Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
File: 80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft (raw, json)
Hash identifier: pzbjVjTAewq9OWhoRLuBmKvTZm6KCUknBI6cCLko9CM=
Subject key identifier: B9:64:38:0D:53:51:56:70:34:3B:01:E7:A4:EA:0D:C3:75:91:1D:A7
Authority key identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4
Certificate issuer: /CN=f344a9f3665084f5009921ac52d119750beed4b4
Certificate serial: 019A4E5009D2975116793FF1BB97B4BEDAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 10:00:59 +0000
Manifest this update: Tue 04 Nov 2025 10:00:59 +0000
Manifest next update: Wed 05 Nov 2025 10:00:59 +0000
Files and hashes: 1: 80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl (hash: 2Bj4L4yp69Z1mTy1TzwuGFaXeRkkVF7PNvyYSyy6BZg=)
2: duO9LxBTkVs9bWkFXNzc7GNBnLM.roa (hash: qNyvixX6BJstTr21KHWMkBm39t0mtYSLiR/YYgK3594=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:09:d2:97:51:16:79:3f:f1:bb:97:b4:be:da:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f344a9f3665084f5009921ac52d119750beed4b4
Validity
Not Before: Nov 4 10:00:59 2025 GMT
Not After : Nov 5 10:00:59 2025 GMT
Subject: CN=b964380d53515670343b01e7a4ea0dc375911da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:58:34:a9:46:87:08:4c:9f:fa:94:a0:4b:
38:3c:6c:02:5c:52:cf:7d:0e:65:33:28:01:fe:e4:
be:f2:35:12:1e:d9:9b:d8:d3:c7:12:b2:23:41:12:
78:79:86:96:b0:f0:3f:60:fe:96:7a:d5:14:25:dc:
89:a0:b0:9a:e5:46:bb:d1:07:69:f6:ad:57:f5:06:
48:00:60:b8:06:ad:b4:b4:c7:fb:77:c9:95:11:d5:
1b:25:8f:2e:f4:f5:69:07:f0:ad:4f:b0:b6:df:d9:
3c:39:1f:0b:53:9c:61:c9:78:65:f5:b5:ac:64:58:
f8:62:8d:c4:66:16:44:b2:2d:c9:3b:a9:31:da:a0:
77:a3:36:b2:8c:95:09:91:5f:01:79:b0:c1:7b:b2:
e9:5d:e3:a9:7b:75:11:ca:01:a6:0c:16:45:94:83:
32:4b:61:50:a0:96:43:75:eb:4a:3f:4c:6f:35:27:
12:e4:1a:8d:45:2a:ce:9b:a2:3d:d3:8d:67:fd:85:
29:cb:be:bd:c3:5c:35:11:d1:b6:21:cf:b4:42:3e:
ca:92:b9:1e:e8:28:9f:35:e5:75:6f:3d:13:de:ee:
af:ae:76:d4:ee:e9:a4:16:50:6a:aa:b9:a0:38:c9:
6d:7b:7b:24:ec:12:8d:20:5b:5d:d0:a1:3e:26:be:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:64:38:0D:53:51:56:70:34:3B:01:E7:A4:EA:0D:C3:75:91:1D:A7
X509v3 Authority Key Identifier:
keyid:F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ef:8e:57:07:33:be:98:52:8e:3c:9a:09:50:b0:dd:97:ea:
27:5c:31:44:4d:bd:c8:5f:f9:a8:59:a8:6f:a8:fa:b4:6e:32:
b9:40:a5:09:27:c5:3d:21:35:fb:a4:97:fc:67:ba:c3:db:9d:
18:e2:20:34:9d:22:74:16:72:9b:aa:f2:8e:da:6d:ba:b1:de:
46:eb:ed:8c:2a:da:a6:1d:03:45:6b:be:6d:ca:c7:07:c5:5e:
2b:ce:8d:3d:84:ed:ac:9b:15:c8:a0:be:e3:d2:87:2b:ff:1a:
26:16:e2:02:6e:d6:dc:2a:b4:78:52:2b:d3:e0:3c:0e:19:58:
9a:94:3d:c3:7b:e7:ab:ef:cb:c0:c2:c7:07:94:cf:da:0a:52:
1c:21:eb:c3:c0:19:a5:f9:74:4c:67:5b:9d:fd:3c:a6:82:61:
c3:6a:d9:47:b5:80:22:b0:19:b2:ca:cf:6d:26:a9:ac:89:e2:
fc:26:91:9d:db:a5:75:c0:41:09:3a:1f:49:99:02:c5:7d:00:
7a:83:e5:38:13:82:10:2d:d1:ea:33:b4:b4:25:bb:b8:6e:a3:
e3:a3:d7:be:73:83:0a:5e:68:f8:cb:95:24:3e:26:ba:23:bd:
2a:43:5d:f4:b8:05:fa:d5:78:2d:44:15:5f:d7:0e:37:5f:f4:
51:39:44:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:43 2025 by rpki-client