Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
File: 80YWUeW-JFCXcpdbqYxw7G7jzXs.mft (raw, json)
Hash identifier: Uy4mo8o/bf3lXSpcze3acIhjdKELnBbiKWBKrkYLLcs=
Subject key identifier: E4:8F:F1:4F:51:31:7D:05:71:AF:11:72:6B:D1:41:41:A5:9A:9A:78
Authority key identifier: F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
Certificate issuer: /CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Certificate serial: 019A552E0B88D332EFACCA603604B4765D64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
Manifest number: 0175
Signing time: Wed 05 Nov 2025 18:01:12 +0000
Manifest this update: Wed 05 Nov 2025 18:01:12 +0000
Manifest next update: Thu 06 Nov 2025 18:01:12 +0000
Files and hashes: 1: 80YWUeW-JFCXcpdbqYxw7G7jzXs.crl (hash: D/Phmp3tSDsSMh8gWsyuRTQtlYi+czRhCB7onPgUSik=)
2: fo6AzO5DMZbEdyeTgxz228bW1-E.roa (hash: al64jxtISPerL/dv+x+BvAqZkIG0XvlrHsMW1HD1s0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2e:0b:88:d3:32:ef:ac:ca:60:36:04:b4:76:5d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Validity
Not Before: Nov 5 18:01:12 2025 GMT
Not After : Nov 6 18:01:12 2025 GMT
Subject: CN=e48ff14f51317d0571af11726bd14141a59a9a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:a9:d4:97:f1:b6:c5:f0:34:30:a6:42:e9:
97:b9:79:1d:c5:78:e1:ac:36:a9:94:e4:29:e3:3c:
5c:27:da:9d:89:3a:49:71:d1:f9:42:f0:d8:42:e8:
de:2d:7b:b1:4a:b7:e6:62:9a:91:c0:15:bb:77:4e:
82:f6:bc:af:79:c4:57:94:03:8f:1d:87:07:21:70:
5b:5b:aa:86:9f:e2:eb:67:eb:d0:73:7f:04:dc:d2:
67:b7:72:de:a1:60:35:15:d4:b2:d2:c6:8a:90:95:
78:ba:99:bf:07:ef:8b:a6:68:bf:d4:e8:29:32:d2:
a5:e7:ad:b9:9a:21:26:86:48:0b:48:b3:ea:d6:09:
a3:aa:d9:f6:aa:dc:99:80:5a:6c:83:2f:1d:9a:6e:
9d:65:00:31:f5:06:2d:7c:46:75:9a:46:01:02:07:
7e:d4:83:13:11:56:64:ce:a5:c6:1d:36:9e:95:c1:
fd:68:46:de:eb:b1:17:e0:cc:81:85:18:ae:9d:11:
1f:82:a6:af:d5:23:11:fa:ac:8c:c3:58:58:0b:09:
d0:e4:b2:1a:54:4d:70:13:e9:16:4f:cf:b4:d7:87:
2d:38:26:b9:d7:c5:8a:d7:cd:66:9a:4f:ff:bf:bc:
c1:bb:53:00:77:2c:85:37:55:f9:10:15:6c:d0:8c:
d2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8F:F1:4F:51:31:7D:05:71:AF:11:72:6B:D1:41:41:A5:9A:9A:78
X509v3 Authority Key Identifier:
keyid:F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6d:76:27:36:0d:78:86:48:a3:1e:d0:5a:c3:a7:f7:0b:72:
cd:c2:e6:05:ee:8a:6b:87:e6:82:42:f4:e3:f4:0c:76:ec:4f:
5c:8b:3e:12:81:9e:f5:2d:af:cc:c7:1c:48:46:4f:59:30:11:
41:c7:f4:7e:b0:c6:22:8a:8a:c2:2b:d9:a7:c4:2b:ee:55:5b:
7e:70:13:b1:51:fc:cd:88:65:72:c9:51:35:db:7f:82:91:00:
3f:d8:0b:c8:ed:84:8f:21:e4:d8:e1:49:71:ae:51:80:25:0b:
d4:3b:13:92:cd:bb:5b:22:8a:17:58:3c:54:11:ee:b6:f1:a7:
e8:93:26:a0:b8:29:a7:27:37:27:5d:cd:6c:b9:35:ef:a8:e9:
97:57:bb:78:e2:fd:3d:49:61:3a:d5:00:c9:72:4a:58:cd:d6:
d2:b8:8d:56:e8:3b:b7:19:6a:94:c7:67:15:1b:db:1e:be:5b:
98:8c:a4:2e:6a:83:74:5c:d1:ad:30:10:6f:29:97:81:96:ad:
cd:4d:09:07:81:43:23:7f:f2:10:19:18:bd:45:a5:86:0d:82:
c4:66:6b:9d:b4:dd:26:66:dc:e8:45:f7:6d:d1:9c:c8:68:e1:
9c:77:ed:3f:69:11:0e:e2:29:1b:0d:3f:5b:2b:9f:f9:23:a8:
59:b6:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:12:41 2025 by rpki-client