Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
File: 80YWUeW-JFCXcpdbqYxw7G7jzXs.mft (raw, json)
Hash identifier: 0LCkIzUCXTQxLyRpsJqK4oYqdAI2j/chLYJ/moN6ybY=
Subject key identifier: 38:43:6A:D2:0A:74:EE:87:80:FD:74:BC:3C:C4:63:BE:A0:5B:00:59
Authority key identifier: F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
Certificate issuer: /CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Certificate serial: 0199FC58AC109DBFF972EFC72B46561A8AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
Manifest number: 0147
Signing time: Sun 19 Oct 2025 12:01:33 +0000
Manifest this update: Sun 19 Oct 2025 12:01:33 +0000
Manifest next update: Mon 20 Oct 2025 12:01:33 +0000
Files and hashes: 1: 80YWUeW-JFCXcpdbqYxw7G7jzXs.crl (hash: 2BhX23dL61u+nt5qjl8J57BhKUPtdboY/HgpDDSLA40=)
2: fo6AzO5DMZbEdyeTgxz228bW1-E.roa (hash: al64jxtISPerL/dv+x+BvAqZkIG0XvlrHsMW1HD1s0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ac:10:9d:bf:f9:72:ef:c7:2b:46:56:1a:8a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Validity
Not Before: Oct 19 12:01:33 2025 GMT
Not After : Oct 20 12:01:33 2025 GMT
Subject: CN=38436ad20a74ee8780fd74bc3cc463bea05b0059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:fd:f8:07:29:03:7d:8f:87:98:91:3a:9f:
c5:59:04:d2:98:6b:60:0a:e2:40:26:ae:3f:d5:fd:
53:6e:88:f0:b1:53:24:64:72:2a:94:16:4e:a8:89:
f9:cf:31:0f:4e:f4:79:b9:c7:7b:76:e8:3e:66:5a:
d4:9c:e5:5d:b5:f8:45:2b:3e:6e:95:74:e6:ba:47:
27:9b:e2:04:0d:6b:cf:2e:5f:25:9a:94:8a:6f:b5:
42:a7:8a:c8:5f:95:e8:81:61:d0:8a:73:08:b3:fb:
46:61:e0:50:08:a8:32:29:e2:c0:6c:78:45:95:72:
6c:7e:8f:c2:70:95:5b:3c:0c:0f:09:f3:2d:ca:94:
e7:68:8c:bb:8e:00:c8:b8:d7:da:92:b8:01:6c:c8:
40:62:57:b0:c0:4a:a5:f7:23:22:ff:29:e0:69:99:
f8:47:e5:c1:53:83:70:22:fe:08:67:77:9e:82:cf:
c8:3e:90:c2:0f:d0:ae:36:7d:bd:d1:c1:e8:bb:57:
9d:1d:96:77:a4:69:7a:a4:63:19:06:69:c6:24:6a:
ad:dd:28:04:75:d2:2e:a6:36:6e:ca:c0:92:f0:7a:
45:15:2c:32:b9:dd:6d:27:23:47:a6:ee:36:65:36:
d0:38:37:e1:75:ca:09:cd:81:37:68:a1:76:f2:61:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:43:6A:D2:0A:74:EE:87:80:FD:74:BC:3C:C4:63:BE:A0:5B:00:59
X509v3 Authority Key Identifier:
keyid:F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:0f:fb:3a:85:57:a4:09:f4:aa:fe:61:9b:53:9a:7a:05:51:
25:45:9c:79:44:3c:a3:93:cf:a6:d0:3b:14:3f:8c:34:2a:49:
55:86:18:4e:19:59:83:05:57:63:ba:65:c9:ca:0f:cd:c2:dd:
a8:1c:62:5e:aa:bd:1d:39:6b:30:b4:2f:ff:01:3b:f9:43:be:
bd:5d:b7:64:9a:de:e7:d8:39:2e:db:67:2e:f0:82:6e:05:17:
cb:97:d6:8c:a6:75:ae:9d:a3:2b:c0:85:65:52:de:d6:31:8d:
d8:37:11:e9:05:2e:7b:3c:07:14:e6:65:b3:45:ab:93:47:51:
9a:8b:b7:00:0a:ca:c5:85:b2:2a:60:e7:9b:2a:f7:57:b1:4f:
6f:00:3d:d1:0d:17:ce:17:39:0b:ce:a7:b4:1d:fb:9b:c4:40:
88:b8:2d:76:70:cd:51:90:08:be:c4:39:2a:db:48:19:72:7a:
85:ce:81:1b:18:7d:45:35:ce:93:5f:f7:10:ec:5d:ca:7f:c7:
f1:ff:20:ce:10:39:0d:4b:3c:27:4e:20:ab:18:89:8c:3d:ed:
f5:c1:08:a8:d3:53:9c:86:ce:ac:00:bb:0c:93:ab:f7:13:c5:
99:50:a3:0d:2c:6e:30:98:b1:60:c1:6c:08:91:9d:63:e1:f3:
a7:30:5a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:40 2025 by rpki-client