Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json)
Hash identifier: 9PhfFJaLZyypH88DhdoG58tCOjt8kRHWqCwt9cVHYsg=
Subject key identifier: 6E:53:40:CB:45:AC:9D:57:51:EC:2F:17:83:14:2C:E3:94:47:D0:0F
Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Certificate serial: 0198D583FEABD1639502B130C7E6B3DFE08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
Manifest number: 1243
Signing time: Sat 23 Aug 2025 06:00:53 +0000
Manifest this update: Sat 23 Aug 2025 06:00:53 +0000
Manifest next update: Sun 24 Aug 2025 06:00:53 +0000
Files and hashes: 1: EZv_Oz18_ep5ks2EcgzgLDMuntA.roa (hash: lBizg0TLw4IiTc/RnpBc57fyU2N8mObQpuT7b6/poBM=)
2: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: 3BT8UcBJN7dAx3j8t2EYxTL27av10KTMDsDysIItjKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:fe:ab:d1:63:95:02:b1:30:c7:e6:b3:df:e0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Validity
Not Before: Aug 23 06:00:53 2025 GMT
Not After : Aug 24 06:00:53 2025 GMT
Subject: CN=6e5340cb45ac9d5751ec2f1783142ce39447d00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:fb:7e:36:96:a0:0e:7b:26:21:0f:05:51:
b6:88:44:a2:49:c2:ed:3c:7c:07:8a:86:45:36:96:
b8:ad:dc:f3:10:36:46:10:82:67:2d:c3:7a:29:a0:
7b:2b:73:59:fd:0b:62:d1:5c:66:16:f7:6c:b4:2c:
f7:1c:03:f9:0b:08:42:de:68:4f:96:55:7c:67:38:
bf:06:eb:b5:70:5e:81:14:fb:bd:4c:3f:87:bd:00:
23:29:6e:89:2b:45:52:a0:a7:ca:b0:b6:63:88:84:
8c:40:30:c4:d8:3d:f3:3a:88:0d:5f:18:0f:9d:9c:
13:ca:9c:ad:6b:be:0f:aa:36:e4:d2:26:c1:5f:76:
d1:bb:ae:f1:94:f5:dd:5f:7c:e2:19:2c:bb:aa:43:
e5:56:b0:22:d7:be:40:4c:01:be:af:f4:c3:1c:96:
16:0c:20:86:cd:73:8d:b8:db:53:33:34:dc:94:50:
a9:6f:2d:31:74:d5:5e:9d:cc:db:f4:db:b8:4b:09:
a3:01:91:80:ed:11:27:0b:84:d1:49:04:fe:80:c5:
8b:61:8e:01:3d:fc:63:5d:53:6e:a4:ff:f7:bc:c2:
a0:d5:90:91:2a:01:eb:15:75:06:82:d1:b5:61:f3:
b0:ce:87:6b:59:f6:b5:5f:11:15:27:d0:f8:64:22:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:53:40:CB:45:AC:9D:57:51:EC:2F:17:83:14:2C:E3:94:47:D0:0F
X509v3 Authority Key Identifier:
keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a8:50:c6:e4:60:36:c8:f9:02:6e:5d:2b:7c:2d:bd:b6:3b:
75:e3:7c:40:93:e0:59:18:41:21:21:22:4b:27:08:62:d5:6f:
dc:37:e0:01:c8:8e:f1:24:04:48:a2:18:dd:76:bc:ea:ad:d5:
a5:66:27:d7:1f:df:bc:dc:c1:83:88:3c:59:2c:ff:0f:85:28:
ae:72:e5:da:f5:2e:be:2f:9e:cf:7e:30:13:d2:3e:f9:0d:78:
98:e3:c2:29:63:d7:e7:fe:03:86:02:32:80:46:f5:0c:f8:16:
ab:de:61:d9:8e:a0:a1:50:58:2d:12:b2:e3:83:82:0e:65:63:
61:21:e3:9a:95:ff:6a:b2:46:35:f9:b7:d5:98:69:9f:95:f8:
11:a5:67:83:fc:8b:f7:9b:af:47:b9:89:8a:29:a0:14:10:d3:
08:73:e4:83:75:09:06:73:b8:27:26:63:0d:01:6b:98:d4:e1:
9c:24:63:65:c1:49:d9:42:3b:15:43:4b:13:de:19:79:6c:e9:
4e:8a:07:1d:95:71:9a:5f:83:48:f3:69:42:ab:44:8e:30:37:
25:db:66:2f:d7:74:e7:03:a7:27:52:07:11:62:f5:a6:f0:ba:
9c:26:70:67:a0:f6:44:77:4c:f3:33:9f:93:0d:b3:2a:d2:70:
14:ff:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:22:49 2025 by rpki-client