Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier: nuxRk9/T7cQuIKI05e6ReOBp5dPzNiRkf9WGTQaRDbI=
Subject key identifier: 44:68:35:98:39:16:52:18:AF:33:AC:AA:38:06:82:C5:AD:79:19:1E
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial: 019921B2183F6D7BAC4ABAC468FD34206FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number: 09D7
Signing time: Sun 07 Sep 2025 01:02:23 +0000
Manifest this update: Sun 07 Sep 2025 01:02:23 +0000
Manifest next update: Mon 08 Sep 2025 01:02:23 +0000
Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: 5Ca/D2Lh8gmCl6mGQlBQY/ALav9VwH/sRAiVVA66PGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:18:3f:6d:7b:ac:4a:ba:c4:68:fd:34:20:6f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Validity
Not Before: Sep 7 01:02:23 2025 GMT
Not After : Sep 8 01:02:23 2025 GMT
Subject: CN=4468359839165218af33acaa380682c5ad79191e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:00:6a:d7:70:ac:a4:70:da:46:96:6d:ba:50:
38:e9:fc:80:45:aa:15:0e:48:30:89:1d:ef:38:61:
77:a1:d4:3a:df:e0:6f:53:4e:7a:1d:cd:58:e5:05:
a4:c0:0e:e6:d6:67:73:2f:9a:63:26:54:69:46:c2:
fb:61:7b:04:6e:f4:7d:6f:19:5b:71:07:00:df:81:
d6:2b:9e:24:43:73:43:7f:c4:39:77:8b:cd:49:93:
83:6d:fa:87:ff:3d:c9:9c:e9:12:82:5f:44:ce:de:
1b:61:e6:2b:36:4d:2b:d1:8d:5c:09:e6:2f:de:d9:
45:04:57:3f:a2:bb:5d:dc:cd:a2:74:e2:38:d5:1d:
a3:d1:9e:bb:9f:1d:39:01:5f:c1:80:e5:69:c0:a3:
1a:0d:8a:21:e1:06:6d:0e:6f:c5:ce:20:59:34:18:
c0:4e:ad:00:c4:2b:d0:3a:e5:c9:16:58:be:9b:0a:
68:b3:9c:9a:fb:c7:af:3d:60:0b:87:95:9a:91:85:
47:7e:3a:13:b2:62:af:5f:83:20:e5:cc:3b:89:0b:
93:21:41:cd:7e:1a:dd:9e:47:f2:c2:b2:bc:49:e5:
94:d4:51:ac:e9:07:2b:68:e3:eb:45:57:94:9a:e8:
1a:ba:b7:19:fa:9b:76:b4:c1:79:1f:6c:9a:65:01:
14:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:68:35:98:39:16:52:18:AF:33:AC:AA:38:06:82:C5:AD:79:19:1E
X509v3 Authority Key Identifier:
keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a1:cc:a8:95:42:17:2d:86:6a:0e:96:54:6a:6c:d9:9f:91:
a2:0c:6a:a2:19:9b:28:8a:86:21:1a:fa:c6:b2:5d:77:88:56:
d9:46:00:41:7f:29:57:4f:b0:5a:d6:86:d3:3a:cb:55:b4:24:
10:3b:0f:6f:eb:9b:38:7e:c4:33:88:3b:a4:db:c7:c5:f2:bf:
4c:db:7a:e0:1c:f0:a5:8e:d0:09:dc:ca:21:c3:65:87:96:67:
78:b1:99:99:62:6f:51:c9:6a:af:0b:96:9b:ee:28:db:37:9a:
f7:b0:7b:0a:79:61:20:37:9c:e7:f4:9c:7d:9b:26:42:39:6d:
15:4d:3e:4b:9d:b1:c8:7d:76:24:7e:5a:48:f7:8b:d7:f9:d7:
82:b6:91:5d:bd:f6:9e:54:a9:42:4e:8b:2f:1d:2f:7f:9a:52:
13:db:34:d2:26:39:f4:8f:6d:8a:a8:55:87:d4:e1:80:90:3b:
65:d7:33:06:f9:aa:4c:ce:5a:f8:c6:df:63:9c:0a:9a:82:d5:
18:c0:4c:26:6c:dd:7a:a5:7b:a6:09:c9:6a:33:ea:66:8b:63:
a6:f4:04:4e:27:89:0c:07:08:de:2d:4d:be:0d:7f:7e:d4:c4:
46:59:13:ab:9d:f4:06:84:96:50:08:ec:de:68:8c:b6:33:30:
5b:e9:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:05 2025 by rpki-client