Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
File: 80YWUeW-JFCXcpdbqYxw7G7jzXs.mft (raw, json)
Hash identifier: oaC7YKEmUg0JdWkB9IIVl1X14wavT1O9O6M7S1rEC/E=
Subject key identifier: EF:73:59:54:4B:81:FB:3B:E0:F9:F2:C2:5B:B8:39:A4:B8:A3:CC:74
Authority key identifier: F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
Certificate issuer: /CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Certificate serial: 0197B70EA427852AF65C3B00BD64A0922273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
Manifest number: 1A
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: 80YWUeW-JFCXcpdbqYxw7G7jzXs.crl (hash: bDeCYVqW7yd6p+iFVeFKpaKYrlQUBE0CAZhSzuULrc0=)
2: fo6AzO5DMZbEdyeTgxz228bW1-E.roa (hash: al64jxtISPerL/dv+x+BvAqZkIG0XvlrHsMW1HD1s0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a4:27:85:2a:f6:5c:3b:00:bd:64:a0:92:22:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=ef7359544b81fb3be0f9f2c25bb839a4b8a3cc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:18:c8:7b:e3:cf:c8:3a:7e:c8:5f:43:19:90:
3b:2a:36:a1:ce:94:93:18:5f:c8:bb:8a:25:42:43:
b7:22:c2:9d:e7:cc:df:b6:5e:43:4e:75:18:85:f9:
03:10:d7:10:1c:15:3e:59:b7:4a:a0:99:43:78:2c:
57:8e:9a:79:71:10:f9:29:6d:04:df:8c:8e:07:e2:
9b:e2:79:77:4d:cb:33:a2:cd:88:48:69:6b:4b:df:
a0:24:b4:5a:a0:c0:6d:9d:92:2c:55:6f:c8:80:a7:
67:af:c0:de:98:e7:ca:38:c8:e4:f2:aa:8b:82:9f:
37:99:b4:0c:45:ec:b4:19:7a:55:a3:9f:d1:ca:04:
e5:fa:ad:9d:ef:22:ba:53:3d:db:bd:b9:6a:54:db:
cb:62:bb:48:ea:c9:80:17:89:b1:54:b1:57:10:e4:
93:d3:59:a0:a2:66:28:9d:11:ca:41:7a:84:69:fe:
36:c6:66:02:cd:ec:b5:24:58:6b:c4:2d:b2:e6:34:
94:6a:e6:79:0e:42:60:c9:70:e8:30:de:f0:1d:c6:
84:84:48:0d:60:00:ab:fe:b6:bc:f6:23:56:df:17:
f8:f6:40:ff:0c:cf:2b:52:ab:66:d4:ac:87:6b:23:
10:52:7d:68:40:eb:28:ee:54:0d:ad:da:6c:8e:a1:
90:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:73:59:54:4B:81:FB:3B:E0:F9:F2:C2:5B:B8:39:A4:B8:A3:CC:74
X509v3 Authority Key Identifier:
keyid:F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:04:2f:38:b2:51:ca:b6:8a:d6:c9:44:96:eb:6d:58:51:31:
78:c1:66:9f:9a:c0:98:b2:4a:ab:20:10:77:fd:25:b0:32:8b:
28:c5:db:b0:4f:ce:8e:56:f8:dc:7a:83:e4:ed:d3:f6:4b:1a:
eb:5c:80:f5:1b:d1:d9:07:89:1b:b5:02:36:f1:67:18:43:cd:
d1:2e:bf:eb:14:32:8d:5a:c2:a8:c8:45:8b:94:aa:25:9a:10:
28:6c:59:66:b0:29:f5:59:53:e9:26:49:bd:f9:b9:08:5b:7c:
67:d8:a6:23:71:8d:68:94:bf:c8:d6:a4:98:63:54:9d:c9:6c:
d2:01:42:8f:ec:62:03:8f:5c:c9:b7:35:ea:4f:29:47:06:a6:
93:99:93:34:e8:5a:bb:79:ec:b3:c5:b1:24:91:df:13:cb:79:
c8:bf:b5:c0:ca:a5:66:d4:3b:ff:b5:fd:ef:49:ba:9d:e3:8b:
f7:d6:8e:42:dd:4e:67:e9:0f:63:99:55:6c:3b:0b:a1:14:07:
6a:09:2d:6e:d1:fa:a9:da:e2:12:84:96:89:38:3c:c8:d7:f1:
dc:f3:01:06:ff:c6:3a:86:28:d6:10:d2:7d:4f:31:a6:c3:fb:
d1:68:83:46:41:51:ad:e3:83:ca:b0:17:8d:ba:8a:51:76:47:
5e:c7:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:42:35 2025 by rpki-client