Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
File: o_fz-CX46MJWXq77Zud0TJKV3Mk.mft (raw, json)
Hash identifier: eK1D5PLlxXqe9S2nBAwma9sxxjk9MuzELDgRRN4Pcoc=
Subject key identifier: 3C:19:8D:B4:41:35:ED:0F:A5:0A:6D:91:AC:35:1D:2C:68:05:8B:F4
Authority key identifier: A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
Certificate issuer: /CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Certificate serial: 0196876DC4C8E22D0BA84D7EA884C4A9EFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
Manifest number: 1517
Signing time: Wed 30 Apr 2025 16:00:40 +0000
Manifest this update: Wed 30 Apr 2025 16:00:40 +0000
Manifest next update: Thu 01 May 2025 16:00:40 +0000
Files and hashes: 1: o_fz-CX46MJWXq77Zud0TJKV3Mk.crl (hash: ZP0KNJdJXF3BkiSfNzOAl7dhmgSYaPL1w2Niu+odYls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:6d:c4:c8:e2:2d:0b:a8:4d:7e:a8:84:c4:a9:ef:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3f7f3f825f8e8c2565eaefb66e7744c9295dcc9
Validity
Not Before: Apr 30 16:00:40 2025 GMT
Not After : May 1 16:00:40 2025 GMT
Subject: CN=3c198db44135ed0fa50a6d91ac351d2c68058bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:b9:31:ff:f5:45:a0:3e:d5:bc:a6:ec:e4:
11:5b:dc:fa:08:aa:f2:8d:4e:27:a8:9d:a6:d4:ef:
eb:10:1e:82:f9:8b:6c:90:e5:70:95:77:d4:8a:12:
cc:65:dc:29:4b:39:53:bc:17:3d:d4:37:f7:a6:94:
5d:72:00:43:c9:2a:83:26:bf:75:f0:9c:c1:7b:04:
5b:3e:a1:58:07:e2:03:bb:04:1a:97:07:fc:c1:ce:
11:80:4d:06:7a:9a:3e:06:33:e8:29:5d:f4:18:65:
79:53:fe:6c:81:4a:b6:61:3d:3d:bd:8e:c1:ec:ec:
2a:76:09:13:90:ec:5b:bf:d7:f1:e7:15:fb:2b:90:
f3:8e:ed:08:7f:38:96:65:96:be:eb:da:0c:b4:8b:
e8:98:7e:a1:55:dd:57:9c:5f:e9:fb:f9:66:b5:d1:
1b:83:9a:bc:02:80:47:7b:8d:fd:76:8a:b1:75:29:
ff:12:dc:41:dd:75:05:70:3d:53:13:90:8d:8e:19:
1a:fc:e3:f5:f9:d6:28:f5:75:7a:65:a8:c4:1c:fe:
b6:6b:97:f1:40:dc:c1:a2:48:0f:8a:31:2e:ae:e0:
06:cb:48:91:28:61:0c:bb:ef:3b:29:88:33:c1:c2:
1c:8b:3c:cf:21:9c:6d:9c:27:55:40:c7:78:4b:f9:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:19:8D:B4:41:35:ED:0F:A5:0A:6D:91:AC:35:1D:2C:68:05:8B:F4
X509v3 Authority Key Identifier:
keyid:A3:F7:F3:F8:25:F8:E8:C2:56:5E:AE:FB:66:E7:74:4C:92:95:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_fz-CX46MJWXq77Zud0TJKV3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/42074f-c603-4063-b0c0-b0aa7fd6219b/1/o_fz-CX46MJWXq77Zud0TJKV3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5a:da:65:c9:af:3f:99:e7:76:bc:ae:e1:77:ad:2b:4e:9b:
8a:2f:32:de:f4:fc:a4:6d:6c:63:8c:b7:7b:12:47:11:06:81:
42:db:db:b8:d6:ef:fb:11:d5:47:c2:96:85:63:4c:50:df:78:
ee:0d:19:c8:a9:fe:ae:95:bc:92:9b:8d:cb:07:92:35:ec:d7:
10:9a:36:5a:df:d6:45:f9:10:30:67:e7:01:27:78:9f:54:97:
c2:4d:78:ea:fe:6c:db:9f:6f:3a:2b:39:09:87:f0:11:ab:99:
c4:16:3e:47:d6:66:16:2b:c0:53:99:c2:55:3d:da:0e:4b:b6:
77:9d:2c:85:d5:a7:7d:d3:2b:90:56:b7:bb:e2:40:8b:33:85:
e6:53:2b:de:ea:34:31:6a:8e:49:13:7d:7c:88:c3:43:ed:7d:
6e:47:53:14:7f:84:8f:82:4e:9b:c4:57:d1:88:6d:5b:4b:70:
88:4c:7b:85:cf:44:e3:5c:b0:32:d7:24:1c:22:63:2e:4e:47:
51:15:7d:c8:de:82:2f:f6:35:91:7a:d3:6e:62:a8:2b:ea:94:
78:4c:6e:96:87:67:9e:c0:69:c6:a9:5b:25:0e:34:1a:f8:43:
43:13:04:60:7d:d8:39:d9:df:96:5d:43:61:93:99:ec:84:90:
23:2e:08:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaHbcTI4i0LqE1+qITEqe+qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZjdmM2Y4MjVmOGU4YzI1NjVlYWVmYjY2ZTc3NDRjOTI5
NWRjYzkwHhcNMjUwNDMwMTYwMDQwWhcNMjUwNTAxMTYwMDQwWjAzMTEwLwYDVQQD
EygzYzE5OGRiNDQxMzVlZDBmYTUwYTZkOTFhYzM1MWQyYzY4MDU4YmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA65Mf/1RaA+1bym7OQRW9z6CKry
jU4nqJ2m1O/rEB6C+YtskOVwlXfUihLMZdwpSzlTvBc91Df3ppRdcgBDySqDJr91
8JzBewRbPqFYB+IDuwQalwf8wc4RgE0Gepo+BjPoKV30GGV5U/5sgUq2YT09vY7B
7OwqdgkTkOxbv9fx5xX7K5Dzju0IfziWZZa+69oMtIvomH6hVd1XnF/p+/lmtdEb
g5q8AoBHe439doqxdSn/EtxB3XUFcD1TE5CNjhka/OP1+dYo9XV6ZajEHP62a5fx
QNzBokgPijEuruAGy0iRKGEMu+87KYgzwcIcizzPIZxtnCdVQMd4S/nB4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwZjbRBNe0PpQptkaw1HSxoBYv0MB8GA1UdIwQY
MBaAFKP38/gl+OjCVl6u+2bndEySldzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80MjA3NGYtYzYwMy00MDYzLWIwYzAt
YjBhYTdmZDYyMTliLzEvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80MjA3NGYtYzYwMy00MDYzLWIwYzAtYjBhYTdmZDYyMTli
LzEvb19mei1DWDQ2TUpXWHE3N1p1ZDBUSktWM01rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVraZcmv
P5nndryu4XetK06bii8y3vT8pG1sY4y3exJHEQaBQtvbuNbv+xHVR8KWhWNMUN94
7g0ZyKn+rpW8kpuNyweSNezXEJo2Wt/WRfkQMGfnASd4n1SXwk146v5s259vOis5
CYfwEauZxBY+R9ZmFivAU5nCVT3aDku2d50shdWnfdMrkFa3u+JAizOF5lMr3uo0
MWqOSRN9fIjDQ+19bkdTFH+Ej4JOm8RX0YhtW0twiEx7hc9E41ywMtckHCJjLk5H
URV9yN6CL/Y1kXrTbmKoK+qUeExulodnnsBpxqlbJQ40GvhDQxMEYH3YOdnfll1D
YZOZ7ISQIy4Izw==
-----END CERTIFICATE-----
Generated at Wed Apr 30 23:25:05 2025 by rpki-client