Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier: XzctIHmJIc2k+plIPPy0ngH00ZMlB8MtcytkOQgg8KU=
Subject key identifier: 5A:EC:D7:94:A1:4D:14:08:48:03:37:E7:D2:3D:C2:04:4C:A1:A2:A2
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial: 019A71B8ECE358097F45081B2370A0627DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number: 0A85
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: lGdEKTCBsy3gFregSd7T8qXh6Q2F02LrS6F2h7yJ12s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ec:e3:58:09:7f:45:08:1b:23:70:a0:62:7d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=5aecd794a14d1408480337e7d23dc2044ca1a2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:00:fa:e2:fe:55:e7:28:65:17:15:31:4c:
0b:7e:a1:37:d9:c7:94:32:cf:42:d3:b2:48:9b:b1:
d4:d1:e1:71:29:fe:87:72:d3:ff:38:ce:89:19:1f:
4e:50:77:ac:1b:06:71:94:37:47:89:7b:3f:5d:f9:
d6:66:ab:6f:e5:27:09:94:8e:4c:0d:10:57:e7:8c:
c2:e9:82:e1:71:2b:34:fd:c4:b1:d3:af:2a:52:ea:
9e:a0:e2:1e:b7:15:f8:61:33:4c:7e:e5:a3:71:34:
f7:1b:ba:57:3d:64:4f:e2:b2:26:33:dd:38:de:71:
00:60:44:a3:ba:a1:7e:68:bc:c8:c5:85:00:03:ed:
5a:27:dc:58:da:66:00:93:3b:13:3f:df:6a:25:2a:
c5:cb:9e:e6:d0:e5:ca:a5:e2:3b:12:33:39:91:1a:
73:f6:c4:90:8f:e9:e5:69:55:0a:9e:54:27:f3:3e:
60:d4:9f:42:ea:58:9d:df:80:61:d7:ef:56:6e:56:
ed:b3:ab:da:08:a2:41:ef:92:19:f7:10:18:0a:16:
f7:b7:31:e7:5c:ee:d4:31:3a:ff:b1:7d:a1:d1:1c:
15:f1:0a:fa:a2:fc:54:ce:8e:32:d4:52:99:df:de:
c4:89:3c:0e:3a:35:ca:80:ff:8a:7e:25:2a:17:81:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EC:D7:94:A1:4D:14:08:48:03:37:E7:D2:3D:C2:04:4C:A1:A2:A2
X509v3 Authority Key Identifier:
keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:88:73:6e:27:fd:79:71:02:84:56:b6:8d:2e:52:a4:b7:e0:
8b:9e:e7:e5:03:07:7d:19:b7:fc:51:bb:f9:ea:6b:2d:8a:5d:
6e:f2:07:6c:7f:96:4e:44:62:fb:7b:9c:ce:ad:e0:54:ef:62:
a1:77:1c:29:8d:c8:1b:c3:0f:a8:91:1e:a6:73:07:64:97:66:
bd:38:35:06:08:77:a6:aa:5c:46:d0:87:e6:f6:fa:db:2c:53:
42:77:87:6d:93:9e:1e:af:d1:3e:bb:20:ba:d2:07:fc:50:38:
c3:3e:d8:ea:32:06:69:d4:38:19:54:e8:c2:2f:ef:09:16:b5:
f3:ae:b5:b6:3f:3c:b9:cd:63:f8:eb:0d:d9:90:69:57:2a:ca:
ff:4e:09:3a:de:52:d9:19:b8:59:9b:61:13:36:c5:5a:04:9b:
fa:38:cb:d8:39:b8:d9:1f:0d:e8:a1:6c:96:3a:94:c4:83:39:
c7:5b:2f:e5:0b:ca:49:2a:80:81:52:25:d7:22:86:d3:34:19:
35:95:03:c1:96:c1:bf:85:db:af:f3:a6:f3:00:ee:38:d1:33:
82:00:5b:9f:ca:ec:e9:b0:7d:a2:85:3d:1a:40:7c:8b:a4:b3:
ea:b3:74:8c:2c:f5:54:6f:cc:75:00:4e:c9:2c:01:e1:1f:bb:
63:b0:ee:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuOzjWAl/RQgbI3CgYn3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNGQwY2E2YmI0OWQ2Yzk3YTkzYTMzNDk1Nzc2ZGUyNzUw
MzNkNGMwHhcNMjUxMTExMDcwMjE1WhcNMjUxMTEyMDcwMjE1WjAzMTEwLwYDVQQD
Eyg1YWVjZDc5NGExNGQxNDA4NDgwMzM3ZTdkMjNkYzIwNDRjYTFhMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVMA+uL+VecoZRcVMUwLfqE32ceU
Ms9C07JIm7HU0eFxKf6HctP/OM6JGR9OUHesGwZxlDdHiXs/XfnWZqtv5ScJlI5M
DRBX54zC6YLhcSs0/cSx068qUuqeoOIetxX4YTNMfuWjcTT3G7pXPWRP4rImM904
3nEAYESjuqF+aLzIxYUAA+1aJ9xY2mYAkzsTP99qJSrFy57m0OXKpeI7EjM5kRpz
9sSQj+nlaVUKnlQn8z5g1J9C6lid34Bh1+9Wblbts6vaCKJB75IZ9xAYChb3tzHn
XO7UMTr/sX2h0RwV8Qr6ovxUzo4y1FKZ397EiTwOOjXKgP+KfiUqF4EkdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrs15ShTRQISAM359I9wgRMoaKiMB8GA1UdIwQY
MBaAFM9NDKa7SdbJepOjNJV3beJ1Az1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85Mzk1YTAtMjNiOC00ZTQ2LTllNDkt
YWMwYmQzN2M5ZGMxLzEvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85Mzk1YTAtMjNiOC00ZTQ2LTllNDktYWMwYmQzN2M5ZGMx
LzEvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmohzbif9
eXEChFa2jS5SpLfgi57n5QMHfRm3/FG7+eprLYpdbvIHbH+WTkRi+3uczq3gVO9i
oXccKY3IG8MPqJEepnMHZJdmvTg1Bgh3pqpcRtCH5vb62yxTQneHbZOeHq/RPrsg
utIH/FA4wz7Y6jIGadQ4GVTowi/vCRa18661tj88uc1j+OsN2ZBpVyrK/04JOt5S
2Rm4WZthEzbFWgSb+jjL2Dm42R8N6KFsljqUxIM5x1sv5QvKSSqAgVIl1yKG0zQZ
NZUDwZbBv4Xbr/Om8wDuONEzggBbn8rs6bB9ooU9GkB8i6Sz6rN0jCz1VG/MdQBO
ySwB4R+7Y7Du7w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:27 2025 by rpki-client