Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
File: 80Q_W1x41o5znU-m_q_dJDsFKks.mft (raw, json)
Hash identifier: C9bTUGI6oxAas6y4ewKndSy9U3Hbxrq4u8ieWE6AV0k=
Subject key identifier: B7:2D:03:99:2F:2C:4B:FC:21:78:34:38:98:B1:A4:2A:1A:D7:ED:C9
Authority key identifier: F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B
Certificate issuer: /CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b
Certificate serial: 019A00DA3F21D324AF4FFCC5D24964F945C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
Manifest number: 0ACD
Signing time: Mon 20 Oct 2025 09:01:34 +0000
Manifest this update: Mon 20 Oct 2025 09:01:34 +0000
Manifest next update: Tue 21 Oct 2025 09:01:34 +0000
Files and hashes: 1: 80Q_W1x41o5znU-m_q_dJDsFKks.crl (hash: 86v9JECOaqha8zeFEqKzafCAxZEOtXD4R1j1Hnb5QA8=)
2: k43rjk9OXsHM4eUp9ryidMIYrpg.roa (hash: nZ1oPuvx4yZUz9X/0NNanuY6VfbmWETyxMR7qm4VS+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:3f:21:d3:24:af:4f:fc:c5:d2:49:64:f9:45:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3443f5b5c78d68e739d4fa6feafdd243b052a4b
Validity
Not Before: Oct 20 09:01:34 2025 GMT
Not After : Oct 21 09:01:34 2025 GMT
Subject: CN=b72d03992f2c4bfc2178343898b1a42a1ad7edc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3f:eb:da:e0:e5:27:ed:4f:eb:36:d5:67:09:
0a:ca:e7:42:f5:1f:99:36:a2:1e:dd:b8:8f:8b:52:
4b:b9:82:b1:b7:71:83:f2:19:1f:a3:5e:f6:27:1b:
29:f5:35:75:b6:d3:f4:73:49:be:c4:8a:1a:9e:0d:
27:64:92:93:b3:33:5c:e3:6e:6e:2b:14:4e:a1:3f:
85:60:0b:b9:8c:aa:aa:16:f4:9c:7b:9f:31:31:77:
2d:c8:28:e1:9b:57:e9:ab:6d:72:00:90:5d:05:75:
7a:e1:31:ea:cd:cc:4b:54:b2:4d:7f:bd:c4:a6:cc:
f6:1f:48:88:bb:9e:a9:46:a1:ea:30:64:4c:d1:34:
37:61:54:5e:f3:f1:ff:2c:3e:77:c0:92:12:d3:db:
3d:e0:82:6b:50:1f:94:ea:7b:99:6d:b8:e2:84:f1:
ce:ee:5c:b1:2a:d6:b4:d0:5f:22:6d:fc:46:ec:a8:
49:db:6b:d7:53:b0:c0:ab:2c:8e:8b:37:33:c3:a0:
bc:fb:fa:e8:ee:e1:97:a8:44:f7:b8:96:d8:f7:c0:
0d:23:ea:35:32:1c:31:42:c5:8a:47:b5:dc:c8:a5:
69:f6:25:e6:fc:6c:39:07:95:76:2a:3a:b5:81:3c:
00:a8:fe:ca:01:58:3b:50:41:df:fa:4e:25:87:11:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2D:03:99:2F:2C:4B:FC:21:78:34:38:98:B1:A4:2A:1A:D7:ED:C9
X509v3 Authority Key Identifier:
keyid:F3:44:3F:5B:5C:78:D6:8E:73:9D:4F:A6:FE:AF:DD:24:3B:05:2A:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Q_W1x41o5znU-m_q_dJDsFKks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fd30a8-c0bf-414f-aba7-b1651a64f35e/1/80Q_W1x41o5znU-m_q_dJDsFKks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e4:ef:97:3f:10:13:89:9f:6a:06:cb:a7:e8:2f:97:81:83:
8f:09:ec:82:ce:3a:52:b8:12:a0:d4:6e:30:58:32:d3:e5:e1:
7c:2f:43:68:b8:c9:80:11:83:3b:de:91:09:c1:e4:ec:f5:07:
72:a5:cc:9b:92:04:a1:02:a4:b2:fd:19:ca:1c:6a:e3:7c:4c:
b7:fd:e9:c2:97:48:16:d5:b7:18:80:7a:88:42:35:cb:08:6a:
8f:a9:79:2a:f6:6f:ce:7c:5d:c5:bc:79:d3:c5:1f:3e:55:a3:
25:02:b6:79:6a:57:86:95:c5:75:3f:f7:40:21:4f:45:17:a3:
67:f0:f9:61:fb:45:65:23:bc:6d:3f:42:83:a0:d5:d9:2e:e4:
40:ee:8f:18:12:42:6c:30:c6:95:27:37:f6:db:28:0c:c1:37:
26:5f:b9:43:9f:26:2e:ae:96:12:ef:c7:81:0c:82:3b:20:a1:
5d:2b:8a:0b:ce:d8:32:3d:8e:00:c6:b7:c5:a4:3f:07:0c:21:
20:50:4b:5e:0c:cc:95:71:f3:32:4e:d2:97:51:6e:9a:11:f5:
81:8a:b3:39:c5:9c:a8:2b:a6:78:ea:8e:fe:60:ce:11:3a:09:
be:d5:ce:91:c0:0c:22:fa:ba:15:87:69:35:ce:59:09:85:ae:
a7:95:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:28:19 2025 by rpki-client