Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
File: 8QMX8k1xpRbXUEO-kPWr4_ocklk.mft (raw, json)
Hash identifier: snAvX8RM2JoPA/+tPvVKRs/l+UqA6fGqmCzc4RmXN1U=
Subject key identifier: 26:82:0E:1C:50:15:5D:0F:21:C2:C5:EF:9D:E8:7D:89:8B:59:CB:50
Authority key identifier: F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
Certificate issuer: /CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Certificate serial: 0199221E30A928D1C2C28B9BF151FE48D0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
Manifest number: 1225
Signing time: Sun 07 Sep 2025 03:00:27 +0000
Manifest this update: Sun 07 Sep 2025 03:00:27 +0000
Manifest next update: Mon 08 Sep 2025 03:00:27 +0000
Files and hashes: 1: 8QMX8k1xpRbXUEO-kPWr4_ocklk.crl (hash: RJxRd01VJfmuTGM0yvwrPo7FGBTS202wfUJJH9plO6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:30:a9:28:d1:c2:c2:8b:9b:f1:51:fe:48:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10317f24d71a516d75043be90f5abe3fa1c9259
Validity
Not Before: Sep 7 03:00:27 2025 GMT
Not After : Sep 8 03:00:27 2025 GMT
Subject: CN=26820e1c50155d0f21c2c5ef9de87d898b59cb50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:88:1c:61:e1:dc:ca:1a:3d:0c:3d:49:56:
6c:4f:ed:45:7a:8e:6a:ee:49:5b:17:ac:70:cb:2b:
ba:cb:94:50:b5:c9:e6:ac:38:57:85:0e:de:65:46:
7c:fa:4e:be:cf:33:59:10:fb:54:fa:53:14:09:ac:
63:72:79:6b:2d:c2:da:a6:af:af:ff:9c:86:f3:a6:
d8:35:f1:14:7d:ea:2a:e8:fa:c4:e9:2e:ec:72:d8:
d6:d3:09:7a:35:aa:2a:49:e1:73:a4:cd:06:c0:f7:
15:48:7b:76:0d:6c:92:af:21:a5:4c:8e:97:99:a6:
d6:d1:4f:c6:93:b3:71:77:18:59:8a:78:24:7f:42:
c4:21:3d:5e:20:58:b4:74:4f:eb:8d:3e:c1:64:72:
16:56:b0:42:15:7b:8a:b5:fa:e5:6c:1d:61:f1:b4:
c0:87:df:22:f4:ea:12:92:51:e3:9a:a7:28:12:3e:
7d:83:41:21:52:93:73:37:1b:3e:d0:01:78:21:7a:
83:a0:56:3a:04:0e:03:05:ea:7c:2f:fc:27:8e:d7:
72:97:30:cd:a2:bd:30:a3:95:4e:e0:02:43:33:13:
e4:91:cc:a3:35:88:66:46:a0:a4:dc:1a:61:ea:40:
3e:98:ba:28:84:43:b6:bb:45:33:20:5a:8c:ca:2c:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:82:0E:1C:50:15:5D:0F:21:C2:C5:EF:9D:E8:7D:89:8B:59:CB:50
X509v3 Authority Key Identifier:
keyid:F1:03:17:F2:4D:71:A5:16:D7:50:43:BE:90:F5:AB:E3:FA:1C:92:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QMX8k1xpRbXUEO-kPWr4_ocklk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/135a03-e11a-470a-846c-66d49df53ef1/1/8QMX8k1xpRbXUEO-kPWr4_ocklk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bb:ca:11:83:b4:b2:30:66:ea:84:d4:8b:f7:46:0b:63:15:
2b:79:c5:cf:6c:ff:26:07:9c:ad:be:06:27:a7:70:68:c8:aa:
63:94:80:24:d9:49:fc:aa:8a:64:be:84:4e:cd:2f:d6:06:fe:
af:db:c0:5a:0e:5c:9f:c3:38:40:29:71:9e:6e:a7:0c:7d:b3:
4f:ca:6d:41:2e:e2:fb:a2:fb:57:d3:6c:43:d9:4b:24:05:31:
4e:4c:53:38:92:cd:22:a0:11:44:73:e1:81:9b:da:60:32:1b:
4b:e6:d2:0c:9b:8d:67:c0:01:92:cc:74:d2:1b:66:ed:e3:63:
f5:5a:74:27:2b:a2:92:d5:ac:e1:23:68:50:36:f3:3f:14:4a:
12:b2:d5:62:87:fb:0b:93:3d:7f:c5:1a:54:1e:20:2f:65:99:
85:40:f2:3d:7d:1f:1b:02:6b:df:e2:02:9b:48:c1:94:c9:9d:
a5:53:58:7f:c6:40:47:3e:ce:72:f8:80:99:50:73:5f:62:30:
11:78:0f:fc:bb:f3:e9:bd:8d:b1:52:14:44:e6:67:91:94:ff:
1e:58:37:e3:d1:e9:ff:7f:a7:25:29:ff:1d:c4:49:44:86:12:
ad:98:fe:af:ef:25:1d:15:f3:8d:ad:bd:b8:d8:18:f4:f2:47:
eb:96:2d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:52 2025 by rpki-client