Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
File: o_fz-CX46MJWXq77Zud0TJKV3Mk.mft (raw, json)
Hash identifier: /Eqn3oFaEAke70VAI1WA2PHerPLk+bIK1S7xqR5fwlA=
Subject key identifier: C2:B1:FB:02:B9:CC:44:67:9B:61:12:C3:96:43:08:DF:AA:29:48:E9
Authority key identifier: A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
Certificate issuer: /CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Certificate serial: 019A71B8BABEA40912440C212FEE8CB4D139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:03 +0000
Manifest this update: Tue 11 Nov 2025 07:02:03 +0000
Manifest next update: Wed 12 Nov 2025 07:02:03 +0000
Files and hashes: 1: o_fz-CX46MJWXq77Zud0TJKV3Mk.crl (hash: /DLR03nHmWfSUzxTFt1Ck5ZZc8Wsp3qVKGCntVNkc7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ba:be:a4:09:12:44:0c:21:2f:ee:8c:b4:d1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Validity
Not Before: Nov 11 07:02:03 2025 GMT
Not After : Nov 12 07:02:03 2025 GMT
Subject: CN=c2b1fb02b9cc44679b6112c3964308dfaa2948e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:3d:2a:b8:d3:ee:c4:ca:70:f0:97:e9:4c:
27:2f:6c:81:63:fd:ad:2b:d6:30:1f:8e:94:e0:08:
d7:ed:5b:c1:26:f3:3a:05:be:4a:fa:37:17:2b:28:
d7:d3:82:d7:5c:ed:d0:af:e4:09:3e:77:8f:b3:4d:
56:ed:a1:cb:e2:fa:d6:09:81:4b:52:eb:7e:4c:b2:
b3:7e:66:96:5c:93:12:72:9a:b8:11:75:32:d3:0d:
39:c7:38:42:b7:a7:79:3f:39:72:41:75:1b:6d:0e:
0a:5d:49:4e:3d:b9:9e:ef:69:8f:e2:9b:b9:6d:e0:
9a:64:1e:ce:23:06:49:e9:0f:41:45:3c:a1:1f:4b:
5a:25:72:19:96:18:5b:9a:39:0d:b6:6b:8d:a1:6d:
57:66:4b:84:6d:ef:d3:32:ae:b7:1c:47:9f:94:50:
bd:62:41:e6:6a:b3:47:0d:13:69:ce:07:03:c5:73:
09:8c:b5:d1:e0:42:0e:5a:c8:f8:78:66:43:02:ae:
6d:aa:29:60:fc:74:10:d3:70:03:91:e9:f8:ad:9b:
eb:b8:fe:8e:7d:42:a5:ed:7d:01:38:d6:cf:37:d3:
a3:d2:ee:c2:fb:cd:fa:33:29:7c:97:6b:20:d9:d0:
32:7f:05:86:76:a8:01:36:ea:da:0d:51:4b:41:9c:
f1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:FB:02:B9:CC:44:67:9B:61:12:C3:96:43:08:DF:AA:29:48:E9
X509v3 Authority Key Identifier:
keyid:A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:57:ef:b1:e9:b4:2e:80:f1:2b:e9:df:5d:64:53:3d:73:ae:
42:24:cd:ad:8c:db:96:1b:e4:84:79:71:7e:24:96:0f:12:30:
94:3c:18:af:71:1d:21:83:f8:e4:98:f7:03:86:49:9a:a2:c2:
5e:56:7a:8f:db:10:81:b7:21:3b:45:60:e3:df:f8:8e:06:4c:
98:04:99:67:71:77:cf:7b:7b:36:08:2e:6c:eb:b1:24:1a:50:
d2:be:3f:b9:55:73:b3:c9:54:99:d5:8c:f2:86:6b:e0:f2:e3:
db:fc:85:5c:13:c2:bb:3f:7f:81:99:87:a0:de:ba:14:45:3f:
a9:64:aa:7a:2d:16:a9:20:c6:59:c4:94:aa:b4:31:aa:2d:13:
77:9d:91:e5:c8:e8:60:e9:03:75:19:cf:07:f2:16:f2:63:0c:
c8:be:c8:b1:ce:a0:56:b0:6d:9a:d8:fc:13:03:79:61:44:ef:
b4:53:5c:0f:a3:49:d6:66:75:f1:82:b3:f7:cb:c6:de:82:7e:
d6:3d:df:1b:e2:6f:38:ad:63:92:a0:e6:1b:34:a2:ee:a6:5a:
e1:f1:97:fb:a3:78:db:89:5e:a0:80:9d:b5:a6:73:5a:bf:07:
e5:9d:ae:b8:b7:fa:25:c9:3e:73:0a:69:65:ef:4f:86:a3:83:
b7:95:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:47:00 2025 by rpki-client