
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
File: 80HP7DgTH4OuPfaZj6AoN1hckd0.mft (raw, json)
Hash identifier: VUPA7Kbdeyzzwwk7ZPk6Te1yZXNsH96juPiw+D7nL9o=
Subject key identifier: CC:1C:5B:53:4A:C0:17:81:EE:69:1B:75:1E:CE:DC:78:E1:D2:B8:ED
Authority key identifier: F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
Certificate issuer: /CN=f341cfec38131f83ae3df6998fa02837585c91dd
Certificate serial: 019A02C78E4773B2D8B586FBCC036C76A3FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
Manifest number: 167C
Signing time: Mon 20 Oct 2025 18:00:23 +0000
Manifest this update: Mon 20 Oct 2025 18:00:23 +0000
Manifest next update: Tue 21 Oct 2025 18:00:23 +0000
Files and hashes: 1: 80HP7DgTH4OuPfaZj6AoN1hckd0.crl (hash: ZpL9wuRuxIVG6NhSH68Liiww9suoDI3lMU4f8bgPsN0=)
2: 8wprXMKHFgaJbtrRl-7EoukrioE.roa (hash: q8PQ3gfYER2buU7f4CIdxjaKSrkMPorOzRr37JwbNA8=)
3: 9xeSR24sxZMuke8WWQxRtYGVLEg.roa (hash: oz0m8zrhKTQoSNw6FTxtRasHRF9fge7GFhftXk33fk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:8e:47:73:b2:d8:b5:86:fb:cc:03:6c:76:a3:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f341cfec38131f83ae3df6998fa02837585c91dd
Validity
Not Before: Oct 20 18:00:23 2025 GMT
Not After : Oct 21 18:00:23 2025 GMT
Subject: CN=cc1c5b534ac01781ee691b751ecedc78e1d2b8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f5:18:d7:c7:53:64:99:78:04:7a:a1:02:fd:
76:87:a8:49:0c:a0:45:63:b9:6c:60:e2:f3:fd:fa:
85:54:b5:28:9a:fd:41:09:21:48:7f:f9:ff:c3:f3:
3a:43:23:2b:a6:61:13:8a:5b:ba:0e:5b:d2:33:7f:
83:15:94:26:c2:54:30:35:20:01:cf:b7:26:b5:ce:
b1:61:01:89:ee:9b:73:cd:82:d0:cc:c8:3d:ed:bf:
20:62:3c:63:e2:da:ae:35:f0:c4:12:53:6d:5e:ff:
74:65:d2:0f:32:d6:9d:26:7e:c6:84:25:2d:1f:0b:
34:3c:e0:e3:1c:fb:9d:18:01:3b:f7:52:68:a0:13:
ab:2b:d5:bf:1b:35:3e:3d:a5:60:c5:62:53:e2:55:
0a:f5:19:af:b5:92:76:ea:5e:15:75:cd:f2:9a:6d:
35:a8:e6:bd:0c:7b:a8:e1:c4:88:22:80:0a:8d:43:
a5:80:e2:1d:48:8e:42:62:c6:17:16:4e:99:da:70:
eb:f1:b5:93:51:7a:8f:69:00:87:3d:97:c9:85:2c:
0c:79:0a:dc:f0:35:7c:b1:93:88:4b:67:66:b2:03:
3f:c4:46:82:f0:e5:31:1a:31:38:ed:5f:4a:a6:46:
3a:07:ee:36:b2:6d:85:d3:8c:f5:47:ad:9c:07:0f:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1C:5B:53:4A:C0:17:81:EE:69:1B:75:1E:CE:DC:78:E1:D2:B8:ED
X509v3 Authority Key Identifier:
keyid:F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1b:63:7d:77:8d:cc:86:13:2c:28:89:74:44:b9:c0:7e:ef:
db:4e:c7:c7:d4:7f:5c:2a:57:25:19:ed:07:32:0e:f3:e1:c6:
f3:d4:22:15:f3:ab:7e:31:b9:cb:7d:f9:8c:bc:fa:4c:fe:45:
93:37:f0:88:48:d9:62:19:cd:e6:d6:ec:a9:21:bc:e7:a2:c9:
03:1f:d4:fe:23:49:ba:ee:dd:c0:e6:60:99:88:5b:76:4b:a6:
9e:be:39:7f:8c:db:7d:bf:8c:fe:f7:3e:e5:83:5d:dc:39:36:
05:d2:4d:40:ab:04:fb:a8:ce:f1:c7:70:dc:10:67:2e:b5:61:
33:f8:a7:1c:a6:4b:3c:8f:12:29:b3:bc:9c:4a:a3:fe:a0:5b:
55:68:41:f3:cd:42:68:44:5b:e7:18:0c:eb:0d:9c:2d:23:b5:
27:0e:ae:c6:dd:80:04:c9:87:77:17:3b:0f:ba:dd:0c:61:6e:
88:40:c4:ce:f8:0e:98:d7:34:23:e0:ca:46:cd:7a:73:5c:26:
99:19:01:6a:34:50:7e:27:1b:42:02:e8:28:91:fc:81:7f:44:
da:c2:ab:c1:9a:05:1f:50:a1:a3:11:a5:63:12:77:e2:a5:c8:
96:d8:ac:4c:e7:f0:c9:4a:08:04:55:87:48:62:2b:44:46:11:
2e:b1:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:40 2025 by rpki-client