Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
File: OCrZBtcZpmqFoxPRBSlAAstlf3s.mft (raw, json)
Hash identifier: QTge8r3EHZ8eM2QS6AtnHE3yKyIRDtex+gAncQk2ZF8=
Subject key identifier: 65:36:ED:7F:8A:D6:CF:A5:90:98:C1:5F:F8:C2:8B:CE:9A:50:00:92
Authority key identifier: 38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B
Certificate issuer: /CN=382ad906d719a66a85a313d105294002cb657f7b
Certificate serial: 0197B7EA9656C7791B7C9B24AF0F44F396E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
Manifest number: 0196
Signing time: Sat 28 Jun 2025 19:01:33 +0000
Manifest this update: Sat 28 Jun 2025 19:01:33 +0000
Manifest next update: Sun 29 Jun 2025 19:01:33 +0000
Files and hashes: 1: OCrZBtcZpmqFoxPRBSlAAstlf3s.crl (hash: QqJFL+rJPy8XEsIqb1uF4olk1vqwD2CY5PCoZsRjmAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:96:56:c7:79:1b:7c:9b:24:af:0f:44:f3:96:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382ad906d719a66a85a313d105294002cb657f7b
Validity
Not Before: Jun 28 19:01:33 2025 GMT
Not After : Jun 29 19:01:33 2025 GMT
Subject: CN=6536ed7f8ad6cfa59098c15ff8c28bce9a500092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:c3:2b:c8:79:13:ae:d6:9d:6f:8b:77:0a:
98:48:9b:bd:da:18:b0:5e:d2:88:d2:d8:0c:4f:cc:
43:fc:23:73:9f:2d:5c:ef:73:6c:a5:b7:47:ae:90:
d3:ea:12:03:cb:ae:d5:c6:92:d4:55:cc:96:f3:8e:
cd:c0:be:48:ed:23:6e:14:01:45:8e:51:cb:0e:3f:
94:52:00:4a:0f:d5:3a:12:02:a6:3f:af:df:78:c2:
1c:7c:36:3c:e4:3e:57:c0:5f:0b:d1:57:4e:62:cf:
af:87:e9:5a:68:58:f9:3f:90:e4:de:bd:3e:7d:35:
5d:71:31:fb:d4:d3:e1:97:2e:e8:a7:f1:82:66:f3:
26:8f:28:44:94:b2:52:c6:51:3c:59:d8:73:44:29:
70:4a:2e:75:fb:e2:14:64:1a:30:cc:62:3a:74:21:
f6:95:c8:55:b0:75:e8:49:27:54:8c:5f:98:16:45:
26:22:e1:4b:ad:67:b6:f5:59:69:95:8e:a8:9a:46:
e4:48:f8:a9:88:c3:e6:4f:e7:3d:84:53:21:a7:44:
34:a5:d5:de:13:24:10:5c:19:ee:61:de:87:ee:ac:
54:8c:ee:6c:45:7d:5c:1f:05:91:8c:ab:8a:02:b0:
1f:49:60:eb:cb:1c:93:c6:e9:6b:56:cc:82:32:5d:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:36:ED:7F:8A:D6:CF:A5:90:98:C1:5F:F8:C2:8B:CE:9A:50:00:92
X509v3 Authority Key Identifier:
keyid:38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0b:c4:14:70:c8:64:1b:dc:47:1a:08:de:de:b5:3b:0d:81:
83:72:d3:7e:03:b1:b7:94:a8:d5:8f:bb:0c:01:a8:70:50:f6:
4e:4e:3d:d5:67:c9:93:6b:37:0d:85:aa:6a:e9:63:da:66:43:
2e:3b:f5:37:cd:8b:51:96:da:96:b5:0f:3e:8e:fc:78:d6:ce:
cb:2c:ef:15:c3:11:5b:ce:2c:ed:0b:29:6c:a3:a5:74:e3:5c:
61:50:cc:1b:f3:49:35:4f:51:19:79:99:30:19:ec:53:f2:16:
62:4f:ed:1d:8d:c4:28:d1:78:db:d6:20:50:f9:3a:9f:ea:ee:
e0:b9:a0:27:d4:98:ac:e5:13:7d:42:db:90:5e:43:41:00:55:
85:5b:9a:f2:09:3b:77:2f:5d:c6:18:00:6d:11:25:3a:d9:d0:
00:4b:3d:d7:71:68:db:20:1c:79:92:0a:51:ed:0d:01:64:86:
3f:d0:bd:51:87:b9:8d:ac:84:8b:08:bc:ad:f6:72:15:7d:69:
9a:74:7c:88:95:5a:f5:20:ee:ae:9d:fe:a6:a9:e5:d0:72:8f:
51:36:ec:43:86:63:d0:29:c0:1e:22:90:50:e6:57:6d:23:0a:
5e:17:ae:3f:3b:f0:94:c1:d1:0c:cc:30:cf:c5:81:7f:a3:11:
5a:eb:66:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:26 2025 by rpki-client