26c1d69bd631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:ce:c9:f7:65:38:55:31:99:91:cc:d5:99:
88:e8:17:c8:e0:80:6c:1a:3a:3b:c0:40:1c:1b:bd:
2a:3c:67:2d:f7:bc:c2:17:7d:ab:03:70:2f:22:74:
80:de:6a:47:a9:14:b0:5e:5f:aa:48:cd:19:cc:8b:
cd:7e:93:22:7f:cd:0f:12:0a:10:29:f5:f3:1f:9e:
0b:16:21:a4:72:6d:13:12:d4:7b:42:99:52:24:63:
10:38:b6:09:6a:ae:97:e0:c8:22:3d:01:42:04:ef:
b5:5e:08:c7:64:8a:42:f7:75:1c:3d:95:36:05:78:
73:b3:0c:7d:6d:f7:d8:9c:c1:cc:18:aa:90:e0:03:
89:f6:84:45:f7:30:2e:fe:03:33:3b:bd:a7:4c:51:
fa:b0:24:e0:54:d2:e5:e5:81:30:98:71:e4:99:52:
5b:68:33:cf:16:9d:78:a1:c7:fe:92:01:a0:66:59:
74:e9:9f:3e:57:5c:92:3a:1b:c1:81:6f:c3:97:27:
bb:38:c9:db:27:d7:c9:a6:bc:6d:80:85:07:0e:33:
d1:ee:72:b7:1e:b7:6a:58:26:e2:9a:22:1c:ed:c4:
0a:56:27:aa:6b:30:2d:c0:91:13:96:06:bd:14:dd:
07:8c:e3:2e:42:96:d9:8b:d3:52:c7:58:11:fd:11:
9f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2B:C4:EA:2E:5F:C6:09:FC:66:2A:90:EA:7C:26:C1:D6:9B:D6:31
X509v3 Authority Key Identifier:
keyid:F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:60:c3:18:f4:a5:90:56:57:94:17:b1:4a:d2:1c:3b:9d:ef:
f0:82:21:f8:02:94:50:e6:33:b2:ee:ef:9e:99:e0:fe:bd:92:
50:9e:30:4c:b4:53:01:28:82:d4:5f:e6:56:f5:02:de:09:f0:
3c:90:be:36:ad:8e:a3:cb:42:77:ad:fb:2f:14:f6:53:61:89:
fd:86:81:21:8b:4a:36:0f:c0:40:da:2e:11:3e:be:1f:48:57:
48:ce:9b:43:81:c6:47:2d:75:81:64:01:dd:a0:55:c1:4d:ab:
57:db:bf:ba:c1:e5:d9:6c:28:5e:6c:6c:f4:00:fb:16:cd:3b:
90:71:a7:af:cf:08:50:a5:ad:f3:ea:f8:fb:d7:d8:06:cd:77:
b7:19:e6:ec:f9:29:ee:d4:ec:a6:1e:91:45:0a:95:47:8d:ad:
37:68:37:87:85:57:f9:65:ff:8e:3e:e4:7a:73:50:80:5b:b8:
d4:d5:74:09:8d:05:b6:98:7c:99:24:37:63:22:bb:fa:ae:9d:
cf:c0:51:f4:62:f2:4e:a2:a3:90:01:c3:38:4e:c8:e2:3b:02:
7e:89:4b:30:c3:aa:57:09:cb:3c:cf:12:ea:f5:ef:6b:13:3a:
33:7f:32:d3:78:ba:9f:eb:ce:dd:0a:df:74:6d:78:9a:c2:37:
a0:d5:aa:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:31:49 2025 by rpki-client