Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier: O2l+MfK1qoW9PRQ8pTPtPFd1Lw7ARCVIDF0QZg/jfw8=
Subject key identifier: C9:E6:BA:C8:CC:70:71:C9:46:06:71:B2:EA:E5:49:8E:18:CC:17:EA
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial: 019896A5F9106C314ED944EDEBD5954B2445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number: 098F
Signing time: Mon 11 Aug 2025 01:01:56 +0000
Manifest this update: Mon 11 Aug 2025 01:01:56 +0000
Manifest next update: Tue 12 Aug 2025 01:01:56 +0000
Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: DBQQmqRrO/RAu5EtVM1mnzpOnXlFrij3Ql45I43IEMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:f9:10:6c:31:4e:d9:44:ed:eb:d5:95:4b:24:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Validity
Not Before: Aug 11 01:01:56 2025 GMT
Not After : Aug 12 01:01:56 2025 GMT
Subject: CN=c9e6bac8cc7071c9460671b2eae5498e18cc17ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:85:6c:9c:c4:6f:c2:e6:da:b7:c9:d7:cd:
3a:b4:b6:8a:f3:3b:95:dc:ad:bb:87:32:85:f2:bb:
09:52:f6:b1:75:f3:23:64:98:d8:dd:be:85:a4:79:
56:f7:ee:32:19:c7:34:6b:1c:de:d0:a9:04:49:9d:
1b:cd:5b:3a:64:70:5b:cd:98:8f:ab:db:c7:00:0f:
68:7a:04:07:11:07:87:47:ed:f8:d5:cf:30:26:3e:
b0:94:4c:9a:1f:5f:c1:2a:1a:3f:e5:50:cb:34:84:
02:85:68:09:bb:fc:60:2b:26:28:98:4e:df:a1:1b:
05:e9:3d:d4:9c:bb:ea:11:0e:33:e1:50:66:19:28:
49:ae:a0:f0:85:de:9f:f6:02:1b:82:8c:14:ed:c1:
81:f5:78:f1:83:8f:33:f0:cf:b9:da:1f:d3:52:62:
4d:20:57:fc:ea:83:d4:72:f3:9b:38:08:92:25:67:
e5:00:6c:83:59:ac:db:88:8a:93:19:5b:46:50:f9:
92:3f:a6:d6:45:4d:37:5a:ef:8e:39:9e:08:be:6a:
d7:5d:0d:72:dd:bb:5f:16:f1:03:54:7a:c5:96:eb:
f2:4c:28:49:7e:49:f4:a5:58:b9:3f:e2:7f:6c:1d:
dc:95:6a:75:0e:ae:20:3b:46:4a:68:5e:43:31:9e:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E6:BA:C8:CC:70:71:C9:46:06:71:B2:EA:E5:49:8E:18:CC:17:EA
X509v3 Authority Key Identifier:
keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:2a:8b:c8:ec:52:1b:e5:a0:23:b9:2d:95:04:fa:c3:1a:2d:
a4:34:3d:05:a4:6a:04:8b:eb:53:bd:88:45:b2:5c:c2:38:22:
d2:d7:f4:d8:75:d0:b1:b3:b0:c5:76:08:db:d6:90:2d:7b:38:
89:0b:34:cc:9c:9e:96:78:59:00:a8:44:3c:80:95:d5:32:b5:
b9:bb:af:28:57:3e:c5:5f:16:cb:0c:f5:4c:2a:45:05:ba:28:
dd:22:60:bc:d0:24:81:27:69:43:4b:ec:4a:18:52:58:15:ea:
a4:ae:57:34:ad:70:fa:92:b9:d0:d0:21:e8:87:fe:cd:dc:c6:
bd:64:98:69:df:e4:e8:77:e5:26:83:1e:59:30:48:f0:94:27:
26:25:07:6f:49:8d:cd:0e:bb:78:d8:e7:d5:2b:14:b6:b9:f9:
83:6f:b1:d6:6f:cd:95:03:26:a3:34:92:09:d8:79:f2:d3:ac:
02:3a:ca:92:87:ca:43:9f:62:d9:ac:9c:46:71:b9:83:97:a7:
b0:e6:22:e7:bf:1b:92:20:d8:cd:38:dc:7a:43:c7:f4:cb:6c:
4d:f7:17:c2:69:e4:40:2c:3f:34:a6:63:40:93:3f:46:6e:43:
06:76:e5:09:5a:98:43:ec:95:a7:c6:4a:c6:90:ff:5a:43:aa:
4f:27:44:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:26:14 2025 by rpki-client