Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
File: 80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json)
Hash identifier: YIMpWK3LhdjLzhbw+UF5MqMMcT5sunsYecphu443lzo=
Subject key identifier: 4A:90:05:C2:BD:92:F3:A3:88:68:54:99:23:39:C0:AC:26:20:DC:A7
Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Certificate serial: 019A1A61E09A3CB7EFEA9357C9A0587747C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
Manifest number: 0CA3
Signing time: Sat 25 Oct 2025 08:00:13 +0000
Manifest this update: Sat 25 Oct 2025 08:00:13 +0000
Manifest next update: Sun 26 Oct 2025 08:00:13 +0000
Files and hashes: 1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: NKdNdfDHAKbYabhsa6Ax/DJvBTbk5f9jB3cneRsbr5o=)
2: ZyBaJPQxm3-XH0gFju5MJYC4JWg.roa (hash: ySj8+X0dnc9ap4EhtEfAJ9xZUfiKRhH4fcuhqGb+r4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:61:e0:9a:3c:b7:ef:ea:93:57:c9:a0:58:77:47:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Validity
Not Before: Oct 25 08:00:13 2025 GMT
Not After : Oct 26 08:00:13 2025 GMT
Subject: CN=4a9005c2bd92f3a3886854992339c0ac2620dca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:b5:84:fa:d0:3a:10:ae:fd:b2:97:0f:b3:
48:3b:0c:b4:94:b5:a2:54:27:37:9b:f1:8b:34:a3:
a5:d6:de:88:b7:3c:51:c1:3b:3a:51:5b:2f:76:0c:
10:73:03:eb:db:be:55:b2:ce:4a:a3:16:de:16:18:
d6:aa:33:70:32:77:d4:42:d3:e7:3d:93:dd:f9:dd:
e2:13:d3:5c:7a:09:70:99:c1:95:52:0d:a3:ed:d3:
c9:5d:94:68:f1:78:c2:a3:13:ef:50:da:1a:cc:12:
1b:be:49:5d:76:ea:8a:d2:9e:14:74:f3:cc:19:b8:
46:4d:c9:90:ac:49:9a:e7:2e:54:00:b7:b6:39:a3:
94:a2:b6:a0:75:34:59:66:61:b0:56:03:c5:4f:d4:
19:27:21:7b:9d:db:52:44:40:30:8b:29:26:9c:19:
c3:93:f7:49:32:f1:14:52:48:c8:5a:70:aa:88:ee:
07:a1:34:c2:07:67:48:26:ed:0a:d5:28:a5:de:76:
6f:92:ea:c3:f4:b5:e4:f2:6f:b6:a9:93:bf:ab:f0:
0a:f0:48:1f:95:69:56:d6:60:81:b1:44:a2:77:99:
bb:64:f9:b9:ce:13:b7:7d:66:03:c9:94:9c:00:2f:
3b:ae:2e:46:19:b6:c0:0b:f5:1d:88:ac:3d:78:6b:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:90:05:C2:BD:92:F3:A3:88:68:54:99:23:39:C0:AC:26:20:DC:A7
X509v3 Authority Key Identifier:
keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d6:f5:c5:63:62:17:2e:87:80:fc:3e:9f:73:00:3d:b3:c7:
cc:36:09:61:e6:18:78:58:66:74:ca:80:2c:ca:39:d9:e3:83:
4e:86:80:8c:69:9f:93:32:ad:00:e1:c6:6a:1e:52:81:ef:7b:
5f:88:1b:12:24:3b:bb:f8:59:15:24:6f:79:19:7e:fe:cb:41:
12:17:ed:56:92:2e:62:a1:af:6f:b7:ad:56:54:93:d9:42:89:
a4:e8:b8:e3:28:ae:89:4b:e1:c9:43:38:92:3a:f0:3c:4f:59:
1a:95:5e:a7:7f:67:4c:ee:97:87:e5:8b:a9:1c:21:3c:a8:59:
93:13:2c:4f:2f:52:90:af:42:85:50:5d:92:64:cb:1b:12:a5:
82:c8:fd:a4:88:3e:91:73:c1:a8:57:81:6a:50:7e:81:ad:77:
e7:a7:b9:2a:93:5a:a6:1f:7d:07:69:7e:37:c1:ae:37:b9:4a:
79:92:62:71:c2:aa:5c:fe:68:93:6d:14:cb:82:fa:95:8a:af:
9a:95:23:85:4a:62:05:d7:d0:02:30:11:eb:59:d4:82:30:de:
ec:7e:bb:4d:28:f5:71:50:be:de:47:86:be:16:83:b1:c2:e3:
40:ce:26:16:70:f6:19:ce:dd:71:4f:b5:87:ee:84:59:60:d0:
9f:ef:bd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:05:33 2025 by rpki-client