Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
File: OCZCPrAZVSJObBHRnG05OB6L4h0.mft (raw, json)
Hash identifier: 1Se5EpDfd72CvEbLin2R7wh3bkvH2UMCLF+bnVfWoLI=
Subject key identifier: 74:56:9F:8E:29:99:AE:52:CC:6A:0C:F0:C3:66:66:AE:C8:34:09:50
Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
Certificate issuer: /CN=3826423eb01955224e6c11d19c6d39381e8be21d
Certificate serial: 0198D54E6E7D0A22B2B9312778E8DE36B074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
Manifest number: 0A7E
Signing time: Sat 23 Aug 2025 05:02:23 +0000
Manifest this update: Sat 23 Aug 2025 05:02:23 +0000
Manifest next update: Sun 24 Aug 2025 05:02:23 +0000
Files and hashes: 1: OCZCPrAZVSJObBHRnG05OB6L4h0.crl (hash: wdLO/lIaj8zQpoTqtSXRiLJ7K+Rsag8dBmo9fOAc3hA=)
2: uEaPXwIvt3nd0ncZqWTmGRgN2Co.roa (hash: V/FrvYjkhAUQhpjTMGaHfRf+RO486rwY6D+JJKx9Z6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:6e:7d:0a:22:b2:b9:31:27:78:e8:de:36:b0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d
Validity
Not Before: Aug 23 05:02:23 2025 GMT
Not After : Aug 24 05:02:23 2025 GMT
Subject: CN=74569f8e2999ae52cc6a0cf0c36666aec8340950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:d4:9d:a1:d1:9a:df:28:66:d8:97:ec:fb:
63:4b:70:68:b3:67:a8:55:56:a0:54:90:d5:7b:51:
79:aa:63:aa:5b:c0:b1:4e:82:ee:90:d7:49:0a:1e:
80:d1:94:8e:43:11:82:ef:3e:a8:c2:93:b5:f8:91:
45:b9:ca:71:a4:86:5b:16:7b:6e:77:00:24:a2:26:
9d:db:b0:72:1c:20:5f:c7:48:15:d8:de:b5:c5:70:
bc:f5:93:6e:b3:4c:c4:59:4d:b9:5a:f5:a5:c2:64:
71:7f:cd:fc:b2:7e:82:34:74:10:17:f4:a3:92:2a:
4d:4b:ff:3c:71:a0:3f:bd:36:e0:c8:64:57:3e:ad:
77:ef:66:1e:48:9e:fb:21:62:15:4c:73:e3:cd:95:
3d:86:88:98:fd:a3:93:24:fc:ef:cc:25:b7:87:36:
86:67:8c:29:85:25:0f:74:df:00:52:80:56:f7:f2:
54:9f:9b:3b:23:fd:99:25:3e:b2:e5:d1:5a:8a:cc:
37:3a:c8:75:cf:78:1a:ba:69:9f:26:1b:fe:12:f1:
98:28:8e:05:20:4e:a5:b5:2c:7d:49:cd:2c:83:12:
55:1f:81:fb:96:b5:36:49:42:a3:e3:d6:a0:41:9e:
31:48:9b:dd:78:9c:19:c4:d7:59:21:2d:3c:34:2f:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:56:9F:8E:29:99:AE:52:CC:6A:0C:F0:C3:66:66:AE:C8:34:09:50
X509v3 Authority Key Identifier:
keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7c:a9:89:d4:80:7b:a3:0a:a5:83:5d:2b:80:06:e2:aa:c9:
c2:c0:49:e2:f5:6c:35:72:0e:14:c2:58:9f:40:b8:1f:a2:f1:
e7:58:79:6e:06:13:c4:bc:89:1d:e7:b7:c0:1c:ad:fb:80:11:
87:5a:2b:2c:ce:72:cc:fb:5a:86:4e:d2:c2:63:db:98:1a:3f:
f3:a3:bd:5d:19:b3:98:e9:eb:44:17:c0:ef:5e:c7:b9:17:3a:
49:a6:b5:40:ac:3c:94:6e:44:34:86:b5:d4:2a:60:dd:29:02:
88:57:44:de:cf:7a:53:24:30:9a:66:42:08:79:c1:5b:16:d5:
5a:51:66:69:e9:9a:e9:6d:31:9b:96:88:ba:37:d7:18:57:22:
c8:82:b2:b6:e1:26:c6:c9:b4:cf:c9:48:ad:c9:b3:67:7b:5f:
bc:3b:3e:fd:bc:4e:fa:7c:20:9a:24:de:41:41:bd:0d:3f:88:
b1:57:88:9b:18:be:fc:51:e1:bd:2d:11:92:a5:37:f7:72:c3:
66:7d:d5:01:f5:e3:23:a9:ae:12:c1:92:b7:03:71:24:0d:2c:
98:40:7a:b4:12:18:04:28:30:66:15:0e:d5:bf:4a:87:fe:81:
74:b1:68:b8:cc:73:85:de:03:0d:f2:6b:20:30:a0:12:e9:27:
74:6c:38:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:07 2025 by rpki-client