Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier: Ju+t0/9lmtJS318+OlKLGPAVsANtvP3zecGBnahGR6w=
Subject key identifier: 2E:EE:20:F1:71:19:95:1E:5A:18:DC:CC:65:C1:98:9A:85:9C:89:E4
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial: 019A4D0725EFD260EA40B2BFE553AB59AACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number: 0A72
Signing time: Tue 04 Nov 2025 04:01:45 +0000
Manifest this update: Tue 04 Nov 2025 04:01:45 +0000
Manifest next update: Wed 05 Nov 2025 04:01:45 +0000
Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: 4gV63NNWJqsD8nxmiy9eBeVvAYtcXPmvCBjzaWzZzYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:25:ef:d2:60:ea:40:b2:bf:e5:53:ab:59:aa:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Validity
Not Before: Nov 4 04:01:45 2025 GMT
Not After : Nov 5 04:01:45 2025 GMT
Subject: CN=2eee20f17119951e5a18dccc65c1989a859c89e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:5b:53:cb:64:3b:bc:cf:4c:fc:db:f8:3d:
bb:ad:0a:13:2d:aa:be:10:11:b3:7d:81:93:06:b7:
60:1f:54:cf:ea:48:f1:6d:fb:fa:17:e6:b2:3d:1a:
10:1f:f0:92:45:5d:82:17:bb:92:26:9f:a1:48:04:
6a:5a:0c:2d:5c:8c:ec:16:2c:be:cd:1d:b6:76:0d:
0d:08:09:04:25:8e:89:47:f8:d1:71:f8:f4:d5:1c:
3f:c4:3d:13:c4:5d:65:05:f8:db:0c:2b:20:97:9c:
5a:57:39:57:ee:1d:ab:66:40:bd:35:ab:21:7d:44:
25:b7:43:57:b2:4f:21:b5:c1:b6:d6:7e:22:9a:42:
af:ee:3b:e1:fa:9f:cf:91:2c:36:b3:1a:80:a3:4b:
eb:d8:db:2a:6d:e3:a9:a1:d2:1f:87:9d:d9:73:5d:
40:5f:d5:88:26:00:8f:44:06:4d:73:0b:48:e3:0e:
6a:1a:65:5a:a5:c5:36:92:be:1a:c4:35:34:4a:6e:
8e:9e:21:c8:2c:5e:e0:b6:be:cc:d2:56:7c:cd:ed:
16:bb:6c:09:aa:80:74:7b:d2:e0:77:8a:7a:ac:4b:
0b:d4:f8:a2:89:3a:0f:14:8c:72:96:6d:84:18:de:
02:09:db:71:af:cf:c8:ab:62:c5:95:13:ec:18:aa:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EE:20:F1:71:19:95:1E:5A:18:DC:CC:65:C1:98:9A:85:9C:89:E4
X509v3 Authority Key Identifier:
keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:44:55:8c:eb:2c:38:a1:aa:a2:40:57:fe:d6:82:8e:79:a9:
3b:d5:51:e5:56:8d:cd:8a:c2:07:f7:85:0c:55:e5:98:bd:c6:
aa:c9:51:43:f5:55:d5:c5:53:c0:18:cf:eb:5c:63:9e:1c:1a:
b7:f0:61:ef:a4:b4:38:d6:eb:e0:98:1c:f3:22:6a:fc:22:ec:
64:af:81:a7:78:19:ca:2a:95:83:19:ef:f8:da:ee:c5:07:08:
ea:84:c3:76:1e:b5:f4:a3:a6:20:5c:3b:c8:9e:f1:28:11:0d:
d2:62:41:03:dd:fb:23:f6:ca:a9:ad:8d:5f:0a:4f:68:0f:39:
35:40:a4:6d:29:dd:b4:1d:b0:e8:f2:44:29:4d:f4:15:bb:9e:
7b:c3:6c:d5:91:55:da:45:1e:21:91:04:13:e4:86:65:77:3a:
c4:38:ab:f5:f6:1c:c9:c8:23:aa:e4:ff:f7:f2:a3:de:48:cb:
38:8d:36:15:20:b6:8b:ca:79:c5:ec:88:79:9c:54:af:5a:45:
c8:9b:ad:62:e2:e1:4a:e4:f4:60:c4:17:dd:e3:24:da:d3:cc:
63:90:5c:24:55:33:6b:1b:2b:3e:47:78:23:62:4d:f5:80:63:
b4:f0:df:6d:b9:99:12:00:fe:6b:8c:7e:bc:91:05:a4:f8:7c:
62:7e:06:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:46 2025 by rpki-client