Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
File: o_fz-CX46MJWXq77Zud0TJKV3Mk.mft (raw, json)
Hash identifier: bZYWntnjzwcNrlY9Xv6RJMp2vpRlL6OLlO9AH1ZgCSk=
Subject key identifier: 41:5D:0A:03:DE:9A:01:2A:A5:34:60:C1:FE:F1:54:66:E8:46:A8:95
Authority key identifier: A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
Certificate issuer: /CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Certificate serial: 0198D850E082AF1E36D2185CF29DBB45866F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 19:03:55 +0000
Manifest this update: Sat 23 Aug 2025 19:03:55 +0000
Manifest next update: Sun 24 Aug 2025 19:03:55 +0000
Files and hashes: 1: o_fz-CX46MJWXq77Zud0TJKV3Mk.crl (hash: QkuYuTM+wmXcMcY19ZG1ujQMSgSM3QsWewyv4UG3KzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:e0:82:af:1e:36:d2:18:5c:f2:9d:bb:45:86:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Validity
Not Before: Aug 23 19:03:55 2025 GMT
Not After : Aug 24 19:03:55 2025 GMT
Subject: CN=415d0a03de9a012aa53460c1fef15466e846a895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:80:c4:9a:e5:53:e1:07:1d:db:2d:e6:79:
38:27:87:ba:70:21:dd:ca:23:cf:92:5e:95:4a:41:
71:8d:3c:4d:5b:c7:ee:de:71:56:af:c7:bd:42:7a:
85:72:b9:00:53:6c:0f:06:e0:44:4f:fe:e3:74:25:
45:d8:83:e1:98:2c:70:75:8a:52:1f:18:b7:9b:2f:
85:be:a5:7e:2d:12:7a:06:25:a9:aa:c4:9c:e3:50:
2f:cb:fa:92:ad:b8:d9:4d:bf:0c:f2:9b:f9:68:2c:
c0:99:3b:91:de:ce:91:ac:62:ed:80:6c:7c:18:46:
a7:33:3e:12:4a:ac:b2:56:cd:e2:ee:41:58:84:0f:
0f:07:d9:64:01:21:07:29:b0:56:88:92:42:4e:84:
12:26:dd:77:7e:0a:4b:66:df:16:1a:c3:83:4c:cf:
e7:83:4b:6a:12:81:ed:b9:45:b3:9c:0c:e7:a4:7a:
c8:a0:46:f7:f7:e5:17:e2:4f:1c:4e:23:5e:b4:36:
64:73:2f:6b:90:13:68:e2:3d:53:3e:b7:b1:43:d9:
93:29:da:2d:c7:86:6f:81:84:d7:88:9d:26:3e:f7:
99:f1:92:fd:53:0d:6f:1b:72:ff:1e:0c:a6:c2:3b:
0c:27:a6:10:71:99:3a:4f:1f:d3:5c:9e:64:22:0e:
b2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5D:0A:03:DE:9A:01:2A:A5:34:60:C1:FE:F1:54:66:E8:46:A8:95
X509v3 Authority Key Identifier:
keyid:A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7a:b9:87:b3:fc:05:4c:a2:15:21:67:da:59:93:f4:4b:c5:
ac:05:9a:3c:7d:49:11:fd:6d:f2:7c:94:96:92:60:e4:84:21:
ae:69:c7:ac:68:da:ac:7a:5a:df:77:be:48:a2:f8:d7:77:6c:
26:ff:ce:f7:e1:a3:a9:5e:69:f5:87:d8:29:47:8e:c2:ac:1f:
d0:73:e4:5e:b5:63:f6:7b:e4:73:a5:29:e4:5b:34:3b:76:6a:
d4:ef:fa:e9:a1:c1:1e:9c:67:de:fe:ab:d8:48:62:29:7d:c4:
5d:29:d3:db:28:ef:27:ba:30:c7:bc:53:35:8f:2f:6d:0b:f0:
ca:8e:76:b9:3f:0e:bc:89:35:15:d8:e4:a1:64:ca:e5:92:c1:
71:a1:01:81:10:08:a1:e5:3d:71:23:14:08:08:d7:5d:05:54:
2d:46:5d:f9:8a:d9:85:19:f2:4e:cd:a4:33:a8:70:02:37:7b:
25:61:34:a4:66:3b:bb:9f:d6:73:0f:83:7d:68:7e:76:4e:3a:
1f:61:f3:dc:31:91:75:8a:d6:07:d3:77:c9:79:a7:a3:89:9e:
02:25:15:06:ea:1b:58:60:b9:1d:11:04:02:7b:ed:d4:ba:c3:
94:a1:85:eb:1e:9b:67:05:14:03:94:1f:67:8b:ac:b9:8f:f3:
b9:5c:96:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:07:08 2025 by rpki-client