Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
File: ocG-CYGk51dsVi9vCeZcF8GA48o.mft (raw, json)
Hash identifier: PWjWYYZK/Lk4gFAsIQ30enaFqUSa58R1ZlXPWF1jZhQ=
Subject key identifier: 4B:46:7C:D4:0D:BA:BE:0C:A3:8E:E1:99:B8:B7:1E:E2:88:37:AB:62
Authority key identifier: A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
Certificate issuer: /CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Certificate serial: 0198D7E14889205DF4FA19E12626D9DC8DAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 17:02:02 +0000
Manifest this update: Sat 23 Aug 2025 17:02:02 +0000
Manifest next update: Sun 24 Aug 2025 17:02:02 +0000
Files and hashes: 1: Nmiqzb5OKDKFPEDZ9AhOwfzW5jQ.roa (hash: 16HSNwP1Wfx8pQJ0EjO/70dnXDCvO8XmFYI9/xms5GY=)
2: ocG-CYGk51dsVi9vCeZcF8GA48o.crl (hash: LSQIl2jDr84r5POQJiht7wf6GwCfiGibgm/s+xnsOSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:e1:48:89:20:5d:f4:fa:19:e1:26:26:d9:dc:8d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Validity
Not Before: Aug 23 17:02:02 2025 GMT
Not After : Aug 24 17:02:02 2025 GMT
Subject: CN=4b467cd40dbabe0ca38ee199b8b71ee28837ab62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:a3:8b:d3:ad:68:21:21:c4:39:db:32:2f:
f7:7c:8e:56:06:b5:0d:4a:d6:1d:18:fd:69:cf:6c:
2c:e0:9d:73:b1:80:bc:3e:9a:b6:3a:7c:27:53:88:
69:9d:58:93:78:cd:7c:dd:d3:7f:70:ff:ad:30:08:
f9:6e:d7:20:19:cb:f0:82:12:4d:50:d5:d2:22:d8:
ef:de:d7:59:f2:8c:6c:51:86:81:e5:69:2c:19:72:
e8:61:08:a7:88:03:81:f5:21:68:ca:62:34:25:4c:
91:b2:fe:e0:cb:dd:6e:b5:bd:b2:ce:a6:48:24:b7:
1b:43:35:18:cf:ed:45:0c:b6:65:e4:ac:d8:87:f8:
66:6a:9c:e8:48:81:8f:8a:b6:7b:3c:0a:82:be:20:
b4:12:eb:e3:30:60:bd:f6:35:45:7c:67:03:0e:bc:
1f:1c:75:5e:67:7c:7e:ab:9f:08:90:a7:ed:61:9f:
c2:a7:e5:93:0f:e2:29:16:58:f3:28:80:d9:93:a4:
49:1b:99:50:4d:19:68:7f:24:ba:d3:5a:99:f4:ae:
4c:00:3b:c9:38:91:6c:67:4f:10:a4:b1:83:1d:2d:
e1:45:e8:ec:81:82:39:9e:7a:5c:b9:4f:85:f6:46:
28:22:f7:f2:63:79:c9:aa:8f:9f:dc:91:72:47:1d:
47:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:46:7C:D4:0D:BA:BE:0C:A3:8E:E1:99:B8:B7:1E:E2:88:37:AB:62
X509v3 Authority Key Identifier:
keyid:A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fe:18:60:c5:72:08:83:0b:a8:81:50:21:ed:ce:b3:84:25:
2a:6a:47:da:2c:8b:24:94:dc:91:7b:80:76:50:59:4e:9d:f0:
5f:09:38:aa:5f:b1:64:7f:a8:23:4e:ff:d7:ec:16:1c:e8:40:
1c:62:4e:40:16:97:1f:93:69:db:df:90:2d:a6:9d:4f:f2:26:
57:94:d2:76:09:91:aa:1b:66:82:3b:e9:37:35:81:8f:b8:8e:
9f:7a:b1:04:96:e7:78:d8:3c:1f:06:3c:e3:77:04:78:fe:ef:
03:e0:6d:5c:7f:09:00:2a:73:04:10:a9:4d:fb:50:32:36:e8:
e2:5c:ca:b1:e3:ff:50:a8:db:48:b1:3d:28:4f:a5:75:04:b5:
4b:fe:a6:ab:0d:c5:1d:1c:cc:3e:91:b0:91:64:df:da:28:19:
ce:44:87:e4:17:d1:26:3a:35:0e:87:c5:8d:3d:db:bf:a2:cb:
82:bd:c0:ef:08:9a:59:f5:a9:5c:a7:5d:12:d7:7e:8b:41:dc:
f1:b6:5f:c7:e3:be:87:8f:6f:32:85:11:f2:75:cb:da:54:cd:
f9:49:e1:a9:b9:8a:d8:92:a5:cb:73:16:d5:8c:f2:9d:4b:3d:
b3:24:52:aa:54:ac:bd:b2:50:7d:1d:c8:22:1a:45:56:a3:1b:
63:5f:27:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:51:31 2025 by rpki-client