Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
File: 80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json)
Hash identifier: uD4Diavqn1A9VQCK5mdMz2FIMk8M038TmQdKv7O7YMo=
Subject key identifier: 36:65:48:6A:81:30:06:DE:04:0B:D6:DF:57:12:60:21:57:61:BB:75
Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Certificate serial: 019A5074803379420A68F9F0D173931BBE5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
Manifest number: 0CBF
Signing time: Tue 04 Nov 2025 20:00:03 +0000
Manifest this update: Tue 04 Nov 2025 20:00:03 +0000
Manifest next update: Wed 05 Nov 2025 20:00:03 +0000
Files and hashes: 1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: L7eG0J0AQaDxwVLUSMXu+qAiyHEeDLQyq5mrRkJm1ls=)
2: ZyBaJPQxm3-XH0gFju5MJYC4JWg.roa (hash: ySj8+X0dnc9ap4EhtEfAJ9xZUfiKRhH4fcuhqGb+r4k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:80:33:79:42:0a:68:f9:f0:d1:73:93:1b:be:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Validity
Not Before: Nov 4 20:00:03 2025 GMT
Not After : Nov 5 20:00:03 2025 GMT
Subject: CN=3665486a813006de040bd6df571260215761bb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:89:be:36:55:64:ef:60:0c:02:d2:e2:54:4a:
0c:f7:e9:61:dd:f2:8c:a0:05:0d:19:b2:9b:6b:07:
b7:dd:5c:1d:b5:96:d1:00:79:12:49:3e:d5:66:fd:
35:5b:73:74:16:16:15:47:95:3e:f3:0e:1f:fd:36:
3c:c1:8b:0c:ea:ad:f2:47:6f:48:c3:68:6f:f6:af:
e5:3d:98:f7:59:03:0d:93:30:15:d7:80:ec:c4:ea:
e8:b1:8b:bd:99:71:d1:76:5a:d0:f0:95:83:ca:71:
a5:69:c6:f3:c4:60:85:99:27:09:1c:6e:69:d2:4a:
6b:b0:2a:1a:eb:37:5a:f6:28:55:ab:ea:a1:0c:81:
66:25:1d:03:c8:8d:b9:e4:de:e5:51:59:0d:93:52:
a7:76:fb:c3:82:10:da:cb:d7:aa:4e:8b:5f:74:56:
3d:11:f6:1f:d4:92:bb:c0:3f:f9:f7:00:26:0a:c6:
17:38:6f:63:bc:37:af:15:d2:d6:6e:05:cb:68:35:
c6:67:59:30:16:0f:b5:56:80:bc:b5:27:bb:c8:ee:
97:73:90:d2:ad:d4:04:61:45:3f:42:0b:85:fa:4f:
3a:c7:e5:0f:31:e4:14:21:00:1c:b7:a2:8d:b8:23:
a3:84:af:9c:e6:b7:6d:ed:b9:05:33:0f:9e:16:5c:
9e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:65:48:6A:81:30:06:DE:04:0B:D6:DF:57:12:60:21:57:61:BB:75
X509v3 Authority Key Identifier:
keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9e:88:22:6a:f2:79:9c:c0:ab:bb:ad:3d:fe:2e:55:30:a6:
5d:a1:7a:00:0d:5a:af:5f:fe:67:bf:68:4d:a0:a7:40:a6:ae:
cf:d4:01:ee:0c:fb:59:95:15:c8:30:cf:b4:83:e4:24:a1:1e:
ff:8c:26:bf:65:59:0e:60:87:5d:8c:f2:9f:41:71:98:41:a2:
a0:d4:ad:f4:7c:29:23:d2:21:ec:2e:8e:50:5f:81:24:3d:3d:
4d:c3:2d:8c:9f:87:9d:7f:df:55:07:da:f8:05:2e:e6:f0:ec:
58:fb:93:4d:6d:ec:76:3d:4f:6b:75:a5:dc:bb:a6:4b:76:3a:
26:0b:55:36:ba:da:00:f4:a6:25:67:c7:6e:d1:29:7a:71:fa:
fc:df:73:67:10:52:b1:b0:73:1e:49:73:0f:0e:30:a0:1c:61:
b1:98:c2:dc:79:45:bd:a1:6a:d1:6f:80:86:5f:0b:98:de:92:
19:91:e7:aa:60:a7:30:f5:ad:f4:4c:8b:90:c0:13:a4:1d:d1:
ca:fb:3b:0f:50:6c:78:6c:b0:09:1c:dc:24:5f:b2:25:ca:d3:
28:d6:3d:a0:45:e7:83:7d:7c:db:5f:58:23:76:7e:e3:6a:83:
c2:e6:b0:a9:36:bb:8a:4e:4f:5b:db:03:56:a3:98:0b:78:6f:
cb:e5:c4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:54:50 2025 by rpki-client