Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
File: OCZCPrAZVSJObBHRnG05OB6L4h0.mft (raw, json)
Hash identifier: EJcdix4DL2sAXluYpSp6Or2dt79kwlcD7rmRqJz3FUU=
Subject key identifier: 80:DF:30:6E:E8:5F:6A:DE:A2:AE:C9:07:67:10:8F:73:5D:E6:2A:F3
Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
Certificate issuer: /CN=3826423eb01955224e6c11d19c6d39381e8be21d
Certificate serial: 0196AEE90A392CD7265DDFC824A91D007807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
Manifest number: 0961
Signing time: Thu 08 May 2025 08:00:29 +0000
Manifest this update: Thu 08 May 2025 08:00:29 +0000
Manifest next update: Fri 09 May 2025 08:00:29 +0000
Files and hashes: 1: OCZCPrAZVSJObBHRnG05OB6L4h0.crl (hash: mdFN00Dy24p+VZZyw5uOCtJwX81Ud1OWc60NkNRLQjk=)
2: uEaPXwIvt3nd0ncZqWTmGRgN2Co.roa (hash: V/FrvYjkhAUQhpjTMGaHfRf+RO486rwY6D+JJKx9Z6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e9:0a:39:2c:d7:26:5d:df:c8:24:a9:1d:00:78:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d
Validity
Not Before: May 8 08:00:29 2025 GMT
Not After : May 9 08:00:29 2025 GMT
Subject: CN=80df306ee85f6adea2aec90767108f735de62af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:38:a7:4a:d5:5b:60:85:57:e7:21:f2:e3:4f:
53:76:21:99:29:6b:84:b6:25:6f:1f:0a:a9:89:70:
b8:66:5b:fe:94:7f:c0:1f:54:f8:5a:a1:29:08:3c:
71:7c:24:ec:59:fc:8d:62:d3:3a:68:28:10:0c:ec:
35:c7:24:d7:f1:63:8e:92:02:02:27:f5:74:cc:ca:
ea:da:2b:9a:33:56:b1:cb:e8:67:9e:6d:6d:ea:00:
ca:a9:06:00:50:cd:37:bb:f8:ad:65:cd:2b:ae:6e:
3f:70:e2:55:a0:41:6a:ad:80:27:94:b9:76:68:0b:
54:4b:3b:e2:54:76:98:b4:39:1c:5b:de:17:fc:42:
a7:b1:6e:ea:a3:a6:de:41:37:3a:93:ca:cc:f4:96:
64:90:09:47:35:d7:11:aa:9c:ab:f9:12:1b:48:0b:
f4:dc:40:45:e0:9f:66:1a:3f:2c:ba:d7:d3:71:78:
7c:41:ce:e0:3a:9a:9e:80:da:93:9d:d9:db:d4:63:
71:f1:6b:ac:f2:3d:10:c7:34:0a:8d:85:11:43:a0:
34:e7:7f:5b:f6:f6:5b:e7:13:f3:52:76:96:1a:c1:
24:99:71:79:6c:80:ed:7a:c5:36:b5:ef:a2:fa:d1:
a2:68:c6:f7:90:3e:d0:0b:5e:bf:bb:3b:e9:4d:33:
8e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DF:30:6E:E8:5F:6A:DE:A2:AE:C9:07:67:10:8F:73:5D:E6:2A:F3
X509v3 Authority Key Identifier:
keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6f:1a:74:84:72:4d:ff:ff:cb:95:f8:dc:e5:76:fb:51:00:
94:c9:a0:f4:e8:c7:1d:71:88:ef:04:b0:d7:84:fa:f1:77:3b:
4d:b9:d0:28:84:05:91:27:a6:5c:24:73:77:7a:63:bf:57:1e:
35:9c:80:5f:c9:4f:34:2e:74:4b:75:f2:4a:ae:ca:61:b7:b6:
a5:9f:26:68:4e:21:1f:9d:57:d4:82:0c:16:45:e4:7b:2d:2a:
a4:73:cb:15:16:69:26:1f:97:de:7e:c5:da:2f:8c:6d:55:a7:
97:bc:15:ee:43:19:40:9e:50:86:dc:8f:e9:f2:c4:50:31:af:
0c:92:0a:ce:44:d5:8d:45:3d:9e:0d:94:d0:be:af:13:94:75:
4d:56:5e:c8:ab:36:1f:6e:e3:86:f3:ce:a3:48:49:c6:55:61:
93:a6:0b:73:14:e5:0a:63:cd:97:e6:69:75:18:29:6b:95:e0:
17:ba:3d:06:8c:2f:9b:c2:0c:4e:8e:5b:3a:c7:ee:97:71:ad:
69:e1:1f:65:b6:b8:32:c5:8c:1a:7b:ba:d8:19:b2:18:48:8e:
8c:2a:9c:56:a3:28:7e:99:a1:a6:1b:16:d7:63:d3:38:ea:82:
88:16:d4:3f:fc:16:cc:2b:aa:60:4b:94:28:f3:41:5e:91:fb:
eb:db:61:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:35:30 2025 by rpki-client