Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
File: Z42bouOWhCO-_F7tBXGbMABX18s.mft (raw, json)
Hash identifier: 3oAECyM+CfBucF5CfIxwuk6PxAnikSAv6hEmJCjaSw4=
Subject key identifier: CC:46:6C:6F:36:7C:52:29:D0:28:17:E3:B1:5C:22:AC:34:77:8B:58
Authority key identifier: 67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
Certificate issuer: /CN=678d9ba2e3968423befc5eed05719b300057d7cb
Certificate serial: 019A4EF46E0DD0E20F4FDB1C5E1C70A4C9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
Manifest number: 0403
Signing time: Tue 04 Nov 2025 13:00:33 +0000
Manifest this update: Tue 04 Nov 2025 13:00:33 +0000
Manifest next update: Wed 05 Nov 2025 13:00:33 +0000
Files and hashes: 1: Z42bouOWhCO-_F7tBXGbMABX18s.crl (hash: lUv0GZMnmzRqlx5r74UjJBpsiREQO9KSVeXqbgFFTrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:6e:0d:d0:e2:0f:4f:db:1c:5e:1c:70:a4:c9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=678d9ba2e3968423befc5eed05719b300057d7cb
Validity
Not Before: Nov 4 13:00:33 2025 GMT
Not After : Nov 5 13:00:33 2025 GMT
Subject: CN=cc466c6f367c5229d02817e3b15c22ac34778b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:77:88:48:57:35:e3:c1:2e:d5:8f:fb:c1:
f3:b3:7d:d7:f4:7a:61:c7:fe:11:66:3c:a3:5b:c7:
3e:13:d1:62:14:dd:ba:5f:d8:eb:90:d0:3f:89:ea:
aa:e8:64:c9:22:e9:1b:86:4d:11:6f:0c:df:7e:0f:
89:ce:f6:0b:23:df:d4:79:e9:2d:62:ab:7f:07:4f:
83:ad:f5:8e:5d:1a:15:3f:39:47:ce:8a:1f:6e:90:
9c:27:5f:cb:b1:f6:4f:e5:2b:c2:12:41:9f:2e:bf:
e8:4f:93:57:71:2b:b6:23:92:22:c5:ff:28:0d:6f:
16:d2:4a:83:58:23:a4:bd:70:76:4e:8f:d7:1f:03:
83:11:c7:3f:b5:f2:60:00:ae:f9:d8:60:0f:1c:c8:
24:10:ce:18:3b:fa:b6:a8:66:96:fc:35:5f:7e:5a:
47:05:a1:43:31:68:cd:65:ad:f9:b6:b9:1b:80:b4:
e7:23:c3:16:17:83:0b:96:f6:40:86:0e:4b:6c:7e:
21:b9:50:d6:45:cd:7e:f5:b9:e0:39:f2:db:72:fa:
5a:11:6f:ad:76:da:96:99:27:9a:87:98:ef:63:38:
dc:2c:e1:f7:f9:f0:fb:a2:5d:89:a9:e3:42:c0:1c:
6d:f2:5d:a6:b5:c1:e0:c6:a5:20:a3:52:96:eb:2c:
48:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:46:6C:6F:36:7C:52:29:D0:28:17:E3:B1:5C:22:AC:34:77:8B:58
X509v3 Authority Key Identifier:
keyid:67:8D:9B:A2:E3:96:84:23:BE:FC:5E:ED:05:71:9B:30:00:57:D7:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z42bouOWhCO-_F7tBXGbMABX18s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d15b7f-708f-4155-8d31-c80a723d34f7/1/Z42bouOWhCO-_F7tBXGbMABX18s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f0:83:8a:5e:9a:54:bc:94:56:b7:7c:95:2b:57:93:0f:b8:
8b:0e:5c:a2:0a:2e:f6:4d:c4:6e:1e:80:67:8f:d2:11:9e:a8:
15:2f:03:31:82:b8:1f:9d:3c:59:3a:db:32:1d:c6:cc:a2:fa:
8b:f1:68:04:0d:06:60:f7:d3:d6:91:9c:bb:ed:93:ee:89:3e:
d6:72:12:bc:ee:6a:b5:0e:63:8d:5d:ee:73:b0:bd:11:4d:b1:
95:13:f0:ff:3e:10:1b:01:cf:2e:bb:5f:45:63:8a:6f:e0:88:
69:4a:88:bc:e9:48:51:c6:b5:4c:61:af:7a:4a:b1:ff:f0:a3:
23:a6:be:f3:cc:a5:81:5c:6b:5d:68:63:df:16:19:ee:ab:07:
fa:d9:ac:bc:c5:5e:32:36:08:86:6b:2c:cb:67:4b:68:ae:f8:
50:e8:9f:c1:27:fd:a3:62:03:69:9e:2e:10:36:2f:78:45:97:
27:b8:f6:7c:9c:95:4e:05:83:87:73:f5:f6:f2:cd:77:90:ef:
a8:74:5c:e5:34:77:a9:34:de:5c:57:cc:98:61:83:dd:41:f4:
e1:7b:8c:b5:e9:f6:b9:ea:d7:0b:d1:83:90:a4:4b:94:8d:b3:
72:57:88:fd:7d:7e:ad:6b:ab:f7:55:e3:05:81:9c:29:29:83:
af:17:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:29:56 2025 by rpki-client