Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
File: OCZCPrAZVSJObBHRnG05OB6L4h0.mft (raw, json)
Hash identifier: i6/xtxc+Pri3HAuap5BHqVJsNYiyVfJ6vl0PE0YvY0E=
Subject key identifier: F9:84:2B:27:F3:55:B7:5A:1A:4E:91:FF:7F:16:4D:D2:44:FF:95:F2
Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
Certificate issuer: /CN=3826423eb01955224e6c11d19c6d39381e8be21d
Certificate serial: 0199FEB4F4F4700FC80CF774314F5EE0E06A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
Manifest number: 0B18
Signing time: Sun 19 Oct 2025 23:01:35 +0000
Manifest this update: Sun 19 Oct 2025 23:01:35 +0000
Manifest next update: Mon 20 Oct 2025 23:01:35 +0000
Files and hashes: 1: OCZCPrAZVSJObBHRnG05OB6L4h0.crl (hash: N1+PMBGfz3DnGdSnA6uygLV+yl22z9bagNujSfZ9G8E=)
2: uEaPXwIvt3nd0ncZqWTmGRgN2Co.roa (hash: V/FrvYjkhAUQhpjTMGaHfRf+RO486rwY6D+JJKx9Z6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:f4:f4:70:0f:c8:0c:f7:74:31:4f:5e:e0:e0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d
Validity
Not Before: Oct 19 23:01:35 2025 GMT
Not After : Oct 20 23:01:35 2025 GMT
Subject: CN=f9842b27f355b75a1a4e91ff7f164dd244ff95f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9a:53:f1:39:9e:fb:4a:23:f8:69:69:b8:c7:
e6:de:20:1f:79:d9:a3:d2:2e:0c:c2:55:da:06:12:
00:96:36:49:da:b0:35:cd:e3:39:9e:92:ce:9c:ed:
c9:f8:a5:f0:72:69:e9:69:68:0e:20:89:e8:62:92:
de:4b:9b:ca:3c:0e:d8:d2:1a:98:e7:71:7a:c3:26:
04:6d:74:94:56:77:7e:e4:18:99:04:c4:7d:3b:23:
67:59:af:44:8f:0c:4f:8b:c8:b8:d6:8e:f9:db:63:
d3:bb:c9:1d:ea:28:e3:a3:c3:ed:4b:ee:4c:aa:15:
46:e6:2a:f0:27:e6:72:bc:09:0b:06:77:20:d7:3a:
73:9b:e3:89:a7:62:46:b3:db:67:8c:b3:30:6a:66:
29:0c:c7:42:b9:8b:a8:6d:af:c8:a5:a8:2a:a4:6e:
85:be:c4:2e:2f:21:da:4f:66:75:7c:da:55:a1:a8:
b9:36:4e:37:ae:be:86:81:3f:51:8f:2d:e8:25:3e:
4e:dc:61:b7:a8:dd:78:09:4f:44:f3:8f:c8:f5:38:
66:a2:0f:b8:ea:37:99:da:f6:52:bb:66:52:7d:64:
1d:c7:3a:04:b9:a1:3e:83:08:24:35:18:af:e4:4b:
88:55:85:b7:bf:63:77:6e:bc:eb:48:eb:6d:fc:32:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:84:2B:27:F3:55:B7:5A:1A:4E:91:FF:7F:16:4D:D2:44:FF:95:F2
X509v3 Authority Key Identifier:
keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:da:39:e6:53:c5:55:1f:67:6b:c6:6b:ae:a1:4b:0e:54:ac:
fb:19:a5:31:4f:8a:4b:58:eb:2b:d4:ff:d5:b6:ff:3d:34:73:
83:c3:54:26:df:a5:82:68:e3:25:c4:b8:b8:00:6c:70:d4:26:
36:63:76:f5:a7:30:40:26:d2:cd:02:be:3d:7f:1b:12:1d:1a:
c5:b2:1c:4a:16:23:ae:68:01:19:e1:1a:c5:58:a7:f1:cd:aa:
06:fd:4c:d6:22:98:e6:9f:89:3a:9f:b7:7a:d7:9c:1e:9f:9a:
ad:45:2d:b8:34:5e:53:0a:74:65:b2:66:24:cc:74:8d:c4:99:
47:9c:a0:2a:75:50:39:05:5d:65:e5:65:40:36:24:6d:48:51:
63:ee:3d:f0:01:36:b6:5f:c0:2d:c3:20:48:d8:6a:9e:8c:05:
7e:0f:d9:1f:d4:b9:9a:ed:a0:7a:31:6c:de:a2:61:9d:e8:47:
3c:f1:09:2b:2e:b3:7f:fa:59:78:7c:9b:d7:0a:8d:e7:2f:a8:
f2:13:0c:22:63:95:e5:48:63:72:5c:f2:57:20:09:4c:33:f4:
91:41:91:5d:7f:39:56:0b:27:6e:3a:eb:4e:67:33:61:08:7b:
08:8a:83:08:f0:8a:e1:50:d5:c4:4e:83:99:61:5a:66:db:c4:
b4:f6:b1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:38:10 2025 by rpki-client