Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier: OufjV5rmX30fVdZzSXSKnZGlkBadfV5GpC1b8w5PTnY=
Subject key identifier: A3:49:59:8F:CA:16:96:0F:07:B6:AC:D4:4C:FF:98:0B:41:9D:EE:42
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial: 0199FBEAF068F8BB93FCA80B8743811C438D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number: 0A48
Signing time: Sun 19 Oct 2025 10:01:42 +0000
Manifest this update: Sun 19 Oct 2025 10:01:42 +0000
Manifest next update: Mon 20 Oct 2025 10:01:42 +0000
Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: E3zckpiPy4dmJ8dmhthxI6zt5yFBEyx8IaBybnd3Hm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:f0:68:f8:bb:93:fc:a8:0b:87:43:81:1c:43:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Validity
Not Before: Oct 19 10:01:42 2025 GMT
Not After : Oct 20 10:01:42 2025 GMT
Subject: CN=a349598fca16960f07b6acd44cff980b419dee42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:a6:5d:5c:1c:d6:b9:ca:5e:5a:45:29:b6:
a6:11:33:22:79:30:b9:72:78:f5:15:86:97:9f:4d:
82:c0:49:d8:78:bf:9a:f0:36:b7:47:b9:49:58:27:
e3:eb:31:eb:64:c6:1c:d4:9d:49:62:2e:e8:40:7a:
c5:52:0e:aa:5a:1d:ed:c2:26:10:f8:b5:da:0e:e6:
47:17:3c:e1:68:b4:e6:6a:b5:ea:0c:b9:92:f4:96:
6f:67:35:b8:d7:c0:a3:5f:2c:2b:67:2d:ea:fa:4b:
1e:e7:e4:b8:6e:4d:c7:fc:7b:9f:0e:97:47:1d:82:
71:c0:b2:cc:f7:15:f7:ee:8e:6b:2d:d6:4a:e3:dd:
8b:3d:56:73:16:36:f5:09:b1:75:16:45:01:79:73:
7e:12:62:0d:21:13:24:0a:da:b6:5c:a5:b5:4b:7d:
76:0e:5b:ce:b9:eb:ad:40:3e:a2:74:ba:4e:40:a5:
90:1d:a2:0e:cc:b6:19:9d:57:5d:77:3c:65:6e:eb:
79:bf:ed:6e:73:4f:49:ad:dc:e3:47:23:0c:b4:43:
24:07:92:65:ec:75:47:8d:1d:ed:ee:fc:f5:8c:4d:
df:a5:0b:ab:9c:9e:85:ff:33:fb:a0:f6:b1:e3:78:
b7:1c:bc:6a:5c:7a:b9:c4:9b:a4:b2:b4:01:a5:a3:
bc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:49:59:8F:CA:16:96:0F:07:B6:AC:D4:4C:FF:98:0B:41:9D:EE:42
X509v3 Authority Key Identifier:
keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:87:1d:85:72:cc:23:66:9d:2b:09:d3:1e:28:53:1c:b3:6e:
40:96:95:a9:32:0d:6c:58:ca:6e:f9:0b:bb:0a:a1:2a:fb:9c:
25:bb:31:42:44:e5:a4:47:c4:8b:e7:02:90:44:15:09:18:db:
b4:eb:d8:28:7e:f3:aa:6e:27:b9:f5:09:7f:1a:e9:0b:ab:44:
c3:e7:04:d9:00:c9:26:15:bf:a7:b7:50:1e:ef:3a:54:c1:97:
2e:42:99:af:10:e4:e5:97:71:d9:7e:39:f6:09:ec:97:0a:87:
df:0a:66:72:d3:3c:cc:94:0c:39:64:06:b9:29:88:7a:4d:c1:
31:3b:88:a6:18:36:1e:a3:f7:08:3f:e3:77:1f:29:a1:54:b3:
7d:82:77:67:08:32:06:5d:7f:37:fa:9a:85:93:dd:36:73:15:
98:a9:37:dc:b6:90:70:00:ea:19:ab:19:24:68:7e:8c:d4:7e:
77:77:e6:91:4d:c9:06:66:df:12:a4:d0:24:ad:c5:c1:b8:16:
7f:31:9d:c2:86:72:50:83:ce:d9:97:13:b8:3b:67:02:50:39:
45:45:e2:11:94:9b:c9:8f:69:6e:5f:32:fc:df:12:8d:0d:dc:
a9:8f:a2:ad:5b:f9:a6:f1:19:86:8a:01:f9:fe:f6:c3:29:3f:
51:62:85:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:01 2025 by rpki-client