Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
File: OCrZBtcZpmqFoxPRBSlAAstlf3s.mft (raw, json)
Hash identifier: GL+SGGx6gTz3K6DhdfXrRwD2ML2J1pxImntgIVWuak4=
Subject key identifier: 81:93:08:76:03:D9:24:A7:09:9F:21:78:E5:15:B0:3D:E5:F9:6A:57
Authority key identifier: 38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B
Certificate issuer: /CN=382ad906d719a66a85a313d105294002cb657f7b
Certificate serial: 0196B8FEE71E7E70F221A68B133D8DCCA438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
Manifest number: 0112
Signing time: Sat 10 May 2025 07:00:35 +0000
Manifest this update: Sat 10 May 2025 07:00:35 +0000
Manifest next update: Sun 11 May 2025 07:00:35 +0000
Files and hashes: 1: OCrZBtcZpmqFoxPRBSlAAstlf3s.crl (hash: Sm6iAO9kOHVW3hjzjwL9VIcDtxAqHbKPEmEFE9x49Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:e7:1e:7e:70:f2:21:a6:8b:13:3d:8d:cc:a4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382ad906d719a66a85a313d105294002cb657f7b
Validity
Not Before: May 10 07:00:35 2025 GMT
Not After : May 11 07:00:35 2025 GMT
Subject: CN=8193087603d924a7099f2178e515b03de5f96a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:34:17:ee:81:2c:87:1e:50:0f:50:16:66:
64:94:c2:0a:03:38:90:ee:82:64:48:b7:fd:14:00:
58:71:54:45:56:e7:a8:34:0a:a3:31:b1:aa:cb:cf:
c4:42:24:2b:11:18:cb:bc:db:20:22:ee:4f:50:85:
58:f8:e1:a6:be:b7:82:e8:f8:b5:18:81:c8:b7:6f:
ff:9b:f2:95:ea:1b:5a:bf:38:6b:23:af:76:de:5e:
45:58:d8:70:15:20:00:66:87:ea:d4:91:de:a0:b8:
06:b2:94:52:52:4b:43:98:21:c2:74:64:ba:03:26:
f7:b5:81:06:9e:94:d9:ce:2e:2e:9a:c6:be:bf:c0:
87:af:6f:8b:5a:6d:60:ce:e0:09:59:f7:6e:3f:1a:
36:50:05:b7:02:1e:03:cc:61:c5:04:c8:9c:a9:1a:
13:85:82:f4:01:0d:5e:ac:6a:e5:72:0f:ba:37:15:
08:47:41:31:dc:05:cb:dd:51:33:c4:e3:56:05:ee:
27:f3:d2:e8:ea:56:7c:13:da:ae:ad:a7:31:0b:55:
39:c9:b6:bd:39:94:33:15:39:95:6e:f0:e5:99:77:
f4:55:57:ed:75:28:d2:8f:88:3b:a0:e7:96:c0:1d:
8a:0c:72:cf:8a:01:d4:b9:36:48:90:d9:5f:fe:f7:
ed:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:93:08:76:03:D9:24:A7:09:9F:21:78:E5:15:B0:3D:E5:F9:6A:57
X509v3 Authority Key Identifier:
keyid:38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e1:d6:1d:c2:cd:fb:54:3f:76:03:ca:b7:3b:1b:10:5b:f5:
4f:2a:05:20:37:af:b3:03:1e:4f:ff:4f:39:b0:a2:91:e7:74:
f5:58:a7:04:02:ac:85:b9:43:89:25:e6:c8:76:65:23:11:14:
69:4a:f6:f8:6b:05:fb:1a:32:c8:5d:bb:0d:34:8d:fd:2b:8b:
8a:61:27:a7:a4:49:dd:fb:c4:e1:43:f4:69:b6:ea:4c:db:e4:
5a:7c:17:17:5c:4e:4a:93:c7:89:36:0c:57:e5:5c:cf:f8:f0:
5d:f1:9e:75:fc:35:8d:f8:22:8a:16:bb:dd:38:07:37:eb:69:
b2:69:82:2a:41:24:7d:8c:34:3d:8a:ee:13:25:fe:d3:15:e1:
6d:97:8c:d1:69:30:59:f7:ea:08:b6:8a:77:aa:76:5f:e9:2f:
63:f7:0f:a7:87:0f:93:4d:48:df:2b:1e:a9:34:9b:df:31:a7:
5c:ce:95:ff:ab:ab:92:86:37:6c:be:48:69:a3:17:8e:96:e2:
29:24:3a:9e:d8:c2:b8:c8:6c:0f:7a:03:ef:e9:84:15:2e:4e:
95:13:f9:29:23:55:47:13:e5:ba:46:1a:58:28:1d:7e:0d:7d:
4d:ea:1c:7e:eb:ee:7d:09:f9:5e:66:65:77:9d:63:13:64:e2:
45:f1:9c:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4/ucefnDyIaaLEz2NzKQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmFkOTA2ZDcxOWE2NmE4NWEzMTNkMTA1Mjk0MDAyY2I2
NTdmN2IwHhcNMjUwNTEwMDcwMDM1WhcNMjUwNTExMDcwMDM1WjAzMTEwLwYDVQQD
Eyg4MTkzMDg3NjAzZDkyNGE3MDk5ZjIxNzhlNTE1YjAzZGU1Zjk2YTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl80F+6BLIceUA9QFmZklMIKAziQ
7oJkSLf9FABYcVRFVueoNAqjMbGqy8/EQiQrERjLvNsgIu5PUIVY+OGmvreC6Pi1
GIHIt2//m/KV6htavzhrI6923l5FWNhwFSAAZofq1JHeoLgGspRSUktDmCHCdGS6
Ayb3tYEGnpTZzi4umsa+v8CHr2+LWm1gzuAJWfduPxo2UAW3Ah4DzGHFBMicqRoT
hYL0AQ1erGrlcg+6NxUIR0Ex3AXL3VEzxONWBe4n89Lo6lZ8E9quracxC1U5yba9
OZQzFTmVbvDlmXf0VVftdSjSj4g7oOeWwB2KDHLPigHUuTZIkNlf/vftfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGTCHYD2SSnCZ8heOUVsD3l+WpXMB8GA1UdIwQY
MBaAFDgq2QbXGaZqhaMT0QUpQALLZX97MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NyWkJ0Y1pwbXFGb3hQUkJTbEFBc3RsZjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85MTRkOTEtZWU3MS00MjI0LWIzMDAt
NmNlNTJiZWU2NjZhLzEvT0NyWkJ0Y1pwbXFGb3hQUkJTbEFBc3RsZjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi85MTRkOTEtZWU3MS00MjI0LWIzMDAtNmNlNTJiZWU2NjZh
LzEvT0NyWkJ0Y1pwbXFGb3hQUkJTbEFBc3RsZjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOHWHcLN
+1Q/dgPKtzsbEFv1TyoFIDevswMeT/9PObCiked09VinBAKshblDiSXmyHZlIxEU
aUr2+GsF+xoyyF27DTSN/SuLimEnp6RJ3fvE4UP0abbqTNvkWnwXF1xOSpPHiTYM
V+Vcz/jwXfGedfw1jfgiiha73TgHN+tpsmmCKkEkfYw0PYruEyX+0xXhbZeM0Wkw
WffqCLaKd6p2X+kvY/cPp4cPk01I3yseqTSb3zGnXM6V/6urkoY3bL5IaaMXjpbi
KSQ6ntjCuMhsD3oD7+mEFS5OlRP5KSNVRxPlukYaWCgdfg19TeocfuvufQn5XmZl
d51jE2TiRfGcuA==
-----END CERTIFICATE-----
Generated at Sat May 10 16:41:29 2025 by rpki-client