Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
File: Z42bouOWhCO-_F7tBXGbMABX18s.mft (raw, json)
Hash identifier: 5zUht+ehjELh4sfygyeE/0KlHxNUPhKKq77ohe/kskA=
Subject key identifier: CF:66:66:E3:1C:F9:20:43:7E:0F:FF:98:17:80:AB:C9:B5:1A:78:85
Authority key identifier: 67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
Certificate issuer: /CN=678d9ba2e3968423befc5eed05719b300057d7cb
Certificate serial: 0198D4741F91F8E23A9172C00C8E9F155583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
Manifest number: 033F
Signing time: Sat 23 Aug 2025 01:03:56 +0000
Manifest this update: Sat 23 Aug 2025 01:03:56 +0000
Manifest next update: Sun 24 Aug 2025 01:03:56 +0000
Files and hashes: 1: Z42bouOWhCO-_F7tBXGbMABX18s.crl (hash: VHGRJWk1QSoJgvZRxFajKvuDFs0iyrsYrhYoPd6ftMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:1f:91:f8:e2:3a:91:72:c0:0c:8e:9f:15:55:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678d9ba2e3968423befc5eed05719b300057d7cb
Validity
Not Before: Aug 23 01:03:56 2025 GMT
Not After : Aug 24 01:03:56 2025 GMT
Subject: CN=cf6666e31cf920437e0fff981780abc9b51a7885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:40:39:5b:5f:f3:a9:f4:4e:39:61:25:75:
97:93:2d:22:b2:83:5e:d6:43:72:68:19:de:de:82:
3b:71:8c:02:6b:3f:a5:fe:39:4d:b1:4c:01:66:b7:
c5:9c:da:e8:02:51:54:cb:8f:8b:5c:26:10:a7:0b:
b5:1b:bb:de:7d:70:db:bb:a6:d5:b8:6b:65:d7:2f:
73:d3:63:82:7b:37:3d:d1:b1:cf:42:23:2a:91:39:
4c:83:40:d3:f1:e5:42:d5:f0:b2:8e:2f:aa:8c:37:
8d:b4:2c:0d:c8:a1:58:7c:be:a6:a1:ac:50:b9:29:
01:6a:ec:74:5d:43:31:52:25:19:35:50:78:f3:fc:
ae:4a:14:2b:25:84:34:05:82:64:1e:15:fd:5c:d5:
0e:2e:41:8b:24:fa:6c:b6:97:4c:75:67:1a:1c:f6:
40:07:c4:eb:ee:0b:b2:24:12:5b:ae:d3:b7:82:da:
27:45:90:dc:68:5f:c5:c5:5a:73:29:2b:25:9a:32:
61:c3:22:fb:52:42:69:31:fb:cb:a3:85:74:d8:51:
a7:d1:fd:a8:b5:06:b8:60:c4:f1:2c:8a:f3:2c:fd:
21:8d:f8:d5:99:bf:d3:58:98:13:45:da:26:04:76:
c4:a4:14:b0:24:52:f3:45:be:9e:1d:27:bd:ac:aa:
de:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:66:66:E3:1C:F9:20:43:7E:0F:FF:98:17:80:AB:C9:B5:1A:78:85
X509v3 Authority Key Identifier:
keyid:67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:62:5e:10:5c:8b:fc:86:2f:20:b0:01:1e:ca:d5:03:0c:68:
27:74:d4:19:8b:fe:64:14:12:ee:1a:64:0a:9d:b2:f6:1f:a8:
4a:ee:25:21:88:a3:fb:b3:6a:82:75:c7:ce:56:14:bc:27:e6:
b1:f6:39:d5:f4:c8:e1:bd:50:42:4d:c2:1d:df:e0:3e:10:50:
2c:14:a3:e0:c7:32:bd:16:db:79:ee:fc:f6:31:d7:1d:e0:99:
e8:15:31:bc:d3:55:73:45:ea:8d:1c:9a:14:51:ea:d8:71:8e:
5c:e8:7d:8f:91:27:be:c2:c4:3a:06:03:ce:46:f9:0e:9b:48:
ed:52:bf:21:4b:8b:ce:7c:e2:7c:a0:b9:49:96:3d:c9:ac:f8:
4a:15:6b:e2:91:d5:32:63:1f:42:e6:61:38:3e:e3:ec:45:41:
a5:7e:f2:bb:cf:6f:d3:fc:bb:a5:fd:d1:83:54:46:11:a2:49:
51:c0:d4:01:2d:78:3c:4e:f0:d7:f8:8e:df:55:c4:2b:4d:43:
0d:96:62:b8:e2:9c:09:f7:4e:6e:fe:cc:16:eb:44:55:64:ae:
c5:7e:c6:b0:0e:2d:b4:4c:41:01:cc:34:42:80:a7:7b:51:a4:
ab:a1:ba:50:f2:54:ea:bd:a0:ab:32:ac:7b:6c:66:ca:f2:6b:
c1:74:6a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:43 2025 by rpki-client