Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
File: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft (raw, json)
Hash identifier: ehXGqqx+t/3WKGCOUK7RwN04nlkw7tMxxLpH62poEtY=
Subject key identifier: 8F:10:6C:93:E1:7F:75:CB:5C:76:B6:D5:30:64:21:2E:41:FF:1A:F3
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Certificate issuer: /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial: 019A4F9920A048D79299E1322462C5E49645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
Manifest number: 09F4
Signing time: Tue 04 Nov 2025 16:00:26 +0000
Manifest this update: Tue 04 Nov 2025 16:00:26 +0000
Manifest next update: Wed 05 Nov 2025 16:00:26 +0000
Files and hashes: 1: 1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl (hash: ZHqw8CJ5c6IFgCMYccsXrB6juZmyxtyNYUTtAlN700Q=)
2: gGRK0X3kC0s3LuHGZCHa-rVo2Wk.roa (hash: wmCf2vHKgmQUz9n+Y0vqzCgcNZZVl9oSp5p8NfbJ984=)
3: iUuRoiZ7OKWdn5tiTJPNMo7hj3g.roa (hash: /5FZIGj6qOj6g4bM0v7qYUvi2YfwwHhDz9PnhjNz8RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:20:a0:48:d7:92:99:e1:32:24:62:c5:e4:96:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Validity
Not Before: Nov 4 16:00:26 2025 GMT
Not After : Nov 5 16:00:26 2025 GMT
Subject: CN=8f106c93e17f75cb5c76b6d53064212e41ff1af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:71:23:17:75:a2:99:54:74:79:80:6c:ea:
10:a9:d9:e6:bc:e4:0a:2c:c3:18:3f:73:dd:1c:57:
0c:34:87:10:b5:59:ee:29:92:d8:60:e9:30:3c:9f:
bd:99:b1:ce:34:89:9e:d6:7f:8e:a6:cb:a1:1b:24:
80:6f:a2:ee:0a:2e:00:77:4f:30:34:9d:72:c6:77:
f5:88:6f:e0:ac:3c:4a:8c:13:86:20:40:e2:1e:f4:
05:75:a4:0e:bd:ad:04:16:0c:23:11:3e:14:8b:99:
a8:fb:69:6d:98:aa:44:01:32:ed:07:cd:cb:da:6d:
cd:10:d6:30:56:c5:7d:a6:19:6c:f7:ae:cb:cc:67:
e7:af:d2:16:2f:ea:42:73:44:aa:91:02:24:89:fb:
10:f0:6e:83:01:f0:0d:2e:9b:6c:5a:a0:b2:6e:7b:
05:d6:f7:1d:55:88:58:42:af:00:3f:a0:6c:c5:0f:
2f:95:5c:f4:94:50:31:38:cc:b4:76:95:2f:c5:cd:
cf:4e:4b:0e:4b:8e:1e:dd:6c:33:79:0c:69:37:e5:
a3:40:56:61:6a:57:9e:70:f3:de:ba:c1:e8:5b:f0:
5b:fa:c1:13:65:93:51:af:38:a5:d3:9a:fe:5e:84:
56:52:9a:ef:44:30:43:23:a6:91:d5:ba:5f:d3:e4:
47:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:10:6C:93:E1:7F:75:CB:5C:76:B6:D5:30:64:21:2E:41:FF:1A:F3
X509v3 Authority Key Identifier:
keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:bd:92:b1:1c:31:eb:c8:45:a2:3d:8e:77:5e:71:bc:09:f4:
e1:3e:96:79:c8:5e:c7:9d:a0:ac:ab:dd:73:4d:2c:5c:cd:94:
a9:8d:38:7c:5a:41:2c:a1:f9:5e:5a:2c:7e:9f:e8:14:b9:f4:
b1:77:d1:07:bb:92:c9:5b:44:96:9b:9c:0e:df:1e:92:e7:f3:
58:39:5a:f5:e9:4f:ce:14:e9:c1:c7:d9:ea:23:80:74:79:e2:
aa:69:50:40:7f:7b:c5:b0:69:9c:ad:15:6e:0b:a4:53:e5:ba:
0d:60:fd:04:dc:84:da:f5:cc:92:e1:56:63:a4:eb:1d:aa:57:
21:3e:f9:17:91:4a:17:c8:a0:63:33:24:87:f4:c7:55:30:f2:
d6:c7:72:51:99:74:ec:20:2c:14:15:7c:df:6b:22:00:69:92:
60:e0:5e:c7:a4:ef:ff:98:1e:45:c0:c1:a8:3f:d3:3e:d8:d2:
3b:ea:cd:87:1e:05:cb:5f:28:5b:94:5a:35:9f:28:f1:a8:df:
d1:e9:8a:c2:da:28:f7:aa:0c:be:51:a7:63:b6:2e:cc:7d:2c:
76:9e:95:6f:5f:46:ff:a8:94:91:b9:eb:8c:3c:1a:a6:8a:5c:
66:a2:39:55:dd:4d:42:74:53:1f:9f:95:d0:87:38:e6:03:f0:
e9:f5:47:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:04 2025 by rpki-client