Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
File: 80HP7DgTH4OuPfaZj6AoN1hckd0.mft (raw, json)
Hash identifier: zGFbe2VjD2RVkwHqT1X3qFjoVc3vmB+vy6P7i/z6LM8=
Subject key identifier: CC:DD:04:94:4B:34:BF:79:A0:46:31:32:0C:CD:99:94:A3:18:E6:58
Authority key identifier: F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
Certificate issuer: /CN=f341cfec38131f83ae3df6998fa02837585c91dd
Certificate serial: 0198733DCF6EAA12C35EF962EACE81E24FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
Manifest number: 15AD
Signing time: Mon 04 Aug 2025 04:01:27 +0000
Manifest this update: Mon 04 Aug 2025 04:01:27 +0000
Manifest next update: Tue 05 Aug 2025 04:01:27 +0000
Files and hashes: 1: 80HP7DgTH4OuPfaZj6AoN1hckd0.crl (hash: c0EQ7DeAtVUdsBPnOykV/KsXSwMlIYzdTLvRWOWzDtI=)
2: 8wprXMKHFgaJbtrRl-7EoukrioE.roa (hash: q8PQ3gfYER2buU7f4CIdxjaKSrkMPorOzRr37JwbNA8=)
3: 9xeSR24sxZMuke8WWQxRtYGVLEg.roa (hash: oz0m8zrhKTQoSNw6FTxtRasHRF9fge7GFhftXk33fk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:cf:6e:aa:12:c3:5e:f9:62:ea:ce:81:e2:4f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f341cfec38131f83ae3df6998fa02837585c91dd
Validity
Not Before: Aug 4 04:01:27 2025 GMT
Not After : Aug 5 04:01:27 2025 GMT
Subject: CN=ccdd04944b34bf79a04631320ccd9994a318e658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:72:97:12:cf:3b:3c:03:3a:f4:4d:cd:0f:
e9:a6:1c:83:c3:eb:e7:23:fd:e8:1f:16:1c:6c:8e:
63:a3:63:99:91:b3:9a:ab:1e:9d:16:45:c0:40:72:
69:77:dc:f5:0e:f0:4c:cf:57:12:b9:e1:45:6c:b1:
d5:af:2e:b9:a7:e8:a7:93:47:3b:bd:9e:70:c0:61:
71:a5:86:d9:f3:35:0e:0a:45:21:f8:7a:fb:7d:63:
de:e6:8d:a3:3d:b6:26:c8:8a:e2:03:d2:fe:db:86:
3e:2f:91:f6:2a:0c:1e:76:45:22:c9:bf:00:80:86:
d6:49:36:cc:01:88:02:cb:d3:5b:bb:1d:cb:28:c9:
f5:e4:42:13:a1:02:86:f7:6e:42:e6:36:fa:a8:02:
bc:c6:8f:d3:08:0b:5f:b4:92:f0:8b:7c:1d:e1:95:
19:ea:2c:69:04:64:a8:13:25:7b:15:44:4d:4f:10:
90:92:4b:38:31:22:34:12:ae:20:52:29:ec:17:da:
1f:76:7f:7e:ec:fe:a8:ec:59:63:e7:f6:33:65:27:
c0:fa:10:7a:97:38:e1:30:65:94:6d:24:e5:12:75:
40:93:25:d6:c0:be:15:dc:62:7d:65:8d:2e:dd:bf:
e8:be:ec:1a:0e:d5:87:3b:fd:e5:9e:0d:4d:5b:53:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DD:04:94:4B:34:BF:79:A0:46:31:32:0C:CD:99:94:A3:18:E6:58
X509v3 Authority Key Identifier:
keyid:F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4c:bf:35:74:d9:b1:97:de:69:c7:84:ed:cc:06:65:81:0f:
92:f3:4e:7c:c5:10:60:53:06:71:ff:ca:fe:2c:b7:04:c0:c6:
08:24:bc:9e:59:ae:93:b2:52:6e:ac:c5:f6:2e:e8:c7:9b:11:
4b:61:45:f9:ab:18:ef:a3:0b:f4:9d:95:7c:34:02:9e:7c:ab:
2c:a5:92:d0:56:96:8e:2d:3a:57:55:ef:8c:64:47:27:21:f1:
31:70:10:08:dc:88:56:3c:95:e5:87:1e:72:50:1b:05:db:af:
61:47:67:3b:42:ec:d6:a3:b5:a7:6b:83:27:6e:c0:bd:06:18:
56:b6:29:ff:7e:f6:4a:7c:9c:25:6d:82:23:f5:8a:34:57:d3:
1a:3e:af:5d:46:07:cf:aa:dc:5e:56:f9:fe:32:56:ad:b3:2a:
57:02:f3:6b:9a:a4:af:21:cf:b6:0d:f2:a1:09:6f:51:92:51:
94:08:fa:6e:6b:83:ac:5c:7b:d7:5e:fb:e5:26:60:27:0b:11:
71:e5:e8:01:ae:92:9c:52:9f:48:3b:6d:56:fe:bb:25:d8:1a:
5a:83:e3:95:d2:e2:e2:14:10:79:46:ea:df:9e:5b:35:03:24:
33:d5:1c:23:25:a2:57:18:37:39:c1:c1:33:25:15:96:dc:bf:
14:7f:77:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:47 2025 by rpki-client