Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
File: ocG-CYGk51dsVi9vCeZcF8GA48o.mft (raw, json)
Hash identifier: bDM5/RT1xhLpsIzl9aKPFws5BPwLcviU0o9B8FgjIaY=
Subject key identifier: 72:18:81:43:0D:8B:67:EC:A3:11:F0:05:F5:C9:C9:BD:E3:5F:77:CC
Authority key identifier: A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
Certificate issuer: /CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Certificate serial: 0197B82101B2247104B8F4575FCCDA068E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 20:01:00 +0000
Manifest this update: Sat 28 Jun 2025 20:01:00 +0000
Manifest next update: Sun 29 Jun 2025 20:01:00 +0000
Files and hashes: 1: Nmiqzb5OKDKFPEDZ9AhOwfzW5jQ.roa (hash: 16HSNwP1Wfx8pQJ0EjO/70dnXDCvO8XmFYI9/xms5GY=)
2: ocG-CYGk51dsVi9vCeZcF8GA48o.crl (hash: RL63R+UUucnG5isFt/ZyiRcHW0Nxm3qsXz70OMlBAiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:01:b2:24:71:04:b8:f4:57:5f:cc:da:06:8e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Validity
Not Before: Jun 28 20:01:00 2025 GMT
Not After : Jun 29 20:01:00 2025 GMT
Subject: CN=721881430d8b67eca311f005f5c9c9bde35f77cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:de:de:3e:1e:48:6d:78:8e:97:1a:a0:ad:
bb:89:42:bf:3f:d4:4f:31:81:c4:6c:46:ce:d6:57:
ec:08:ec:eb:cd:52:c8:69:1d:e4:76:2d:77:d0:a6:
ab:7d:30:90:bf:28:0d:e0:9e:5a:af:1e:c3:74:69:
cf:2f:f2:0b:24:65:cb:e7:42:c1:39:87:7a:8b:44:
e5:cf:95:5b:09:a4:b4:4d:f5:ad:79:83:4d:8f:e1:
f3:15:6f:ee:96:03:f3:af:f7:bd:c0:8f:2d:09:ee:
ff:96:a6:8a:51:3b:b2:cd:d8:77:61:c4:e4:8e:4c:
03:c8:ac:78:6a:23:80:3c:33:4c:84:91:bd:68:e0:
1d:7a:59:c8:e3:3e:2a:f4:e9:ef:89:f7:84:6d:4f:
a1:14:67:0a:0b:a5:54:f3:ad:ad:90:2a:24:ae:7d:
80:39:e6:f9:13:aa:2d:0c:10:5e:74:13:31:44:3a:
62:aa:d0:5e:44:c6:9a:c4:0e:3e:15:2e:3e:9e:8e:
94:e6:1c:1e:37:ea:e5:44:bd:1b:12:0a:74:8a:84:
ed:47:4a:d8:7a:98:da:93:e1:20:98:9e:7b:11:3e:
74:9b:96:aa:c1:bd:c9:01:9d:51:46:b1:fd:e1:e7:
f8:c0:bc:5f:f6:87:bb:70:a5:a0:df:e8:6e:f6:6e:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:18:81:43:0D:8B:67:EC:A3:11:F0:05:F5:C9:C9:BD:E3:5F:77:CC
X509v3 Authority Key Identifier:
keyid:A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:63:aa:a3:3e:b1:31:3b:61:f8:fa:f7:41:d4:03:e2:88:bf:
67:24:8e:0f:da:77:a4:ff:c5:a7:f1:c6:17:cd:62:2f:ff:df:
e6:6c:b4:e1:c7:ef:a5:27:9e:21:f0:89:45:6a:26:14:a8:5a:
cd:31:9a:f2:cb:cc:51:f0:d9:35:50:ae:a8:fb:af:5b:5b:d5:
48:ee:1f:9a:62:91:74:d1:9a:f3:06:3e:9d:d6:c8:e4:2e:eb:
94:4b:d1:a9:c5:a9:9d:f6:be:35:c1:24:0e:33:80:a3:49:b3:
d2:26:2d:87:22:53:ab:6e:15:77:43:88:4a:2f:95:1c:d9:b2:
85:e6:e9:ed:cf:7e:f5:b6:1c:2b:ac:c3:a5:5a:64:8e:d5:d1:
ad:73:81:30:26:8e:63:3c:0d:c7:c9:11:d7:91:7a:e9:f0:92:
49:86:f6:81:12:c0:d0:b6:ef:bb:0b:0b:e1:b0:09:b3:c8:e8:
27:5d:49:6c:4d:1f:7c:b4:8e:10:09:aa:b2:8d:87:c1:47:34:
49:e1:3b:da:8b:bb:eb:f0:94:c6:81:ed:bd:71:dc:73:df:69:
f1:d0:d5:a8:07:6e:c7:c1:72:b1:65:46:2c:e7:da:71:76:d6:
e8:b2:8a:3e:52:5c:09:e6:dc:5b:c7:b7:c0:e5:67:51:66:ec:
04:ef:cb:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:07:31 2025 by rpki-client