Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json)
Hash identifier: 0tBh7k41h6yJLaW1EMfcYMDRvF+rzqbB8zlReA4P90w=
Subject key identifier: 83:C5:8A:8B:D7:18:74:48:75:0B:E6:E0:82:04:A8:71:AB:19:5B:8C
Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Certificate serial: 019A04B5F30856F5CD75C2C7795ACB14B8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
Manifest number: 12E0
Signing time: Tue 21 Oct 2025 03:00:24 +0000
Manifest this update: Tue 21 Oct 2025 03:00:24 +0000
Manifest next update: Wed 22 Oct 2025 03:00:24 +0000
Files and hashes: 1: EZv_Oz18_ep5ks2EcgzgLDMuntA.roa (hash: lBizg0TLw4IiTc/RnpBc57fyU2N8mObQpuT7b6/poBM=)
2: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: DJ/6l4qybvQCdjfzMdQI5DZUvNLmb6fkBqshx5tyEvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:b5:f3:08:56:f5:cd:75:c2:c7:79:5a:cb:14:b8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Validity
Not Before: Oct 21 03:00:24 2025 GMT
Not After : Oct 22 03:00:24 2025 GMT
Subject: CN=83c58a8bd7187448750be6e08204a871ab195b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8b:87:42:a9:c0:61:4f:c8:64:72:5a:e9:0e:
30:43:60:69:95:21:92:36:18:39:78:a7:e2:95:7d:
13:55:0b:c5:d6:00:58:a1:51:67:60:e3:b2:61:5b:
1e:cb:45:09:d7:59:25:98:47:7f:1b:8d:e1:f7:0b:
96:bd:62:e0:b7:71:09:f1:78:8a:46:0f:69:17:11:
78:cc:73:b9:69:cd:c8:53:e0:31:dd:62:0b:c4:73:
1b:9e:d1:94:3e:9d:7e:69:e9:fe:fc:a3:9e:f1:79:
e9:03:31:b7:ef:83:80:ba:89:df:7c:f0:32:3c:69:
54:8d:53:ed:0a:05:4a:4c:3e:2e:3c:a3:63:e6:8a:
38:ed:5d:35:74:96:04:b8:37:fd:fa:19:1e:88:58:
8a:23:14:ed:8c:68:90:c1:cf:bc:d3:a9:72:ae:55:
6b:51:d2:46:9f:fd:ae:a2:1f:17:28:60:56:4d:95:
56:ac:b7:ec:b5:9c:e1:71:40:f1:27:d1:db:12:76:
75:5c:11:9e:05:44:43:1a:54:64:3e:8b:80:3a:eb:
cb:d8:57:a0:9a:fd:36:5f:11:ec:f0:48:75:fc:0d:
91:c1:f8:0a:61:c5:0d:d9:43:fa:29:52:d9:44:10:
f2:11:89:2e:69:43:b5:df:ee:78:e5:dd:6b:13:4c:
47:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C5:8A:8B:D7:18:74:48:75:0B:E6:E0:82:04:A8:71:AB:19:5B:8C
X509v3 Authority Key Identifier:
keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:95:1c:51:7c:56:cc:a4:3a:36:2b:40:19:16:34:47:c2:59:
52:1b:d6:ee:d2:60:72:c9:2b:a8:83:78:7e:04:a9:1b:8e:d7:
8d:7e:7f:0b:f3:e4:5f:9c:bd:d0:77:ae:81:c4:57:0c:14:8d:
ca:48:c1:33:6a:a5:d5:41:3f:2b:b0:9a:71:00:f8:1d:22:b5:
62:d7:92:96:32:23:fa:e1:2e:c5:17:30:a4:ea:2c:62:63:d7:
ea:72:41:9a:1e:7a:6d:25:3f:eb:26:09:0f:2e:ae:f0:5c:b9:
b2:01:fb:00:1a:3a:9c:69:cc:d5:c3:a6:b8:5f:ea:de:0b:d7:
35:b3:4a:25:46:9b:5f:06:4f:0d:38:ea:de:41:18:6d:66:c5:
e4:be:3d:5b:f4:15:be:0d:fd:08:e4:bd:ae:2f:0c:95:c5:99:
cd:37:79:0c:6e:3d:02:b1:de:de:75:25:6f:74:58:76:38:2d:
17:ab:55:1f:6c:d9:10:2c:b6:ff:19:54:de:36:8b:d2:6b:13:
d8:d7:88:b9:b4:eb:c1:94:18:ce:3e:69:a2:d0:c6:8a:9f:46:
75:81:93:b6:31:b3:84:33:f0:a0:d8:82:19:f1:f8:f7:40:1d:
e4:6b:f0:dc:08:7a:5a:d8:10:d7:b5:6f:5b:f4:e3:c8:f3:88:
9c:b2:5f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:02:44 2025 by rpki-client