Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File: 8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier: vArHACbPxcvcG467JPD1FB9YKRpBEzyZS4pOzHbyHpA=
Subject key identifier: 56:D5:95:E2:15:8E:14:1F:37:C3:54:22:0B:2E:36:BC:6A:18:1B:4D
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial: 0197B70EDFC281E54E38E04F61C06EE5ADC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number: 09B5
Signing time: Sat 28 Jun 2025 15:01:34 +0000
Manifest this update: Sat 28 Jun 2025 15:01:34 +0000
Manifest next update: Sun 29 Jun 2025 15:01:34 +0000
Files and hashes: 1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: JbZ9ywgIHb2xgOOGNxnRQ3kG8wLJCm7Jt65A5+hbHk4=)
2: Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa (hash: c37u7+7V7zO9cUACPw1X9wuITqfc2J+4zg3NEuS9Gzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:df:c2:81:e5:4e:38:e0:4f:61:c0:6e:e5:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Validity
Not Before: Jun 28 15:01:34 2025 GMT
Not After : Jun 29 15:01:34 2025 GMT
Subject: CN=56d595e2158e141f37c354220b2e36bc6a181b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b9:0c:52:ff:b2:23:a0:f5:b8:de:8f:48:07:
85:fb:97:cf:cc:b3:0a:0e:9f:68:55:36:7b:f7:f3:
70:ff:9d:8b:09:41:77:af:75:59:23:33:2b:c7:51:
8a:ec:88:a7:b2:72:e7:65:5e:d2:a9:eb:fe:41:53:
85:4b:50:d2:1a:73:d5:be:ee:94:7c:b7:24:61:9a:
2f:a0:a2:94:fb:b1:16:18:fa:c0:ea:63:38:ec:af:
e1:55:de:c2:37:12:50:bc:37:3f:62:d7:c0:b6:d3:
17:f2:f2:3c:3d:17:e1:8f:36:a3:20:4c:9d:34:bb:
63:f3:53:5b:a7:cd:50:e2:72:2a:16:1a:bd:fe:2f:
12:67:e6:38:eb:b8:28:3d:9e:77:dd:51:99:7d:57:
4f:23:d2:d2:90:54:86:63:f4:6a:73:b8:85:a0:62:
46:dc:5b:a5:8b:ef:3f:44:4f:06:0e:8a:4d:b8:62:
24:93:b0:5b:49:c7:81:f5:32:97:a0:d6:d4:c7:dd:
a7:9f:88:40:27:96:0f:e0:51:0c:7e:4f:e0:c0:3d:
37:35:db:3f:1d:05:a2:67:b7:eb:04:9f:a3:9b:1b:
86:a9:28:23:17:69:47:bd:8a:fc:74:aa:a6:e2:08:
97:66:39:a7:0b:ca:79:07:6c:0e:f6:84:c0:91:17:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D5:95:E2:15:8E:14:1F:37:C3:54:22:0B:2E:36:BC:6A:18:1B:4D
X509v3 Authority Key Identifier:
keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a9:39:75:ed:6a:26:57:36:cb:0e:de:4d:75:fe:e7:3b:39:
da:d1:6a:5b:22:e9:73:85:19:29:b7:6a:7f:a8:65:06:f1:b5:
13:6c:11:39:25:b6:99:00:51:94:24:42:b4:a9:9e:56:eb:f9:
ee:aa:81:73:a4:db:a6:31:43:0e:7b:78:90:b9:03:37:e7:cf:
bf:b2:c0:da:f6:ed:ea:85:91:05:47:e1:52:30:9d:61:0e:6d:
c4:4b:bc:c6:9d:32:09:4d:07:73:7b:64:7d:4b:8c:52:83:c3:
87:5a:6a:82:71:87:d7:58:b1:aa:a5:98:93:e8:c2:b5:43:9e:
12:67:d6:5d:48:23:87:3c:1c:b5:b0:0e:96:03:3c:73:c3:31:
f2:d2:ac:d7:25:3f:55:b4:19:25:19:09:59:fe:b7:f0:8b:36:
6b:0a:a3:56:21:e3:b0:f9:e3:61:90:29:ac:68:13:10:ea:cc:
12:e8:8f:73:27:13:8d:cf:15:cf:41:4b:73:ad:f9:94:de:a4:
54:74:32:56:11:0b:8f:b1:dc:af:c7:27:64:7e:cd:1e:3b:1b:
63:38:b1:bc:10:6b:64:a5:77:14:d0:2e:74:1c:4d:2b:71:d4:
31:46:a9:ff:f5:ea:e4:92:58:0e:88:fc:e1:93:5a:ae:1c:46:
fb:93:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:31 2025 by rpki-client