Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json)
Hash identifier: 9YjEukZoFiiOQjPLtFx0J1lUWMyIdTEkhk3wOcN4T00=
Subject key identifier: 65:65:97:FF:4A:F6:92:53:BC:31:66:15:59:12:BE:13:AE:9C:01:2D
Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Certificate serial: 0197B7B37C813534CD3CD8F50D2FF60E8783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
Manifest number: 11AF
Signing time: Sat 28 Jun 2025 18:01:22 +0000
Manifest this update: Sat 28 Jun 2025 18:01:22 +0000
Manifest next update: Sun 29 Jun 2025 18:01:22 +0000
Files and hashes: 1: EZv_Oz18_ep5ks2EcgzgLDMuntA.roa (hash: lBizg0TLw4IiTc/RnpBc57fyU2N8mObQpuT7b6/poBM=)
2: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: y4ZjrkHIph33eaJ+7CGI3L2jUzdRZ+8IjmxctRTxgE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7c:81:35:34:cd:3c:d8:f5:0d:2f:f6:0e:87:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Validity
Not Before: Jun 28 18:01:22 2025 GMT
Not After : Jun 29 18:01:22 2025 GMT
Subject: CN=656597ff4af69253bc3166155912be13ae9c012d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:89:5c:8e:da:ec:be:0b:3b:f9:0a:01:c9:ac:
f7:e5:d0:6a:ef:56:07:d8:e6:a6:9b:46:23:48:1a:
03:aa:0c:96:df:d4:2f:66:c6:9c:13:bf:c7:fe:e0:
f3:d7:f1:0f:cd:0d:4d:34:bf:2f:0e:cb:66:b8:7e:
a2:47:b9:6c:d4:64:dd:5f:fd:93:e6:e8:36:6b:b6:
21:d9:fe:b9:fb:39:40:ec:96:5d:83:1a:4f:b7:e3:
07:5a:16:05:ee:11:e5:5b:b3:59:22:18:28:b4:ac:
72:8f:63:f4:11:39:0f:c3:fb:3f:99:08:3d:fe:30:
c9:51:4a:42:cc:eb:cd:bc:87:bf:13:8b:f5:38:4e:
83:61:26:b5:96:e1:1a:50:6f:6e:f8:77:a8:e3:22:
e4:f1:7c:27:3e:93:4d:69:cb:51:10:df:3f:73:dc:
e0:88:b0:f4:ea:ea:2e:4a:09:c5:ee:39:2c:e5:b0:
1a:c7:b1:46:3e:44:dc:77:48:8c:40:c2:7f:26:78:
5f:af:40:10:d0:dc:90:ee:3f:2e:f9:25:ee:2f:b8:
ae:09:3b:b8:0a:16:73:79:54:c9:f6:f4:e8:01:44:
78:92:4a:5e:6e:3f:af:d8:8e:da:c3:41:69:ea:15:
e5:41:0e:5d:8a:19:c2:c8:26:4a:32:19:3b:73:97:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:65:97:FF:4A:F6:92:53:BC:31:66:15:59:12:BE:13:AE:9C:01:2D
X509v3 Authority Key Identifier:
keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e9:0a:bb:a1:82:b7:9a:d0:82:81:06:97:6f:ad:da:de:f3:
39:e2:bd:96:a1:08:9c:66:d2:0a:70:3b:4f:7a:8f:9d:51:50:
47:87:69:4f:95:a1:07:f0:6f:3d:96:94:8a:92:14:60:a1:4f:
c7:45:18:60:f8:90:58:84:e4:bb:8d:f5:6e:c0:f6:d5:0a:98:
e8:24:e4:5f:ab:2b:23:bc:41:65:76:bc:15:4f:fb:15:b7:2b:
a2:5f:f3:b0:69:4c:5d:ff:55:a2:f2:50:cf:67:fa:ed:fe:22:
0a:cf:6f:0e:e7:1c:fc:0f:7f:ae:64:ee:b9:72:c5:8e:61:8e:
67:f8:21:2c:8c:41:0b:af:f5:10:f9:fe:4e:bd:6e:da:c2:75:
0a:b6:18:91:e0:f4:ff:6f:f5:29:6f:98:4a:dd:57:d5:de:da:
d3:bd:4d:ef:04:63:81:8e:80:86:b0:27:d4:75:72:19:85:56:
9e:3e:fa:56:a1:f1:1f:a1:0c:c2:67:40:64:44:5f:2b:6e:46:
d2:90:53:3c:48:16:be:17:29:e7:1f:dd:43:a1:1c:c1:44:82:
5e:2f:26:df:9b:52:0f:ba:3d:97:fa:b4:4d:64:97:39:db:67:
77:e2:55:f1:0d:01:a5:f9:95:bf:47:5f:92:53:58:54:2c:98:
7d:a0:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:56 2025 by rpki-client