Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier: iMpYYIw9GqG9hYONtUd+q0tCfSYlvlbqWzULWRMK6JY=
Subject key identifier: 6C:02:E6:A5:0D:E6:2A:32:C6:25:2C:C0:97:F7:CA:9E:B2:92:A8:B4
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial: 0197CBDFE1A20DA0C5163A26CEDDCF2FF996
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number: 0926
Signing time: Wed 02 Jul 2025 16:02:16 +0000
Manifest this update: Wed 02 Jul 2025 16:02:16 +0000
Manifest next update: Thu 03 Jul 2025 16:02:16 +0000
Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: z2rapVLbXIawSqUzSNhA9HyntE7k9jKmb6Mnd7LrCEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:df:e1:a2:0d:a0:c5:16:3a:26:ce:dd:cf:2f:f9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Validity
Not Before: Jul 2 16:02:16 2025 GMT
Not After : Jul 3 16:02:16 2025 GMT
Subject: CN=6c02e6a50de62a32c6252cc097f7ca9eb292a8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c3:77:28:70:eb:43:d9:0d:1e:31:ad:89:48:
99:9e:fa:71:a2:56:17:e2:9e:b5:10:ca:e9:2e:ff:
03:65:f7:75:ee:55:16:e7:ca:6f:33:0e:4a:e5:31:
22:7a:73:9e:54:ff:3f:95:15:4c:41:1d:5a:6f:b7:
d2:77:f1:25:46:81:9a:52:fb:e1:ec:b9:77:f5:75:
67:cf:5a:a8:13:04:7b:dd:f5:f1:28:70:03:b7:2b:
fb:d7:a4:21:11:06:dc:e4:19:6a:44:74:0e:24:d1:
a2:e0:4c:4f:a9:bc:08:e0:3b:a6:86:53:5f:a6:b0:
18:31:81:bc:26:a3:26:3e:7c:58:62:0c:43:69:37:
9e:36:98:b8:4e:bc:cf:39:6a:7d:6d:e5:11:1a:bc:
cf:75:d3:9b:06:b2:0b:64:97:72:d4:8e:b0:07:ac:
bc:d0:62:d0:42:d2:76:db:6b:72:53:c8:a5:e6:15:
7a:cd:8a:83:8d:e2:5b:4d:ed:04:93:4a:ed:ef:fc:
ff:fc:5b:32:4c:2c:84:a0:73:34:5c:25:86:4d:7d:
67:99:72:24:6c:80:72:72:27:8f:6e:4d:22:8c:52:
ef:3e:cf:ef:36:ca:f2:84:6e:3a:e3:be:02:49:14:
b7:9d:6c:48:23:43:2f:96:87:04:c8:72:1b:0a:b2:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:02:E6:A5:0D:E6:2A:32:C6:25:2C:C0:97:F7:CA:9E:B2:92:A8:B4
X509v3 Authority Key Identifier:
keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3e:19:08:d4:78:99:2e:02:ce:23:5d:31:d5:0c:72:83:08:
e6:35:57:37:e7:d6:96:17:63:b8:57:7b:36:66:2e:20:cb:93:
27:e9:d7:52:34:97:b1:ab:9d:d7:cb:3e:51:14:ff:d0:05:41:
a4:8a:4a:b3:64:d6:d9:8d:61:69:81:5c:ba:e9:33:60:85:f5:
b9:87:0c:cd:c7:f3:6a:f4:04:a4:4c:24:bc:66:14:4d:4d:ff:
33:7b:d8:71:16:73:92:a7:3e:d3:e9:e9:fc:ef:80:1c:3f:4b:
27:a7:b1:f4:d5:df:a1:b0:81:e8:0c:69:09:17:4d:55:b2:65:
75:10:43:40:26:00:43:c3:cc:71:4c:11:dd:6f:11:8f:e4:ea:
65:04:48:8d:61:34:4c:4c:0a:a4:77:69:46:70:a7:6c:1c:a4:
0a:65:3b:0e:59:c1:5c:c6:18:b0:3c:79:54:17:a8:b5:2c:53:
ea:d6:0a:c9:47:23:7b:85:75:fe:90:6c:5b:b9:c4:f2:a1:5b:
31:29:1e:a4:43:35:fb:1e:11:7a:47:96:35:b2:cf:6c:f3:64:
ce:da:91:10:69:7c:ba:64:ac:e0:b4:ce:a8:75:c4:6b:f6:6e:
ef:c7:45:34:d8:64:ad:3b:c3:fd:44:75:d1:8c:04:09:36:bd:
f4:b4:ac:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:53:40 2025 by rpki-client