Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
File: 80HP7DgTH4OuPfaZj6AoN1hckd0.mft (raw, json)
Hash identifier: mUCd305O7iE1CGNAlM2BuEJ29XFB6yNU/oiiUSCMnt8=
Subject key identifier: 27:A5:AB:CB:36:55:2E:F6:29:C3:92:67:F2:D3:34:3D:94:97:DA:22
Authority key identifier: F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
Certificate issuer: /CN=f341cfec38131f83ae3df6998fa02837585c91dd
Certificate serial: 01976C98D256F8BCE97B16D1D14F9DFC3800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
Manifest number: 1525
Signing time: Sat 14 Jun 2025 04:00:44 +0000
Manifest this update: Sat 14 Jun 2025 04:00:44 +0000
Manifest next update: Sun 15 Jun 2025 04:00:44 +0000
Files and hashes: 1: 80HP7DgTH4OuPfaZj6AoN1hckd0.crl (hash: A6xS0ERglPVGvfg9uFi9LOBMR0XPd78ZGIQThzHT9bo=)
2: 8wprXMKHFgaJbtrRl-7EoukrioE.roa (hash: q8PQ3gfYER2buU7f4CIdxjaKSrkMPorOzRr37JwbNA8=)
3: 9xeSR24sxZMuke8WWQxRtYGVLEg.roa (hash: oz0m8zrhKTQoSNw6FTxtRasHRF9fge7GFhftXk33fk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:d2:56:f8:bc:e9:7b:16:d1:d1:4f:9d:fc:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f341cfec38131f83ae3df6998fa02837585c91dd
Validity
Not Before: Jun 14 04:00:44 2025 GMT
Not After : Jun 15 04:00:44 2025 GMT
Subject: CN=27a5abcb36552ef629c39267f2d3343d9497da22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:80:c4:01:9d:eb:98:4c:83:68:3e:47:38:
76:44:b0:5f:f4:92:31:64:63:e3:9e:9a:16:8f:e4:
03:d8:fc:e5:3f:a9:0e:fe:7a:ee:b4:aa:1d:e5:3f:
e4:87:78:6c:1a:0b:4c:58:e6:58:0a:2c:a0:a4:b9:
ee:d0:af:fa:9f:ce:17:70:11:c2:2d:36:e1:e1:69:
80:f8:b9:e5:6b:2f:89:c0:b0:10:28:60:9d:c0:8f:
bd:fe:18:64:6f:6d:bf:51:a5:1a:59:5c:67:50:d0:
39:f1:a0:d4:ce:93:27:d4:e4:4e:d3:c5:a4:37:c2:
3b:07:66:1b:da:24:86:d6:b1:82:e3:43:a9:ae:2e:
b1:49:67:e4:e4:a8:ef:11:3e:da:67:55:1e:f2:2f:
3b:b2:62:f6:bb:15:0d:96:99:98:b9:02:94:a4:95:
0a:1b:a2:e7:19:e9:c3:31:be:da:d7:92:cc:5b:cc:
8d:38:9e:2a:eb:09:6b:bd:9f:c5:df:f5:8b:a8:19:
c1:0f:a7:ab:73:2e:ca:0a:eb:6b:f7:ae:e1:73:ba:
8f:83:b0:d6:4b:dd:2b:64:39:15:73:9b:a5:93:43:
26:13:37:6b:98:3e:9c:95:95:a0:21:80:16:1c:10:
7c:01:6f:40:ab:70:ab:3c:11:90:50:ee:56:f9:15:
b4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A5:AB:CB:36:55:2E:F6:29:C3:92:67:F2:D3:34:3D:94:97:DA:22
X509v3 Authority Key Identifier:
keyid:F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:20:13:bd:2b:2d:f8:ac:4a:5a:60:c3:5c:2e:5c:5a:35:4b:
9d:6d:f7:2e:79:74:c5:9f:63:78:f7:56:87:34:3f:24:c5:05:
e0:36:e3:eb:6b:b4:d7:f4:28:be:9a:4e:c6:a6:ea:2c:2a:d6:
a1:1c:18:64:d3:be:34:9f:43:0b:31:29:c7:ea:72:55:5f:19:
0f:f8:45:cd:ab:1e:ea:90:36:d7:d4:12:27:3f:5e:f6:22:d5:
78:24:55:b2:11:23:c7:4a:a8:93:74:be:24:9f:59:3d:84:36:
2f:c0:76:35:f1:97:fe:92:0d:6e:43:da:30:95:04:8c:a4:2a:
2e:c9:e2:4c:e7:d0:c0:32:10:92:2d:6b:72:3b:84:41:7d:30:
23:44:27:40:52:99:76:bc:96:34:2d:31:96:16:2d:09:32:c3:
47:54:1d:f5:35:1a:b4:ab:d7:d4:9a:85:d1:4a:fd:be:70:5e:
8f:02:60:a0:46:d3:7b:e4:6a:cf:36:27:c1:ab:d6:4c:e7:73:
3e:de:6a:82:a6:5c:4d:50:96:c0:31:10:70:18:2b:ac:1f:57:
9a:c0:0e:94:45:dd:68:b1:27:aa:a7:17:11:8b:b9:02:ca:65:
dd:1d:38:74:ac:2e:ca:f2:63:13:1f:19:40:7f:33:85:81:ba:
43:f6:4a:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmNJW+LzpexbR0U+d/DgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNDFjZmVjMzgxMzFmODNhZTNkZjY5OThmYTAyODM3NTg1
YzkxZGQwHhcNMjUwNjE0MDQwMDQ0WhcNMjUwNjE1MDQwMDQ0WjAzMTEwLwYDVQQD
EygyN2E1YWJjYjM2NTUyZWY2MjljMzkyNjdmMmQzMzQzZDk0OTdkYTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKmAxAGd65hMg2g+Rzh2RLBf9JIx
ZGPjnpoWj+QD2PzlP6kO/nrutKod5T/kh3hsGgtMWOZYCiygpLnu0K/6n84XcBHC
LTbh4WmA+Lnlay+JwLAQKGCdwI+9/hhkb22/UaUaWVxnUNA58aDUzpMn1ORO08Wk
N8I7B2Yb2iSG1rGC40Opri6xSWfk5KjvET7aZ1Ue8i87smL2uxUNlpmYuQKUpJUK
G6LnGenDMb7a15LMW8yNOJ4q6wlrvZ/F3/WLqBnBD6ercy7KCutr967hc7qPg7DW
S90rZDkVc5ulk0MmEzdrmD6clZWgIYAWHBB8AW9Aq3CrPBGQUO5W+RW0CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCelq8s2VS72KcOSZ/LTND2Ul9oiMB8GA1UdIwQY
MBaAFPNBz+w4Ex+Drj32mY+gKDdYXJHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMmY4NTEtNzdlZS00ZDY0LWE5NWUt
MDlhZmI3ZDZmYjE2LzEvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yMmY4NTEtNzdlZS00ZDY0LWE5NWUtMDlhZmI3ZDZmYjE2
LzEvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSATvSst
+KxKWmDDXC5cWjVLnW33Lnl0xZ9jePdWhzQ/JMUF4Dbj62u01/QovppOxqbqLCrW
oRwYZNO+NJ9DCzEpx+pyVV8ZD/hFzase6pA219QSJz9e9iLVeCRVshEjx0qok3S+
JJ9ZPYQ2L8B2NfGX/pINbkPaMJUEjKQqLsniTOfQwDIQki1rcjuEQX0wI0QnQFKZ
dryWNC0xlhYtCTLDR1Qd9TUatKvX1JqF0Ur9vnBejwJgoEbTe+RqzzYnwavWTOdz
Pt5qgqZcTVCWwDEQcBgrrB9XmsAOlEXdaLEnqqcXEYu5Aspl3R04dKwuyvJjEx8Z
QH8zhYG6Q/ZKQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:18 2025 by rpki-client