Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json)
Hash identifier: uB/wF/SW5av2Yi5NfbKvVrYN4oHTrv9mFOWfPmZhyLg=
Subject key identifier: 22:EF:E1:EA:7E:ED:22:B9:78:77:8E:90:AE:9B:F3:2A:0C:13:D0:0C
Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Certificate serial: 0198D473609DDD00B58CE8849B4F8908F472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
Manifest number: 09AF
Signing time: Sat 23 Aug 2025 01:03:07 +0000
Manifest this update: Sat 23 Aug 2025 01:03:07 +0000
Manifest next update: Sun 24 Aug 2025 01:03:07 +0000
Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: V4alwviW1firQJPHbsb0GyQW4wH8roXaPe1jh3Wwq0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:60:9d:dd:00:b5:8c:e8:84:9b:4f:89:08:f4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c
Validity
Not Before: Aug 23 01:03:07 2025 GMT
Not After : Aug 24 01:03:07 2025 GMT
Subject: CN=22efe1ea7eed22b978778e90ae9bf32a0c13d00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:84:6f:ec:14:ee:d2:2c:ec:10:9a:48:7c:b8:
ea:95:c9:38:7f:e1:a2:d0:3b:7b:b3:b1:5a:73:56:
87:f8:28:8c:b7:49:95:c0:0d:46:eb:78:5d:45:96:
a2:c6:39:27:15:10:63:a3:fa:f2:ac:5c:83:36:cc:
ed:1e:e6:c9:00:ad:16:eb:60:bd:f4:8e:13:57:b8:
32:c6:fe:7d:20:bc:04:9f:70:35:37:5d:66:59:22:
0b:db:e7:0c:1d:5c:07:9c:76:ec:d4:88:cf:cf:03:
71:df:74:f6:55:be:08:ac:6a:26:4c:7e:6f:6c:1c:
41:87:ac:f6:d3:7d:7f:a3:83:26:8f:e3:ac:dd:b7:
6d:e4:63:e7:e8:87:4b:da:ee:de:63:f9:9d:69:f1:
91:6b:6e:86:25:bf:7b:d1:20:90:32:7a:7b:a5:c0:
45:56:82:0e:0b:d4:42:92:7e:f1:6e:62:08:01:1c:
4b:78:af:eb:65:da:0c:8d:0a:65:e8:3c:16:e6:58:
84:e2:cb:a7:03:e7:94:ef:4e:01:3d:cf:f0:73:d2:
82:1b:f3:07:06:87:66:d0:96:29:6f:ce:65:a4:cb:
57:90:5c:3b:fe:54:99:0f:b3:82:fd:c4:31:cf:e4:
c4:87:97:f9:51:8a:5c:d8:22:a3:23:86:dc:64:d9:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EF:E1:EA:7E:ED:22:B9:78:77:8E:90:AE:9B:F3:2A:0C:13:D0:0C
X509v3 Authority Key Identifier:
keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0e:e0:96:ac:4f:c0:5e:62:a2:22:39:71:7b:44:f2:92:53:
41:0f:2f:cf:ec:7a:a9:05:8d:97:e6:72:5f:32:b8:ad:cd:a9:
92:84:4f:73:78:e8:74:f8:bf:ec:c1:ae:63:39:44:0c:67:ce:
4b:15:8c:d9:15:f0:47:6f:07:92:c5:f4:e1:87:37:5a:bc:f1:
91:19:9d:13:a0:b6:df:5a:d4:5c:a4:df:8d:d6:2f:b9:08:4e:
bd:da:ba:65:5f:23:5e:e3:07:b8:1c:8c:c4:ef:a5:6f:e8:89:
91:b2:14:af:0a:28:bc:83:2f:e0:26:66:c9:02:96:28:14:ad:
fe:d7:5c:02:61:2d:44:cd:21:a6:1a:75:be:57:1d:9c:52:b2:
77:e0:5c:d8:67:19:cb:07:25:3c:ac:d8:1d:7c:d0:0f:35:8b:
40:af:8e:f4:05:1d:d9:23:19:2e:cc:9b:20:6f:b7:a0:01:7c:
d1:8e:74:c9:75:22:ad:58:a7:c1:97:45:b3:5f:a6:dd:c9:d8:
d8:46:76:f5:77:a1:8f:d6:44:35:db:0c:f1:fd:bc:d1:00:10:
b1:43:f6:f1:cf:5d:ed:70:7b:56:ca:90:58:38:cb:83:3c:62:
64:7e:68:e4:67:4e:b6:2a:b2:dc:99:08:b4:c8:d1:b0:10:c1:
5f:e5:d9:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc2Cd3QC1jOiEm0+JCPRyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNGQwY2E2YmI0OWQ2Yzk3YTkzYTMzNDk1Nzc2ZGUyNzUw
MzNkNGMwHhcNMjUwODIzMDEwMzA3WhcNMjUwODI0MDEwMzA3WjAzMTEwLwYDVQQD
EygyMmVmZTFlYTdlZWQyMmI5Nzg3NzhlOTBhZTliZjMyYTBjMTNkMDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+YRv7BTu0izsEJpIfLjqlck4f+Gi
0Dt7s7Fac1aH+CiMt0mVwA1G63hdRZaixjknFRBjo/ryrFyDNsztHubJAK0W62C9
9I4TV7gyxv59ILwEn3A1N11mWSIL2+cMHVwHnHbs1IjPzwNx33T2Vb4IrGomTH5v
bBxBh6z2031/o4Mmj+Os3bdt5GPn6IdL2u7eY/mdafGRa26GJb970SCQMnp7pcBF
VoIOC9RCkn7xbmIIARxLeK/rZdoMjQpl6DwW5liE4sunA+eU704BPc/wc9KCG/MH
Bodm0JYpb85lpMtXkFw7/lSZD7OC/cQxz+TEh5f5UYpc2CKjI4bcZNn2twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLv4ep+7SK5eHeOkK6b8yoME9AMMB8GA1UdIwQY
MBaAFM9NDKa7SdbJepOjNJV3beJ1Az1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85Mzk1YTAtMjNiOC00ZTQ2LTllNDkt
YWMwYmQzN2M5ZGMxLzEvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85Mzk1YTAtMjNiOC00ZTQ2LTllNDktYWMwYmQzN2M5ZGMx
LzEvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACw7glqxP
wF5ioiI5cXtE8pJTQQ8vz+x6qQWNl+ZyXzK4rc2pkoRPc3jodPi/7MGuYzlEDGfO
SxWM2RXwR28HksX04Yc3WrzxkRmdE6C231rUXKTfjdYvuQhOvdq6ZV8jXuMHuByM
xO+lb+iJkbIUrwoovIMv4CZmyQKWKBSt/tdcAmEtRM0hphp1vlcdnFKyd+Bc2GcZ
ywclPKzYHXzQDzWLQK+O9AUd2SMZLsybIG+3oAF80Y50yXUirVinwZdFs1+m3cnY
2EZ29Xehj9ZENdsM8f280QAQsUP28c9d7XB7VsqQWDjLgzxiZH5o5GdOtiqy3JkI
tMjRsBDBX+XZiw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:55 2025 by rpki-client