Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
File: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft (raw, json)
Hash identifier: a2SO5E4VhUAw8IS0/PGZZOJ9E9qEBagq8nSMjzoZGsY=
Subject key identifier: 15:A2:6F:8D:1B:B6:69:F5:37:9C:4B:9F:4A:99:9E:4A:8A:C6:87:86
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Certificate issuer: /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial: 0199FE7DA5530422911E26588D47953C1D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
Manifest number: 09CA
Signing time: Sun 19 Oct 2025 22:01:11 +0000
Manifest this update: Sun 19 Oct 2025 22:01:11 +0000
Manifest next update: Mon 20 Oct 2025 22:01:11 +0000
Files and hashes: 1: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl (hash: L4bxUafiZC9b2VUgYhXB5EPMAruopCRc/u9vj+0b1XE=)
2: gGRK0X3kC0s3LuHGZCHa-rVo2Wk.roa (hash: wmCf2vHKgmQUz9n+Y0vqzCgcNZZVl9oSp5p8NfbJ984=)
3: iUuRoiZ7OKWdn5tiTJPNMo7hj3g.roa (hash: /5FZIGj6qOj6g4bM0v7qYUvi2YfwwHhDz9PnhjNz8RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:a5:53:04:22:91:1e:26:58:8d:47:95:3c:1d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Validity
Not Before: Oct 19 22:01:11 2025 GMT
Not After : Oct 20 22:01:11 2025 GMT
Subject: CN=15a26f8d1bb669f5379c4b9f4a999e4a8ac68786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9b:6e:4e:dc:6c:92:56:1d:20:cc:73:eb:87:
4c:b6:b6:b1:df:52:43:7a:7b:42:54:ff:b4:d6:67:
eb:d5:0b:ff:32:a7:7f:07:0f:e0:6f:fe:b6:7d:df:
ca:ad:70:c5:d2:c5:a5:28:8f:46:65:07:ae:01:49:
94:38:f2:dc:75:41:82:c3:3f:09:d6:b7:03:5f:96:
bf:3c:79:72:81:8d:55:ff:64:bf:24:e6:10:77:bc:
88:50:bc:55:95:3e:d9:86:c5:2e:dd:bc:3d:51:83:
d8:ee:f4:bb:9e:e7:c9:74:84:42:4b:6d:4f:6f:05:
cf:79:fc:1f:2a:e8:2d:89:7b:68:06:ed:f5:b3:d5:
1e:5a:61:00:63:da:09:88:59:3b:0c:f1:5b:08:8d:
9a:17:dd:37:65:b6:c3:31:2f:b7:9a:11:24:56:d5:
17:94:33:78:f8:22:4c:14:75:fe:48:f8:9e:5f:9e:
a3:a5:d7:81:c2:42:78:9e:0d:21:c2:09:22:8a:ef:
83:d8:23:5a:ec:a8:0e:5e:a0:9d:73:df:0e:4b:f8:
06:82:c8:e2:28:62:fc:14:5e:55:e4:b6:06:13:e1:
2a:7a:e9:00:b8:ab:98:7a:36:eb:0b:50:16:12:02:
c1:b8:93:90:4c:aa:16:33:21:d6:0f:41:9b:57:9d:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A2:6F:8D:1B:B6:69:F5:37:9C:4B:9F:4A:99:9E:4A:8A:C6:87:86
X509v3 Authority Key Identifier:
keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:67:e0:81:72:32:58:19:4f:53:64:1f:50:3f:3e:6e:7e:1b:
27:03:4d:3b:10:e9:0d:64:45:ea:f6:70:ab:36:17:7a:08:a1:
91:68:c5:9c:12:d0:c8:f2:21:f8:29:c0:83:f4:0d:76:74:a0:
e9:77:56:c0:61:33:33:45:3a:ca:d0:87:5f:c5:fd:24:1e:83:
0b:b4:fe:7b:25:1f:63:b0:07:9e:b0:96:c1:28:a5:f0:8f:89:
7e:90:56:c7:25:72:32:4a:44:8d:4c:63:f3:21:0d:fc:91:3a:
44:94:3d:77:1b:4a:e4:8b:60:ea:f6:fe:d2:33:a6:1d:6f:d3:
b3:1b:5f:ad:d9:b2:3e:2d:6f:32:d3:a5:94:da:26:63:0a:f3:
00:49:9d:cb:77:8f:6c:7e:61:73:ba:e0:14:af:d9:96:29:63:
87:16:0e:8f:67:21:28:f2:1d:88:5a:7c:38:d5:c6:b0:77:f5:
fc:90:b6:f8:0c:fc:b2:33:23:a5:3d:eb:0c:b5:34:29:2c:7f:
46:e5:ed:5a:ef:fe:9f:7a:20:5c:5b:48:55:7a:ae:88:b4:d1:
80:38:7f:8a:c7:dc:1e:f9:a6:60:da:20:ac:ce:71:09:54:23:
fb:f0:1f:f4:4c:2d:43:07:6f:26:02:be:5f:13:7d:73:10:0a:
5c:36:fc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:20:44 2025 by rpki-client