Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File: 8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier: xQk/prwQeEmmPpMiysQHu3jMsHsug6WLo3dqo9448QE=
Subject key identifier: DB:80:F7:5D:5A:83:49:45:AA:57:65:3A:E8:35:26:97:B5:C8:8E:D3
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial: 0199FC588A2B69224145BA4A3FCACC748623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number: 0AE2
Signing time: Sun 19 Oct 2025 12:01:24 +0000
Manifest this update: Sun 19 Oct 2025 12:01:24 +0000
Manifest next update: Mon 20 Oct 2025 12:01:24 +0000
Files and hashes: 1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: 7QUia6Pv2XGaOV1N9b2DNkcobuYTiqRl7dMjkbm+aRQ=)
2: Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa (hash: c37u7+7V7zO9cUACPw1X9wuITqfc2J+4zg3NEuS9Gzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8a:2b:69:22:41:45:ba:4a:3f:ca:cc:74:86:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Validity
Not Before: Oct 19 12:01:24 2025 GMT
Not After : Oct 20 12:01:24 2025 GMT
Subject: CN=db80f75d5a834945aa57653ae8352697b5c88ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:39:ae:c3:ea:ed:3f:2d:7e:dd:61:ca:43:cb:
40:88:1a:10:8a:f2:a5:68:ae:b0:f6:c6:7d:36:63:
c3:5c:82:b6:c3:8e:db:48:ff:bd:5c:69:76:60:cb:
5f:8c:f2:20:e6:c5:b1:77:23:2f:d7:2a:dd:41:36:
3a:33:ed:92:16:00:8a:0a:34:53:b1:eb:13:0c:56:
30:6d:39:03:80:d1:39:3d:9d:26:85:84:d7:9d:a9:
59:bb:a5:da:20:18:29:83:0b:01:98:dc:85:37:52:
65:b3:24:e1:74:e4:45:75:e6:75:4e:20:75:94:f8:
ff:e3:f0:41:a2:e3:66:d2:1f:20:97:8d:5c:85:ee:
67:fb:66:ea:2e:08:f3:ac:24:36:53:d1:2e:48:1f:
09:7a:27:8c:72:a8:46:77:73:f9:73:de:d7:2a:df:
d0:d9:6f:4d:51:43:29:9b:f9:7c:ef:33:a6:23:f6:
88:4b:47:99:3d:9d:27:7b:c1:65:db:f3:fe:90:b4:
57:c9:51:b8:a5:09:78:4a:79:a9:0e:be:58:6a:1e:
2b:d5:e3:08:b5:3c:e7:a6:f0:e3:4a:a6:d0:3d:8b:
5d:bd:55:d3:b9:fb:1e:32:29:17:6b:c6:6c:f9:ea:
7a:be:fa:bb:34:64:10:16:c1:a3:40:d7:0c:ac:c5:
30:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:80:F7:5D:5A:83:49:45:AA:57:65:3A:E8:35:26:97:B5:C8:8E:D3
X509v3 Authority Key Identifier:
keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:88:97:05:1a:fb:b8:ef:a3:7c:4f:e6:37:2c:11:09:74:58:
08:bc:ca:6b:af:bd:b4:72:a4:d6:c4:d8:4e:7d:2b:e4:31:5b:
07:3f:47:13:50:f3:7c:a3:c6:88:8a:00:4b:9c:95:d1:28:0d:
3a:d5:50:79:89:38:71:b7:c2:c8:d5:c2:24:08:2e:42:4c:7a:
c7:67:b0:7f:23:6e:ec:35:67:ab:a4:13:91:fa:fe:22:a4:1a:
2e:9f:f4:fb:12:4b:1d:ea:7f:7f:9a:39:d4:b7:e7:a7:27:98:
20:2b:77:c9:7b:03:b7:82:6d:9d:87:cd:3f:e7:8e:63:0c:d6:
92:6c:31:b6:1c:f3:d1:cd:2b:ed:c2:0f:09:99:a4:25:3b:37:
0b:1e:0f:6c:91:ba:65:5e:02:a7:99:22:97:29:5f:0d:29:fc:
de:39:e2:56:75:83:f8:2e:2b:ad:33:7c:ef:89:72:3e:76:ca:
bd:61:9a:07:a0:77:15:88:ed:7e:4e:17:0d:0a:14:e8:aa:99:
65:7e:82:64:ec:56:e4:99:75:b3:42:a5:30:7e:24:9f:9e:27:
d7:7f:a4:5f:e8:b7:2a:a4:50:45:d0:2f:7a:c3:e3:be:78:94:
a8:be:ec:38:67:25:f6:93:e9:29:a6:34:46:6a:0a:3f:20:ca:
d0:8d:91:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:57 2025 by rpki-client