Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
File: 8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json)
Hash identifier: uDX1jgtF7Cf84hmEPuIdjejHrcYx2rDWRb7sZDAsz28=
Subject key identifier: 34:92:F7:99:05:20:96:79:D9:6C:B9:DA:98:31:00:B7:8E:8C:FF:42
Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
Certificate issuer: /CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Certificate serial: 019A7226081084B87A4D8C39B9FAD902751D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
Manifest number: 12D3
Signing time: Tue 11 Nov 2025 09:01:26 +0000
Manifest this update: Tue 11 Nov 2025 09:01:26 +0000
Manifest next update: Wed 12 Nov 2025 09:01:26 +0000
Files and hashes: 1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: RmSMU8rGjL7pzoJJw1EHuQjQmlAF4mB8unWS98pHLbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:08:10:84:b8:7a:4d:8c:39:b9:fa:d9:02:75:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Validity
Not Before: Nov 11 09:01:26 2025 GMT
Not After : Nov 12 09:01:26 2025 GMT
Subject: CN=3492f79905209679d96cb9da983100b78e8cff42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8d:66:80:d9:a7:24:e7:f6:ba:4e:7a:a4:d6:
6b:7c:d0:f8:2e:c5:08:40:d4:7a:af:cf:bb:0e:12:
4d:51:2b:fc:e8:21:0f:59:b4:42:ab:91:b0:64:02:
1d:04:70:6f:78:59:61:82:89:28:21:9a:98:69:1c:
0d:7c:0d:10:df:3a:e9:04:0d:dd:13:28:02:23:fa:
04:37:6a:eb:e5:10:9d:8a:02:b7:bb:68:e7:fe:4c:
c0:ce:cb:9c:5b:55:e4:cf:d0:ce:8b:db:c7:ba:a5:
65:ea:43:c2:2e:e5:94:9c:75:23:91:be:a7:4b:fe:
4c:54:c3:af:95:63:e0:5d:b3:0d:17:3c:6e:1d:76:
3e:ea:fa:46:52:6d:f0:b2:8f:f2:9e:2b:62:b7:23:
0b:56:73:7b:6c:d1:7e:0e:ef:b1:22:b6:3c:ff:6a:
60:d5:48:e9:0a:19:96:ad:15:8b:6b:a1:9b:7c:a5:
a0:1a:ab:05:8e:db:7e:57:48:38:ac:26:49:e2:97:
c7:5b:dc:6b:7f:e9:b3:7d:ff:8c:88:00:20:27:5c:
3e:3f:6f:97:61:98:95:60:13:11:eb:30:ae:ef:fb:
d4:6b:86:67:ed:cc:28:b7:62:4f:05:a6:8e:5a:93:
a5:3c:79:65:e8:08:8f:b0:3a:b5:2a:ee:b6:df:70:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:92:F7:99:05:20:96:79:D9:6C:B9:DA:98:31:00:B7:8E:8C:FF:42
X509v3 Authority Key Identifier:
keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:14:6d:6c:27:e4:41:61:0f:8e:93:07:35:20:26:86:ea:37:
f8:93:9f:ef:56:76:24:77:5b:74:de:70:de:84:81:c1:17:d9:
7b:03:bb:0f:a2:84:e6:c2:25:c1:61:20:6c:2f:1c:76:bb:63:
1c:68:cc:61:4c:42:68:77:a3:40:84:d5:f4:80:6f:a5:fe:78:
99:d3:16:b3:bb:3e:68:0a:36:3f:36:51:f4:b6:ed:7b:9b:30:
e3:cc:c3:c1:f5:3b:34:df:70:e9:cc:ab:57:22:b4:5d:8b:de:
76:b8:17:31:17:2d:89:a8:2c:4c:2d:ff:0a:0d:3e:4d:57:4b:
a8:d2:4e:b8:dc:fa:ca:51:ca:fe:b2:44:60:0d:52:dc:d4:1e:
9e:01:e3:dc:9e:4e:b1:9e:1b:22:16:8a:de:8d:3d:bf:de:d0:
7a:45:67:2b:f7:56:2f:75:6a:e3:f4:26:35:16:a1:c0:f0:fb:
ec:3d:4a:42:2e:f8:06:e4:e7:44:73:61:53:c1:c8:29:e8:56:
e8:74:9d:f7:03:36:23:c4:55:ed:2a:41:a0:e4:8a:b6:77:3a:
1d:1c:97:af:0f:c9:c1:aa:b3:0e:0e:af:d9:dd:7e:6e:00:a6:
59:23:f5:4b:41:14:f5:fe:dd:e3:4e:ed:3e:ee:90:dd:2f:05:
80:4a:91:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:15:34 2025 by rpki-client