Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier: yeXiQnAnHaSSeV2VMYFUYzS7MHjyUjnnPyBkYcSd+2s=
Subject key identifier: 04:2E:19:C0:BC:EE:5E:D1:DD:67:DF:4A:E5:BF:D8:66:C5:A6:E2:69
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial: 0197D399CA8669DF2DB5C71A63BF88B0E305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number: 092A
Signing time: Fri 04 Jul 2025 04:02:40 +0000
Manifest this update: Fri 04 Jul 2025 04:02:40 +0000
Manifest next update: Sat 05 Jul 2025 04:02:40 +0000
Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: AGvgD/XycLojlHCpByEP7JoJtRONrJyZgbZ0raHexn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 04:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d3:99:ca:86:69:df:2d:b5:c7:1a:63:bf:88:b0:e3:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Validity
Not Before: Jul 4 04:02:40 2025 GMT
Not After : Jul 5 04:02:40 2025 GMT
Subject: CN=042e19c0bcee5ed1dd67df4ae5bfd866c5a6e269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:56:01:d1:88:f0:bb:36:7d:11:2b:64:f7:
c9:f0:d6:9c:0f:b3:89:be:74:fd:10:8b:97:c2:6e:
0b:e2:c4:14:12:cc:28:30:7e:e1:fc:ab:b3:2f:ae:
cb:38:f7:dc:48:11:99:e4:cf:1c:4b:9f:3e:21:b5:
82:11:2b:24:f5:f6:d7:d6:b2:57:2b:cc:40:9b:18:
0d:80:8a:b1:ee:4a:42:b3:83:5d:56:c7:c5:69:48:
cb:40:fb:2e:07:20:b4:e0:7b:84:65:01:5d:00:d1:
75:9f:53:78:81:fa:f4:6a:be:54:c6:ed:f1:f6:c5:
2c:81:3b:2c:25:69:08:45:ee:40:80:8b:da:c3:ff:
b0:34:2b:54:f8:39:94:b7:d9:6f:86:c8:4d:f5:f4:
c7:55:81:06:8c:fa:84:87:1e:4f:93:20:4d:59:19:
29:5e:64:59:88:f9:62:ae:48:5d:6d:c6:47:45:f4:
9b:79:b6:9f:c9:e8:2d:91:3b:f4:ad:54:0a:e9:ef:
e2:89:91:d9:09:6c:3f:ce:00:9a:47:7a:07:35:29:
e3:02:7f:52:73:e2:7d:45:c1:e7:a6:d9:51:23:b6:
96:60:32:9f:37:7e:1b:b6:b7:42:1a:e5:1c:cc:bd:
c7:44:5e:33:a9:5f:bb:2b:25:83:8c:71:07:54:75:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2E:19:C0:BC:EE:5E:D1:DD:67:DF:4A:E5:BF:D8:66:C5:A6:E2:69
X509v3 Authority Key Identifier:
keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:96:f0:10:b1:4a:2f:15:d8:4e:ac:ff:ba:90:c0:5d:14:71:
bd:91:81:b1:e4:09:2b:9b:ec:90:d1:64:ba:26:54:1d:f5:b0:
d5:32:f7:d5:5d:91:e4:75:82:bb:fd:3d:5a:2a:fa:3a:98:4a:
6a:88:36:17:2a:29:b7:27:0a:65:76:2d:9b:08:2d:12:0e:90:
7e:c6:f5:46:c4:4f:9e:86:c4:4b:ba:55:be:e4:57:6e:3f:0c:
4c:32:6a:c6:83:04:f3:97:22:09:86:70:cf:23:12:dc:8f:3b:
e3:f9:34:8b:5e:23:b6:46:6a:08:96:01:b2:e4:85:1c:09:43:
6e:04:5c:3d:e4:a5:da:6a:53:61:b2:da:6d:92:8d:74:85:01:
73:b3:cb:44:e4:12:13:46:b8:6e:5f:57:f2:82:31:21:22:7b:
64:56:32:ec:fb:ab:24:33:f1:54:77:5b:89:20:45:fb:b2:e5:
ad:37:20:2e:f6:df:b4:31:5a:47:42:46:fb:23:2a:c8:7b:6a:
80:ec:68:58:ff:c7:01:5d:f8:93:7a:f2:4c:ae:24:91:62:17:
fe:40:e8:f1:8e:07:cd:4e:2c:a1:f7:2e:75:ef:cf:67:53:70:
54:3f:a0:fc:f5:0d:6b:29:68:64:e5:12:35:3b:ac:13:39:bd:
57:20:ad:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:44:29 2025 by rpki-client