Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
File: 80HP7DgTH4OuPfaZj6AoN1hckd0.mft (raw, json)
Hash identifier: Ds8i5pBDTjIUjTpmgIQH8Uifr/bsjcwFEJP9s7v2/GU=
Subject key identifier: DE:0B:41:29:0B:A3:1E:65:38:33:EB:01:EB:74:28:27:1D:BD:42:59
Authority key identifier: F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
Certificate issuer: /CN=f341cfec38131f83ae3df6998fa02837585c91dd
Certificate serial: 0197B5FC0024FCF1F70DB1FC76D190F7C8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
Manifest number: 154B
Signing time: Sat 28 Jun 2025 10:01:20 +0000
Manifest this update: Sat 28 Jun 2025 10:01:20 +0000
Manifest next update: Sun 29 Jun 2025 10:01:20 +0000
Files and hashes: 1: 80HP7DgTH4OuPfaZj6AoN1hckd0.crl (hash: hR5scrdulrRcVFW+KDaRTunuKglxhM1e88KNfG8uDNI=)
2: 8wprXMKHFgaJbtrRl-7EoukrioE.roa (hash: q8PQ3gfYER2buU7f4CIdxjaKSrkMPorOzRr37JwbNA8=)
3: 9xeSR24sxZMuke8WWQxRtYGVLEg.roa (hash: oz0m8zrhKTQoSNw6FTxtRasHRF9fge7GFhftXk33fk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:00:24:fc:f1:f7:0d:b1:fc:76:d1:90:f7:c8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f341cfec38131f83ae3df6998fa02837585c91dd
Validity
Not Before: Jun 28 10:01:20 2025 GMT
Not After : Jun 29 10:01:20 2025 GMT
Subject: CN=de0b41290ba31e653833eb01eb7428271dbd4259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:b1:63:40:a2:94:c3:10:df:7e:c6:60:63:
d7:d5:5a:45:f1:10:69:18:7c:90:a1:d0:46:f4:8d:
23:56:08:59:99:f5:99:87:18:0e:a7:86:9f:3d:21:
60:a0:79:ca:d7:f7:84:ff:49:b9:86:54:89:4b:4a:
69:a1:ca:37:e7:d4:06:28:72:a1:d6:14:ab:54:50:
b4:27:45:e4:83:a5:2a:fb:2c:4a:98:66:da:60:4a:
32:f2:db:7c:6b:c5:b5:12:f7:4c:d5:d4:7c:ad:7a:
62:19:2d:09:f7:ce:c0:0d:83:4d:58:43:ae:b6:6b:
d3:66:56:4f:21:f5:1b:6c:87:66:31:ad:73:c5:15:
e8:64:62:2a:eb:d7:65:16:88:3b:ef:0b:38:6b:5c:
68:ad:f2:1f:00:cb:df:41:91:0a:db:b3:fe:6a:ef:
1f:04:d8:9d:ce:bc:89:78:8e:46:78:1b:de:6e:b7:
74:18:27:1b:4f:16:80:be:01:89:37:f5:7c:72:41:
ec:de:a3:51:18:77:8b:8a:ae:51:8c:7e:bb:db:8c:
f8:ad:63:55:6e:61:41:7e:a0:72:36:3f:2c:53:e2:
61:ef:17:69:2f:e4:d1:70:eb:f9:a1:f7:73:13:02:
75:39:6b:a0:33:68:62:85:9c:92:8a:a6:b3:d4:1b:
de:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0B:41:29:0B:A3:1E:65:38:33:EB:01:EB:74:28:27:1D:BD:42:59
X509v3 Authority Key Identifier:
keyid:F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9f:3c:55:4d:04:30:12:4d:91:63:bc:1f:a1:a4:0b:15:97:
13:7a:8f:0b:4d:2e:6f:63:89:7b:48:70:25:fa:3d:0f:93:ad:
f6:e4:30:6b:e0:88:b4:31:87:e5:cd:bd:14:24:e0:c1:64:ea:
40:8f:34:ab:f5:d4:4a:1d:02:c2:97:18:14:5d:75:06:6c:62:
6a:34:d3:d2:92:7e:c3:73:98:b1:54:6e:2f:cf:cf:af:df:e6:
61:ac:2b:42:53:8d:2c:a9:ec:29:04:09:1b:69:68:81:65:0b:
4f:f6:85:ac:e0:41:0f:53:e4:09:3a:54:ef:25:85:b0:4c:1f:
ba:68:b0:ce:0b:53:8f:68:b8:69:6b:57:78:dd:95:fb:de:18:
99:7f:2d:f5:c5:b6:2a:55:5b:59:d0:3b:b2:02:52:a3:87:3d:
dc:0a:8f:0f:ee:24:ae:a1:14:e9:67:2b:7b:94:04:cf:d9:3e:
6b:13:5f:02:97:ec:c3:8a:d5:88:d1:5d:6d:15:4d:c5:0d:d4:
3f:77:48:52:1b:ad:bb:f0:6d:0c:8f:a4:f2:ba:6b:4f:06:7f:
74:f2:b3:b3:0c:20:31:e5:6a:e5:57:56:f3:0b:f3:5c:cb:84:
e6:34:a2:a9:f3:b0:f1:4c:4c:29:23:a4:94:bb:7e:90:6a:c3:
b1:f9:ea:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:46 2025 by rpki-client