Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
File: OCrZBtcZpmqFoxPRBSlAAstlf3s.mft (raw, json)
Hash identifier: /fwqiwaOeSmyRRAOxOvKg/nPnpDGStUCyZMdUYvV4Wc=
Subject key identifier: C3:F9:87:D8:BF:B5:07:67:B4:2E:F7:6A:67:7B:EA:F7:E5:70:2F:D1
Authority key identifier: 38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B
Certificate issuer: /CN=382ad906d719a66a85a313d105294002cb657f7b
Certificate serial: 0198D5BBC1475282F0D0D4BC0BCE775DBA15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
Manifest number: 022A
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: OCrZBtcZpmqFoxPRBSlAAstlf3s.crl (hash: t0yuaMtnngCeQhIL7FPgMISS3PWh4TvW56TvKKcEUNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c1:47:52:82:f0:d0:d4:bc:0b:ce:77:5d:ba:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382ad906d719a66a85a313d105294002cb657f7b
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=c3f987d8bfb50767b42ef76a677beaf7e5702fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:01:1a:fa:25:b0:dc:9c:96:2d:5d:34:30:
a3:5f:77:09:e7:a2:7e:25:74:a3:20:e8:d4:30:50:
61:b6:83:74:d7:d6:1e:d2:2a:f5:cb:4e:2e:c2:50:
2b:69:46:fb:4e:22:a7:f4:1e:fe:41:b3:d6:68:de:
b8:14:85:a1:85:26:f3:65:c6:18:29:c4:3d:1d:1a:
95:33:fd:54:bd:0b:18:46:82:ab:68:45:da:ab:ca:
e8:cc:30:be:07:ad:0d:8e:34:f5:2a:a8:4f:ef:88:
11:f3:59:81:82:48:46:96:98:88:be:70:dd:ad:53:
cf:86:85:17:02:b2:c8:f3:8c:39:38:27:c3:e6:10:
f4:87:53:a7:98:52:18:fa:99:a3:69:d5:ce:a5:5f:
41:47:a8:db:3c:26:f7:3c:d4:83:fa:19:a5:8d:39:
24:db:30:ca:74:7a:4a:8d:98:f1:a0:15:4b:83:58:
73:be:0f:f4:54:fb:1d:07:4d:f5:a1:36:e9:0c:53:
a4:99:ba:5c:a6:05:6b:26:51:f5:71:27:e5:24:71:
4b:40:cb:2b:db:25:54:bd:21:d4:12:b2:7f:84:7e:
b6:03:dd:f5:9f:ad:e8:38:02:49:03:bd:a0:35:58:
6b:8e:3b:ac:80:00:c8:6b:5b:98:8e:4b:c2:a6:1d:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F9:87:D8:BF:B5:07:67:B4:2E:F7:6A:67:7B:EA:F7:E5:70:2F:D1
X509v3 Authority Key Identifier:
keyid:38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:42:9f:39:89:31:30:c6:0d:37:f1:a0:17:87:b3:0f:db:19:
88:f5:1b:16:e0:7f:ca:33:a5:f9:d5:df:5c:c6:5c:15:16:b2:
c0:b3:e4:64:91:3f:63:35:9e:9b:a2:5a:de:96:b4:92:2e:7f:
ef:55:13:50:d4:f8:23:fb:e4:52:c7:7d:26:c1:45:54:41:7e:
9d:16:41:c7:70:80:34:a4:8b:35:3b:d8:4f:a5:b3:6a:88:78:
d3:60:d6:8a:ac:b8:c6:e4:b4:c8:6a:e2:e4:b7:e5:7f:57:89:
be:3d:09:a0:a4:f3:0c:f8:f5:41:00:6f:30:7d:14:7d:da:3a:
12:2b:2a:67:6f:34:04:1d:62:06:00:1c:6a:48:eb:6f:f0:b3:
8d:f9:3f:41:7d:b3:72:a0:d2:6d:bd:49:f0:7f:fd:a8:ad:27:
f3:7c:ea:a7:70:61:41:9e:7e:59:99:63:10:60:d4:8a:9f:aa:
aa:21:4c:ab:2c:0c:56:a8:ab:04:40:5d:48:59:7c:b5:15:73:
f6:a1:5d:38:95:e6:3a:f8:1e:31:c7:69:0e:60:e1:f7:0d:7c:
af:a1:cc:a1:f4:3e:ef:31:43:3a:e1:d9:37:70:d4:89:fd:ca:
9f:29:a7:8f:0a:f9:99:00:6e:52:81:45:ae:34:7c:5e:74:1d:
8c:65:c2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:16:50 2025 by rpki-client