Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
File: 80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json)
Hash identifier: yxP/vzAo2x9PLOaFAXKpzkU9jG0wrydYYGqRNPZQcng=
Subject key identifier: 8E:71:4A:87:23:E2:E6:01:06:78:E7:84:29:15:D9:70:0C:6A:1B:FC
Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Certificate serial: 0199FF599257ADC0AD09140BB290D5A7BA7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
Manifest number: 0C95
Signing time: Mon 20 Oct 2025 02:01:24 +0000
Manifest this update: Mon 20 Oct 2025 02:01:24 +0000
Manifest next update: Tue 21 Oct 2025 02:01:24 +0000
Files and hashes: 1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: FjOwsz3Ngq5LEBefZm/Lyy6+RRbpSeLHwvK2/d29IQU=)
2: ZyBaJPQxm3-XH0gFju5MJYC4JWg.roa (hash: ySj8+X0dnc9ap4EhtEfAJ9xZUfiKRhH4fcuhqGb+r4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:92:57:ad:c0:ad:09:14:0b:b2:90:d5:a7:ba:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Validity
Not Before: Oct 20 02:01:24 2025 GMT
Not After : Oct 21 02:01:24 2025 GMT
Subject: CN=8e714a8723e2e6010678e7842915d9700c6a1bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:7e:68:6f:46:10:28:c9:f4:22:e6:c5:d6:
d3:8c:bb:45:89:d1:7e:6f:49:ce:39:96:91:59:77:
6a:17:31:b1:72:a3:cb:2a:9a:cd:5b:69:09:af:01:
b8:32:7c:86:8f:38:03:f2:1e:5f:f1:e9:4c:25:d4:
55:1c:48:e6:7c:6b:c8:f6:b0:b7:47:ec:04:a2:7c:
a1:5f:34:b7:fa:7b:bd:6d:f2:b5:34:01:18:76:7c:
69:da:7b:dd:d0:67:59:24:3a:9c:22:9f:e9:4d:08:
4e:a6:76:56:0c:c0:b7:19:e0:d8:c1:83:30:39:42:
e3:fe:2c:67:09:06:2d:b4:66:0d:81:e2:4d:33:c6:
4f:d4:4d:ee:ea:67:3b:9b:21:9d:d0:10:4f:e3:ff:
94:64:55:96:02:5d:44:d2:8f:88:47:ec:6f:57:05:
e3:b3:ea:e1:a2:5a:3d:a6:bd:5e:03:3c:79:34:e2:
b6:a3:77:f5:07:b5:31:75:dc:42:f1:42:10:58:70:
8f:7f:a2:de:85:5a:1a:06:53:eb:44:73:bb:ef:96:
28:e7:2a:c6:9e:99:2f:e5:f7:82:b5:bc:83:c7:9a:
80:4b:e3:a3:c4:83:08:1a:c5:45:b0:f9:ad:3d:c6:
40:cd:bb:71:37:ae:23:d2:1e:86:2f:87:3d:e8:0b:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:71:4A:87:23:E2:E6:01:06:78:E7:84:29:15:D9:70:0C:6A:1B:FC
X509v3 Authority Key Identifier:
keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:92:6b:59:52:4e:8d:59:00:d6:12:ca:62:f0:ae:17:dd:88:
fa:d2:83:58:02:a1:5d:d6:fc:7e:e1:1b:e4:c0:80:3c:a9:b3:
2e:15:b7:1c:de:36:b5:af:e9:5d:5e:f4:02:8b:79:d5:76:39:
a3:26:f4:ec:ee:d0:de:0e:f9:4e:c2:94:74:1c:f0:d8:7c:48:
fb:48:2f:b8:33:0a:cb:cc:01:6f:fd:23:0f:07:8a:97:0d:1e:
68:86:34:12:74:d6:f3:29:f9:90:89:c6:53:cd:c8:08:55:34:
1f:05:86:f9:f4:90:d3:3e:e9:f0:f8:a5:04:fa:a2:6c:d5:7f:
0d:16:38:13:71:a7:a9:ea:a7:33:b2:08:47:18:d4:63:c6:56:
b5:5f:ac:7a:8b:60:05:fb:ce:d6:1e:67:12:23:bd:15:a8:58:
11:7e:00:7c:27:83:7f:77:11:14:61:03:94:87:43:7e:f1:07:
bb:c3:3b:4a:c3:be:37:61:64:9e:4d:6a:36:bd:d6:ed:00:f5:
27:bc:38:60:70:b1:51:fe:b8:bf:57:42:1e:19:b8:82:dd:9e:
d7:61:f7:8c:35:88:83:8c:c2:42:52:60:7a:73:08:fb:00:59:
cd:3b:d0:0a:3f:03:c6:ea:ad:64:d9:25:fe:27:d9:15:06:a5:
5a:d4:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:13:26 2025 by rpki-client