Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
File: Z42bouOWhCO-_F7tBXGbMABX18s.mft (raw, json)
Hash identifier: yCOiakhkNKZQEODaJbt7OR483cWe4AxkDqdqrnIV9Jg=
Subject key identifier: 60:D9:7C:65:C5:2F:F5:29:95:57:EF:59:6D:8D:5C:34:1C:90:06:11
Authority key identifier: 67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
Certificate issuer: /CN=678d9ba2e3968423befc5eed05719b300057d7cb
Certificate serial: 019896A50B3CE5733D131E0EC25B3209A9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
Manifest number: 031F
Signing time: Mon 11 Aug 2025 01:00:55 +0000
Manifest this update: Mon 11 Aug 2025 01:00:55 +0000
Manifest next update: Tue 12 Aug 2025 01:00:55 +0000
Files and hashes: 1: Z42bouOWhCO-_F7tBXGbMABX18s.crl (hash: BuNyumrI2SRbmN3n+1jQ4d3c79Su2MqKCOxlJL3p+NM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:0b:3c:e5:73:3d:13:1e:0e:c2:5b:32:09:a9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678d9ba2e3968423befc5eed05719b300057d7cb
Validity
Not Before: Aug 11 01:00:55 2025 GMT
Not After : Aug 12 01:00:55 2025 GMT
Subject: CN=60d97c65c52ff5299557ef596d8d5c341c900611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:d4:8b:27:46:33:f4:2b:ba:a4:5c:e4:ba:
f9:a6:40:f3:67:eb:e8:0d:dc:cb:bb:87:fa:1c:cc:
02:3f:94:59:77:ea:71:83:4d:69:9a:9e:ee:71:24:
ac:ee:b5:c0:8f:67:bf:32:2c:d3:dd:99:64:b6:e3:
62:d9:4c:59:76:7e:f5:87:89:7f:66:6a:c5:06:29:
97:67:8d:f2:0e:d5:2a:bd:a8:c0:b7:25:6c:59:30:
ad:bf:94:8d:52:6f:95:8e:70:4c:1a:51:27:cb:9b:
20:cf:26:80:05:43:c6:29:da:31:21:89:06:68:c6:
53:ee:71:77:ce:cd:1f:41:d5:16:ac:9d:4d:61:66:
43:78:78:f7:2c:4b:98:aa:dd:22:84:64:03:28:c4:
06:54:e5:95:dd:df:d9:23:62:47:ee:16:01:bc:29:
65:de:6e:cb:95:bf:9b:a4:5a:8d:5d:ff:11:19:dd:
fc:15:72:73:22:ca:39:62:48:95:e5:f2:14:a7:ea:
35:48:38:c1:3a:a6:01:d6:fa:af:97:46:91:18:db:
d3:81:c3:e9:11:c6:7b:40:06:f3:5f:8f:42:1e:bb:
05:1e:2e:39:ed:37:0b:5c:5e:93:77:c0:9e:e2:b0:
45:29:cb:32:68:0a:48:cb:dc:96:cc:fb:50:8f:8e:
9f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D9:7C:65:C5:2F:F5:29:95:57:EF:59:6D:8D:5C:34:1C:90:06:11
X509v3 Authority Key Identifier:
keyid:67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c5:d1:4e:96:9c:6b:4e:0f:3e:8d:02:9f:3a:9d:f8:d8:03:
1e:ec:e9:58:e6:7f:d1:ca:8d:ea:36:5e:b0:f9:16:dd:12:16:
7f:b1:6a:83:fb:57:0d:a2:72:c5:19:9b:d4:8b:ae:bc:5d:a9:
47:c1:c7:80:2d:35:91:50:bb:57:6e:c2:97:54:18:56:55:87:
53:2e:5d:bb:f7:33:cc:40:67:56:72:eb:b2:84:de:e6:8e:7e:
f5:57:d3:05:9a:6a:08:2c:44:d0:b5:db:c9:e8:08:7d:85:65:
f3:df:02:d1:05:a7:f0:e5:b9:99:c0:37:0a:98:be:0d:f9:7d:
ca:6e:65:66:44:88:a0:45:c1:85:19:f6:6d:ba:95:7c:26:62:
31:a2:e1:8d:bf:62:4e:61:a9:cf:c1:27:5c:98:a7:d2:1e:ab:
f4:85:8d:77:1b:9a:ca:83:4f:d9:d8:4e:4a:02:17:fe:c4:d8:
84:39:d1:b1:0b:47:80:36:0e:11:ce:8e:46:7d:47:65:3f:5b:
8b:bb:00:d7:e1:17:92:f5:25:86:74:5e:4b:ad:f1:51:7f:ae:
ab:80:b8:6e:fa:8d:9f:57:67:07:5a:3b:09:4b:f1:ec:41:24:
00:76:78:db:85:01:81:38:95:75:18:12:c4:54:d1:57:a1:93:
72:57:cd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:33 2025 by rpki-client