Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
File: 80HP7DgTH4OuPfaZj6AoN1hckd0.mft (raw, json)
Hash identifier: fag36XwQUqwvTf4oqpp4nV4kqbllFByornQnbZiHJMU=
Subject key identifier: 70:93:DC:AB:CC:5A:48:77:82:F5:D7:8D:6A:23:12:F8:E3:CA:B8:8F
Authority key identifier: F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
Certificate issuer: /CN=f341cfec38131f83ae3df6998fa02837585c91dd
Certificate serial: 019A1BE29157BAE0A3A256893C4BB96911B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
Manifest number: 1689
Signing time: Sat 25 Oct 2025 15:00:24 +0000
Manifest this update: Sat 25 Oct 2025 15:00:24 +0000
Manifest next update: Sun 26 Oct 2025 15:00:24 +0000
Files and hashes: 1: 80HP7DgTH4OuPfaZj6AoN1hckd0.crl (hash: QF2pcKTJZj3n39vAcly9wx+LHp8cTg38OJJYVpKuVUA=)
2: 8wprXMKHFgaJbtrRl-7EoukrioE.roa (hash: q8PQ3gfYER2buU7f4CIdxjaKSrkMPorOzRr37JwbNA8=)
3: 9xeSR24sxZMuke8WWQxRtYGVLEg.roa (hash: oz0m8zrhKTQoSNw6FTxtRasHRF9fge7GFhftXk33fk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:e2:91:57:ba:e0:a3:a2:56:89:3c:4b:b9:69:11:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f341cfec38131f83ae3df6998fa02837585c91dd
Validity
Not Before: Oct 25 15:00:24 2025 GMT
Not After : Oct 26 15:00:24 2025 GMT
Subject: CN=7093dcabcc5a487782f5d78d6a2312f8e3cab88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:18:d2:05:33:f3:03:e7:64:54:07:79:21:f4:
a3:08:a9:f8:fd:b5:ec:1a:ed:1d:05:9e:31:e6:43:
cf:ca:d9:b7:74:15:ee:6b:ed:de:6d:38:88:34:f4:
51:59:f4:91:ac:81:05:9c:79:b3:00:15:f2:bb:c9:
28:bf:1f:ec:e1:0b:55:fa:a1:db:1a:21:85:7b:09:
b1:96:ed:b0:73:d5:0c:5b:eb:0f:19:09:b4:0e:da:
52:c0:1f:6f:fb:65:e9:ad:51:95:66:20:1c:88:76:
75:ad:ba:66:ec:42:bc:01:5d:56:cd:2f:5a:63:3b:
e3:d4:5b:16:7d:94:5d:23:c5:a9:b5:cd:a3:21:83:
93:65:e8:55:97:7e:db:fd:0c:2f:0d:bd:89:d8:6b:
32:0b:a2:a6:ad:d3:c9:14:48:e1:a9:ba:19:9a:93:
0d:f9:64:bd:05:b5:db:4f:9f:ae:af:53:99:44:a7:
e9:8f:b6:20:42:d2:38:02:3b:3d:80:5a:06:f9:c5:
35:51:2d:d0:9a:7a:88:37:f5:66:72:2f:34:43:7a:
c9:14:15:1e:11:07:13:c0:fa:27:bb:b2:7e:8b:ad:
52:b2:36:77:58:11:4b:8b:95:71:11:00:e5:76:cd:
a0:cf:c3:60:4b:2f:9a:80:8c:8c:e4:10:31:2c:aa:
53:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:93:DC:AB:CC:5A:48:77:82:F5:D7:8D:6A:23:12:F8:E3:CA:B8:8F
X509v3 Authority Key Identifier:
keyid:F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:46:30:79:36:54:3f:fc:30:56:3b:a7:28:ef:cc:6e:df:40:
89:be:ac:91:be:d1:15:a6:1e:75:d9:5e:67:e8:6d:0f:c3:50:
6b:e2:60:b8:d1:d8:25:8e:a7:d6:23:90:55:48:fa:62:01:fc:
ad:d1:b1:b7:b2:8f:59:78:96:72:ca:48:f9:61:f3:f4:11:fc:
d4:7a:57:d5:1e:41:1a:0b:ce:de:07:c4:8d:e2:a8:c9:b5:24:
4b:5d:9d:3a:cd:a6:70:35:5f:61:3d:e3:0b:94:67:fa:93:cf:
ee:d0:f8:4c:b4:1f:99:e1:a4:68:34:74:40:3f:a6:2f:09:d7:
68:15:b0:3c:3e:72:aa:ea:3f:88:ad:42:e8:74:0a:71:d9:72:
40:dc:f3:71:46:4d:c0:c3:7b:c8:5b:e5:07:be:8b:f5:b0:fc:
26:dc:c0:de:e7:5d:93:93:24:a2:f8:de:17:a4:53:f8:c4:2a:
e2:4e:a8:4c:26:52:c8:19:5a:a9:78:71:d2:92:e2:05:cc:7c:
b5:41:af:28:fa:1b:89:90:e8:8f:78:85:0a:f4:7c:15:2d:e4:
3c:be:e4:22:2c:07:5e:62:bc:35:69:b6:f8:f5:83:16:53:6d:
87:2e:c2:43:09:e3:bc:5f:69:79:b8:f2:3a:12:08:cc:30:b1:
fe:e9:26:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZob4pFXuuCjolaJPEu5aRG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNDFjZmVjMzgxMzFmODNhZTNkZjY5OThmYTAyODM3NTg1
YzkxZGQwHhcNMjUxMDI1MTUwMDI0WhcNMjUxMDI2MTUwMDI0WjAzMTEwLwYDVQQD
Eyg3MDkzZGNhYmNjNWE0ODc3ODJmNWQ3OGQ2YTIzMTJmOGUzY2FiODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RjSBTPzA+dkVAd5IfSjCKn4/bXs
Gu0dBZ4x5kPPytm3dBXua+3ebTiINPRRWfSRrIEFnHmzABXyu8kovx/s4QtV+qHb
GiGFewmxlu2wc9UMW+sPGQm0DtpSwB9v+2XprVGVZiAciHZ1rbpm7EK8AV1WzS9a
Yzvj1FsWfZRdI8Wptc2jIYOTZehVl37b/QwvDb2J2GsyC6KmrdPJFEjhqboZmpMN
+WS9BbXbT5+ur1OZRKfpj7YgQtI4Ajs9gFoG+cU1US3QmnqIN/Vmci80Q3rJFBUe
EQcTwPonu7J+i61SsjZ3WBFLi5VxEQDlds2gz8NgSy+agIyM5BAxLKpTiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCT3KvMWkh3gvXXjWojEvjjyriPMB8GA1UdIwQY
MBaAFPNBz+w4Ex+Drj32mY+gKDdYXJHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMmY4NTEtNzdlZS00ZDY0LWE5NWUt
MDlhZmI3ZDZmYjE2LzEvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yMmY4NTEtNzdlZS00ZDY0LWE5NWUtMDlhZmI3ZDZmYjE2
LzEvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEYweTZU
P/wwVjunKO/Mbt9Aib6skb7RFaYeddleZ+htD8NQa+JguNHYJY6n1iOQVUj6YgH8
rdGxt7KPWXiWcspI+WHz9BH81HpX1R5BGgvO3gfEjeKoybUkS12dOs2mcDVfYT3j
C5Rn+pPP7tD4TLQfmeGkaDR0QD+mLwnXaBWwPD5yquo/iK1C6HQKcdlyQNzzcUZN
wMN7yFvlB76L9bD8JtzA3uddk5MkovjeF6RT+MQq4k6oTCZSyBlaqXhx0pLiBcx8
tUGvKPobiZDoj3iFCvR8FS3kPL7kIiwHXmK8NWm2+PWDFlNthy7CQwnjvF9pebjy
OhIIzDCx/ukmnA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 18:02:23 2025 by rpki-client