Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File: 8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier: zt2Pz2cQir/tGf2gmmKOBLJ030dqULWAPAwrhXpxNJ0=
Subject key identifier: 4A:87:A9:52:62:BD:00:B7:F7:F4:B9:D6:18:5A:FF:D3:B4:07:44:29
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial: 0199221F5C7D1407B0CCCB469B7108C75832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number: 0A71
Signing time: Sun 07 Sep 2025 03:01:44 +0000
Manifest this update: Sun 07 Sep 2025 03:01:44 +0000
Manifest next update: Mon 08 Sep 2025 03:01:44 +0000
Files and hashes: 1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: fFDkmSxaRfE4AQSVweIHuDnW/QNXz8KT7/EJFpgjqfk=)
2: Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa (hash: c37u7+7V7zO9cUACPw1X9wuITqfc2J+4zg3NEuS9Gzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:5c:7d:14:07:b0:cc:cb:46:9b:71:08:c7:58:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Validity
Not Before: Sep 7 03:01:44 2025 GMT
Not After : Sep 8 03:01:44 2025 GMT
Subject: CN=4a87a95262bd00b7f7f4b9d6185affd3b4074429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bf:e4:9c:3d:1f:eb:ba:00:47:e1:a2:9b:12:
be:41:d0:82:99:6a:73:3f:0c:a0:01:d3:d3:e4:0a:
11:16:8f:3a:d9:9f:3d:cc:08:35:76:d0:70:68:69:
20:69:6a:bd:20:8b:ba:6e:63:10:31:5d:ec:bc:e5:
86:75:e7:35:d4:cf:29:74:91:f7:4e:d4:5b:81:98:
9c:23:21:06:53:2f:60:57:b5:9f:26:d8:5d:4d:56:
ac:d1:c7:24:b2:97:1a:61:e4:89:1d:4e:65:0f:0d:
06:ad:aa:a2:c2:05:a5:fe:bc:0a:76:5a:a8:0d:bf:
f9:00:65:fc:d8:f6:4f:2a:0a:d9:dc:88:d6:3a:36:
0a:6d:da:ed:db:79:4a:d1:7d:21:d5:72:c7:12:c4:
2f:5f:fa:e1:20:67:4c:f0:4f:1e:9a:4a:e9:c2:15:
f4:6d:2d:0b:23:59:b9:64:6a:b9:54:cd:9d:ce:ce:
da:69:ec:be:17:87:7a:00:24:2f:ed:7f:eb:d9:01:
3f:e3:8b:b2:f4:35:b1:7f:12:2d:05:49:b0:15:28:
da:0c:fb:e0:ab:8c:31:c0:d8:b4:ca:63:4d:d7:77:
6d:54:31:f2:dd:a5:fe:ce:55:3e:f8:4d:63:81:35:
dc:93:3e:5e:22:90:40:c7:58:a6:6b:51:46:ab:5e:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:87:A9:52:62:BD:00:B7:F7:F4:B9:D6:18:5A:FF:D3:B4:07:44:29
X509v3 Authority Key Identifier:
keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:44:c0:be:fd:53:50:a1:01:da:d2:9a:ec:53:bc:0c:15:53:
9a:82:9a:4f:5e:a5:b8:10:65:89:26:d6:4e:b1:b9:60:6f:ad:
05:33:45:50:00:b1:26:2b:e6:d8:46:f4:62:39:08:51:96:6c:
44:0a:17:57:03:12:33:c1:f6:5f:6d:b7:a1:b1:19:fd:b4:34:
65:8c:ef:79:73:fa:aa:0a:8d:d9:b6:dc:6a:e0:c9:84:30:38:
a1:27:25:15:04:a9:2a:4b:83:f1:67:67:36:4f:20:bb:74:67:
27:b7:9f:7a:dc:7f:67:af:e1:a9:38:7b:20:50:ea:e1:8f:1f:
b5:31:1d:a1:e5:7f:54:fb:ef:c1:d5:fc:94:03:2c:d7:42:a3:
46:f6:f3:1f:c1:88:e8:7f:80:6e:8c:9f:e2:9e:86:f0:60:e3:
44:c9:df:84:5f:8d:ef:3e:47:fd:46:50:8c:c7:c4:33:a1:3e:
04:09:8d:ba:e7:c4:c0:d3:ab:bd:14:26:66:37:33:5e:8f:69:
0a:43:86:c6:ac:54:90:5e:47:c3:fa:71:e9:ea:f8:2c:97:85:
3f:05:ce:bc:82:11:c9:0c:f1:a1:59:a6:18:b7:24:85:81:fd:
74:1c:0b:a8:67:03:df:9a:da:86:b0:23:50:a2:92:69:d9:4b:
28:37:f2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:19 2025 by rpki-client