Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
File: o_fz-CX46MJWXq77Zud0TJKV3Mk.mft (raw, json)
Hash identifier: Ug0wTLT7n9CLClJPnfBFRVhn4MLaPMA5bAncsEtBOaU=
Subject key identifier: 80:BF:7D:EF:C3:9B:C0:91:C5:1A:96:FD:04:AE:F3:E4:B2:27:67:3F
Authority key identifier: A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
Certificate issuer: /CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Certificate serial: 019A01B637400C2E6A8865F0E67BFBF10ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 13:01:50 +0000
Manifest this update: Mon 20 Oct 2025 13:01:50 +0000
Manifest next update: Tue 21 Oct 2025 13:01:50 +0000
Files and hashes: 1: o_fz-CX46MJWXq77Zud0TJKV3Mk.crl (hash: GRAGOjg8J/PnGrIu9ebP8/yrfjVIWRQD4vKqP6ScKKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:37:40:0c:2e:6a:88:65:f0:e6:7b:fb:f1:0e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Validity
Not Before: Oct 20 13:01:50 2025 GMT
Not After : Oct 21 13:01:50 2025 GMT
Subject: CN=80bf7defc39bc091c51a96fd04aef3e4b227673f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:1a:9c:28:b2:50:64:9c:0b:e3:7f:da:32:
95:01:28:9d:71:74:0b:e2:8d:c4:1a:08:25:8b:15:
1e:77:82:99:ac:b2:69:15:c2:d0:e1:2b:d4:1d:d9:
07:f4:95:3e:60:6f:b8:6c:60:79:93:21:f0:bb:56:
62:5e:9a:69:c0:7e:cd:6a:79:0d:57:f8:d9:13:9a:
2c:b4:cb:fb:87:42:fb:d6:a2:34:23:d0:44:67:5f:
18:73:1f:f3:2a:ce:53:a9:8a:60:7f:30:91:2b:ce:
0c:a4:55:09:65:17:a2:00:23:57:02:fb:1a:b8:51:
c9:c4:98:2e:fb:d7:f9:fd:e3:b0:c2:bd:40:55:4c:
e5:2d:73:da:42:0f:0e:94:77:85:87:c5:31:a0:52:
63:37:e3:77:bd:73:18:2d:40:02:86:8e:d8:ae:a5:
fa:b7:11:db:85:35:ab:ab:87:68:c8:07:e9:57:15:
ec:aa:ea:6d:55:d5:a5:33:5d:07:a7:5f:6b:89:48:
92:93:be:53:17:9e:1a:80:78:d5:9a:fc:71:9d:cd:
aa:b5:35:a0:8b:6d:c7:b0:71:5d:71:04:1c:ea:b6:
65:34:d3:5b:f7:f2:21:24:fb:0c:57:d1:fe:e4:4a:
fb:28:db:58:c9:96:10:fe:25:76:5d:f4:eb:98:73:
a0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BF:7D:EF:C3:9B:C0:91:C5:1A:96:FD:04:AE:F3:E4:B2:27:67:3F
X509v3 Authority Key Identifier:
keyid:A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3f:0b:be:11:8b:eb:37:81:41:cb:7e:e9:6a:c6:8e:6f:9c:
67:cb:80:53:e6:da:60:ab:66:11:73:f1:1b:e7:92:84:88:90:
09:c8:99:a8:92:c7:4a:98:7f:e5:2a:86:30:64:e4:6b:56:14:
9d:e1:2b:0a:4c:54:7b:46:c5:f6:88:04:d6:38:a0:b6:de:fc:
f7:fa:55:d0:6f:74:53:e0:86:34:ba:73:14:aa:a6:8b:81:91:
71:aa:38:7f:76:47:cb:c8:49:43:97:f6:bd:ae:35:db:89:67:
fb:25:17:46:ae:1b:31:35:58:c9:10:0d:a8:a2:c8:80:26:98:
37:2c:f8:50:7c:d4:ab:f9:f9:91:54:8e:f7:1f:a2:27:56:db:
1e:c7:9e:14:7d:52:56:6a:7f:77:89:70:2d:77:69:f8:45:2b:
03:35:0f:68:70:13:5d:b9:ca:e1:a4:ba:75:f6:0f:d9:f6:45:
66:17:5a:7c:11:73:f2:dc:0d:51:e7:88:7a:56:1b:84:8a:87:
21:ae:a4:79:33:e6:da:35:41:0e:43:73:e1:ef:fb:24:b8:79:
5b:90:0f:6c:7c:77:e6:51:55:78:8c:49:15:82:38:37:92:3e:
2e:2b:42:6a:9a:e4:c4:d0:16:7f:6e:d9:89:f0:fb:e5:6d:1e:
40:13:ac:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtjdADC5qiGXw5nv78Q7MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZjdmM2Y4MjVmOGU4YzI1NjVlYWVmYjY2ZTc3NDRjOTI5
NWRjYzkwHhcNMjUxMDIwMTMwMTUwWhcNMjUxMDIxMTMwMTUwWjAzMTEwLwYDVQQD
Eyg4MGJmN2RlZmMzOWJjMDkxYzUxYTk2ZmQwNGFlZjNlNGIyMjc2NzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4ganCiyUGScC+N/2jKVASidcXQL
4o3EGgglixUed4KZrLJpFcLQ4SvUHdkH9JU+YG+4bGB5kyHwu1ZiXpppwH7NankN
V/jZE5ostMv7h0L71qI0I9BEZ18Ycx/zKs5TqYpgfzCRK84MpFUJZReiACNXAvsa
uFHJxJgu+9f5/eOwwr1AVUzlLXPaQg8OlHeFh8UxoFJjN+N3vXMYLUACho7YrqX6
txHbhTWrq4doyAfpVxXsquptVdWlM10Hp19riUiSk75TF54agHjVmvxxnc2qtTWg
i23HsHFdcQQc6rZlNNNb9/IhJPsMV9H+5Er7KNtYyZYQ/iV2XfTrmHOgfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIC/fe/Dm8CRxRqW/QSu8+SyJ2c/MB8GA1UdIwQY
MBaAFKP38/gl+OjCVl6u+2bndEySldzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80MjA3NGYtYzYwMy00MDYzLWIwYzAt
YjBhYTdmZDYyMTliLzEvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80MjA3NGYtYzYwMy00MDYzLWIwYzAtYjBhYTdmZDYyMTli
LzEvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFz8LvhGL
6zeBQct+6WrGjm+cZ8uAU+baYKtmEXPxG+eShIiQCciZqJLHSph/5SqGMGTka1YU
neErCkxUe0bF9ogE1jigtt789/pV0G90U+CGNLpzFKqmi4GRcao4f3ZHy8hJQ5f2
va4124ln+yUXRq4bMTVYyRANqKLIgCaYNyz4UHzUq/n5kVSO9x+iJ1bbHseeFH1S
Vmp/d4lwLXdp+EUrAzUPaHATXbnK4aS6dfYP2fZFZhdafBFz8twNUeeIelYbhIqH
Ia6keTPm2jVBDkNz4e/7JLh5W5APbHx35lFVeIxJFYI4N5I+LitCaprkxNAWf27Z
ifD75W0eQBOsDw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:38:54 2025 by rpki-client