Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
File: 80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json)
Hash identifier: qVvkk5RigxM8DMQ9f5xZl6aZ391hqxVXRHJCssML5EE=
Subject key identifier: 1F:EF:CA:A5:BF:D5:82:BE:1E:FC:66:3A:F1:0A:4B:7A:8D:31:2C:6D
Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Certificate serial: 0197B82100DB1F4D06A83DF2283ADFF2B06E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
Manifest number: 0B67
Signing time: Sat 28 Jun 2025 20:00:59 +0000
Manifest this update: Sat 28 Jun 2025 20:00:59 +0000
Manifest next update: Sun 29 Jun 2025 20:00:59 +0000
Files and hashes: 1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: Ny0JXQ1idfG9Kx7buLkTNV9TnXu1Tk/vxEdjcP/66N4=)
2: ZyBaJPQxm3-XH0gFju5MJYC4JWg.roa (hash: ySj8+X0dnc9ap4EhtEfAJ9xZUfiKRhH4fcuhqGb+r4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:00:db:1f:4d:06:a8:3d:f2:28:3a:df:f2:b0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Validity
Not Before: Jun 28 20:00:59 2025 GMT
Not After : Jun 29 20:00:59 2025 GMT
Subject: CN=1fefcaa5bfd582be1efc663af10a4b7a8d312c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:2f:a4:ff:d2:3d:a9:eb:a5:ae:d8:eb:59:
4d:83:48:62:fc:19:6e:f8:dd:69:3e:e9:b8:23:0d:
07:b0:64:60:f2:eb:6f:88:16:2a:02:3b:c0:f6:c7:
ba:ab:d8:9e:d2:16:c7:7d:9d:1d:90:53:cf:51:43:
9f:8a:35:9f:95:23:12:c5:ea:fc:68:27:d0:cc:c1:
89:b7:dd:91:15:77:90:74:b2:26:58:60:14:49:05:
03:27:85:21:51:2b:02:01:83:7c:8b:61:d1:d0:bd:
3f:d7:0a:2c:31:d9:c4:1d:bf:bb:ff:06:4d:5c:75:
e1:64:c7:6a:41:28:24:67:c4:9f:83:3b:88:a4:6e:
49:13:c2:10:94:0e:a6:da:1f:fc:65:3c:da:42:fe:
46:f4:7e:57:91:66:18:20:1f:03:b5:a5:f3:23:f1:
dc:be:b1:48:f1:18:09:91:92:aa:fa:f4:96:25:f4:
85:bc:cc:75:ba:2b:47:b9:52:ed:d4:be:c2:6e:1a:
36:f4:b8:56:ad:f9:9b:55:36:33:77:39:b3:bc:d5:
dd:18:bd:f9:34:05:75:4f:2e:dd:9a:7d:2f:09:b8:
da:f9:2e:90:f3:3c:df:71:e3:c2:6f:6e:cb:e1:c5:
93:90:68:9d:f2:b0:31:54:61:84:e5:89:85:65:d6:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EF:CA:A5:BF:D5:82:BE:1E:FC:66:3A:F1:0A:4B:7A:8D:31:2C:6D
X509v3 Authority Key Identifier:
keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b1:17:cc:13:6c:3f:09:cd:95:68:07:50:db:3a:3d:03:ad:
82:79:ac:22:c2:1c:e8:76:c2:0c:9b:87:ff:55:1e:ad:87:42:
1d:ac:62:54:52:d0:a1:9e:bd:fe:7b:c8:4b:de:dc:01:04:4b:
f0:03:9c:e8:b9:2a:d6:ff:1a:e4:a6:01:88:59:79:5c:d3:08:
bf:da:3b:16:2c:7c:fc:3c:46:f3:a8:9b:b9:14:62:d5:6c:79:
81:d4:32:a1:32:51:be:cc:8a:44:a0:86:ea:5a:1f:61:f7:d4:
30:eb:97:18:f4:f4:b6:71:9d:2b:c4:56:ce:6c:b0:89:c7:67:
95:fc:c0:48:33:a7:2c:3d:6b:2e:ba:90:47:87:c4:6d:64:5e:
fc:7e:23:0f:c5:e1:3b:44:89:1f:25:90:d6:27:ee:ad:b1:01:
0d:b5:83:b1:bc:77:20:3d:ab:75:92:c7:6c:c1:98:9d:52:82:
37:6b:11:fb:ae:7e:00:27:5e:29:32:b0:fb:40:09:eb:ec:9a:
c4:de:ab:34:c5:3a:01:34:75:ed:f3:31:e3:fa:63:69:5b:df:
0d:63:dc:e8:48:ba:64:75:7c:52:b5:9d:ef:4f:87:f2:68:e9:
8e:cb:41:19:55:c7:f8:22:b6:30:17:6c:bd:f7:91:ad:eb:ec:
e2:dd:e4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 05:43:32 2025 by rpki-client