
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
File: 8XShpC1Ap_uCpsCM6XZRy2ar83A.mft (raw, json)
Hash identifier: ZTc7O3HG0wfyLsQF3P8AKkJSnUF9GCgQYvDSw8HmxwQ=
Subject key identifier: F8:4C:7C:97:2D:D8:A9:BC:01:57:9A:9A:5C:D9:10:27:3A:27:63:16
Authority key identifier: F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
Certificate issuer: /CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Certificate serial: 019874504644A97613DAA3C0430A0DE1E947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
Manifest number: 0A17
Signing time: Mon 04 Aug 2025 09:01:14 +0000
Manifest this update: Mon 04 Aug 2025 09:01:14 +0000
Manifest next update: Tue 05 Aug 2025 09:01:14 +0000
Files and hashes: 1: 8XShpC1Ap_uCpsCM6XZRy2ar83A.crl (hash: 4wjKCIvQHR0BYr+oWXxijCLV1bX9GwwsLJZzWxjKrn4=)
2: Jzc1N5JK_K9rsqLLazjrhQAzn9E.roa (hash: c37u7+7V7zO9cUACPw1X9wuITqfc2J+4zg3NEuS9Gzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:46:44:a9:76:13:da:a3:c0:43:0a:0d:e1:e9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f174a1a42d40a7fb82a6c08ce97651cb66abf370
Validity
Not Before: Aug 4 09:01:14 2025 GMT
Not After : Aug 5 09:01:14 2025 GMT
Subject: CN=f84c7c972dd8a9bc01579a9a5cd910273a276316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8d:cd:4e:f0:f1:b8:c0:d7:24:8f:e8:c1:e4:
99:bc:3a:bf:2d:6b:71:1b:56:6a:ba:b2:c9:15:ff:
f9:e2:f3:07:f6:4a:85:b1:c6:3e:74:bd:69:a1:b6:
4f:40:93:d7:98:cb:23:1d:cf:ee:a6:69:02:f5:13:
5e:30:4d:22:10:5a:33:a9:a4:31:f9:37:c8:7c:8a:
d3:9c:9f:18:ed:1c:c6:95:56:4e:3b:cc:7a:93:96:
45:30:b7:3c:0b:44:06:9a:bf:1a:25:90:68:c0:74:
33:de:81:11:fc:5c:d3:6c:d0:b4:ec:ae:fa:29:ce:
1f:5e:12:4d:e8:f6:97:8f:b3:78:70:4e:89:6c:0f:
10:24:ec:e0:1c:90:91:6b:f9:e7:62:e4:ab:da:9b:
ac:8d:2a:d2:6c:05:4e:17:70:af:89:93:66:19:94:
48:ec:71:c6:ba:ac:f3:0d:56:f8:a9:d1:f5:c8:ec:
63:03:f9:56:13:4d:c0:45:fc:40:09:9c:ef:46:de:
17:f0:ad:29:ea:94:c4:48:d0:1b:4c:7d:da:79:0e:
11:ce:59:91:7c:b9:09:6b:7c:10:56:21:da:c4:71:
d2:df:b9:3b:7d:f2:32:b7:c1:fb:95:13:53:ab:0c:
79:75:6b:12:09:da:29:14:fa:80:94:72:73:21:b7:
f6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4C:7C:97:2D:D8:A9:BC:01:57:9A:9A:5C:D9:10:27:3A:27:63:16
X509v3 Authority Key Identifier:
keyid:F1:74:A1:A4:2D:40:A7:FB:82:A6:C0:8C:E9:76:51:CB:66:AB:F3:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XShpC1Ap_uCpsCM6XZRy2ar83A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ee9c81-6d67-4e33-bd1f-1348ec97b902/1/8XShpC1Ap_uCpsCM6XZRy2ar83A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:15:db:b7:04:22:f4:78:9e:bf:2d:24:30:01:02:1a:a4:07:
a7:62:26:fa:8c:c0:d9:0e:22:68:1e:af:10:ca:ad:5e:06:e0:
0e:25:be:b8:21:c7:2a:64:54:1d:39:26:30:cd:ba:6b:79:47:
44:f7:25:12:0c:01:a0:2a:d0:45:ef:c0:99:39:82:c1:eb:ee:
db:f9:e0:3d:cf:09:01:e6:a6:45:54:ac:6f:73:f6:e0:e0:10:
78:72:c7:35:06:07:eb:f9:53:aa:fa:8a:c3:d7:0a:9c:f9:9f:
85:98:fe:58:57:30:67:df:d0:db:4b:70:aa:4f:95:ab:41:6f:
0a:f2:56:73:c0:f2:c8:01:ed:63:fa:6b:e6:10:9c:14:07:20:
66:eb:71:94:36:8d:93:2f:01:e8:8d:a2:fb:65:17:8a:dd:8a:
e4:0d:8a:6c:c0:42:46:76:de:c3:4e:4f:2b:13:86:b3:2c:1d:
75:73:79:34:8c:c6:65:02:e1:4c:2a:14:5c:0e:08:1e:a6:5e:
ad:9a:47:c9:8b:dc:7b:7c:2f:f9:4b:5b:fa:8e:a9:21:f2:7f:
4e:c4:e3:56:69:c5:4b:0e:91:bd:d6:c1:34:88:9b:48:c1:48:
d8:7e:a9:dc:ad:60:f9:83:ce:0f:d5:26:b3:32:75:a2:a1:07:
c0:89:7b:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UEZEqXYT2qPAQwoN4elHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNzRhMWE0MmQ0MGE3ZmI4MmE2YzA4Y2U5NzY1MWNiNjZh
YmYzNzAwHhcNMjUwODA0MDkwMTE0WhcNMjUwODA1MDkwMTE0WjAzMTEwLwYDVQQD
EyhmODRjN2M5NzJkZDhhOWJjMDE1NzlhOWE1Y2Q5MTAyNzNhMjc2MzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Y3NTvDxuMDXJI/oweSZvDq/LWtx
G1ZqurLJFf/54vMH9kqFscY+dL1pobZPQJPXmMsjHc/upmkC9RNeME0iEFozqaQx
+TfIfIrTnJ8Y7RzGlVZOO8x6k5ZFMLc8C0QGmr8aJZBowHQz3oER/FzTbNC07K76
Kc4fXhJN6PaXj7N4cE6JbA8QJOzgHJCRa/nnYuSr2pusjSrSbAVOF3CviZNmGZRI
7HHGuqzzDVb4qdH1yOxjA/lWE03ARfxACZzvRt4X8K0p6pTESNAbTH3aeQ4RzlmR
fLkJa3wQViHaxHHS37k7ffIyt8H7lRNTqwx5dWsSCdopFPqAlHJzIbf2/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhMfJct2Km8AVeamlzZECc6J2MWMB8GA1UdIwQY
MBaAFPF0oaQtQKf7gqbAjOl2Uctmq/NwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZTljODEtNmQ2Ny00ZTMzLWJkMWYt
MTM0OGVjOTdiOTAyLzEvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lZTljODEtNmQ2Ny00ZTMzLWJkMWYtMTM0OGVjOTdiOTAy
LzEvOFhTaHBDMUFwX3VDcHNDTTZYWlJ5MmFyODNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhXbtwQi
9Hievy0kMAECGqQHp2Im+ozA2Q4iaB6vEMqtXgbgDiW+uCHHKmRUHTkmMM26a3lH
RPclEgwBoCrQRe/AmTmCwevu2/ngPc8JAeamRVSsb3P24OAQeHLHNQYH6/lTqvqK
w9cKnPmfhZj+WFcwZ9/Q20twqk+Vq0FvCvJWc8DyyAHtY/pr5hCcFAcgZutxlDaN
ky8B6I2i+2UXit2K5A2KbMBCRnbew05PKxOGsywddXN5NIzGZQLhTCoUXA4IHqZe
rZpHyYvce3wv+Utb+o6pIfJ/TsTjVmnFSw6RvdbBNIibSMFI2H6p3K1g+YPOD9Um
szJ1oqEHwIl71w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:18 2025 by rpki-client