Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
File: OCZCPrAZVSJObBHRnG05OB6L4h0.mft (raw, json)
Hash identifier: Tc2hq/U8q8u9KQS2gVfQy9dQxxKl4v4//C8rj3f1CpQ=
Subject key identifier: 70:27:EF:99:35:1B:91:8E:AE:9E:DA:C4:B6:1E:19:97:2F:49:05:80
Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
Certificate issuer: /CN=3826423eb01955224e6c11d19c6d39381e8be21d
Certificate serial: 01984A40C1EF4AB8DA9B5C11B48DBC2F46E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
Manifest number: 0A36
Signing time: Sun 27 Jul 2025 05:00:14 +0000
Manifest this update: Sun 27 Jul 2025 05:00:14 +0000
Manifest next update: Mon 28 Jul 2025 05:00:14 +0000
Files and hashes: 1: OCZCPrAZVSJObBHRnG05OB6L4h0.crl (hash: k3X0ZBBPiLASABPRYhu4I5RsEbO3YIfRGnkZfS4SXlw=)
2: uEaPXwIvt3nd0ncZqWTmGRgN2Co.roa (hash: V/FrvYjkhAUQhpjTMGaHfRf+RO486rwY6D+JJKx9Z6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:c1:ef:4a:b8:da:9b:5c:11:b4:8d:bc:2f:46:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d
Validity
Not Before: Jul 27 05:00:14 2025 GMT
Not After : Jul 28 05:00:14 2025 GMT
Subject: CN=7027ef99351b918eae9edac4b61e19972f490580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:63:2b:f8:64:d2:b0:00:38:f6:5f:b1:d0:1c:
ab:c5:a5:d4:30:a4:4f:bc:48:27:af:12:ba:e4:2c:
b2:71:02:e8:4a:12:9f:51:a5:27:19:c2:e1:fd:c5:
4e:10:6b:92:09:91:77:e5:14:74:f7:cd:81:9f:26:
99:ac:c2:33:6d:3b:8a:ed:c6:86:ed:06:ff:50:6a:
c3:7a:c2:ce:af:6c:8c:4b:40:38:a8:d1:15:2a:58:
f1:b8:7f:56:e6:3c:8f:26:65:86:26:14:25:64:db:
93:63:1e:f4:f8:58:7c:f5:89:62:12:0e:c5:aa:5f:
ca:4a:62:a1:b0:ae:8e:05:54:c7:58:57:12:9f:b0:
ad:9b:a8:66:29:a5:8b:12:c2:e6:58:77:dc:64:39:
67:98:18:9c:da:8e:61:48:22:74:0a:61:38:40:c8:
39:31:74:4d:59:fe:9b:fd:ec:0f:59:ca:1c:3d:bb:
68:9f:2d:d3:4f:20:e0:b0:66:6a:e3:d5:49:f5:45:
42:5b:8b:97:51:af:89:34:5e:91:d8:91:d0:a7:b4:
a7:1f:cc:8a:d0:93:0d:bf:03:e7:cb:ef:dc:bd:49:
01:c9:2a:3d:fd:f0:f9:e7:b1:22:a7:d6:f0:65:c7:
75:ee:fd:2d:b0:6e:ad:60:30:1f:b4:54:e2:b1:cf:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:27:EF:99:35:1B:91:8E:AE:9E:DA:C4:B6:1E:19:97:2F:49:05:80
X509v3 Authority Key Identifier:
keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:56:b2:de:39:7b:9b:e9:fc:be:b1:74:3a:9b:38:b6:d4:ab:
15:e2:84:c1:4b:70:0a:be:38:20:79:99:ac:25:68:15:f8:49:
51:a0:2b:e1:44:dc:2f:26:17:c6:20:c6:3c:f9:8e:0e:63:c7:
74:63:13:2a:13:73:46:d4:b2:55:27:69:54:c8:df:e5:33:ed:
3f:28:82:ff:55:2a:ae:d4:1a:ed:48:08:af:a4:82:87:0b:f8:
66:d9:13:f9:cf:4c:06:92:79:17:d2:57:89:bb:56:49:5b:2d:
73:34:9b:42:df:0e:2b:5a:75:21:ff:24:15:26:3d:65:04:b7:
af:73:9a:a4:a2:ef:a6:1e:59:c3:3e:e7:d7:3d:89:2b:2c:1f:
18:6e:bc:28:0d:69:fa:56:d0:5e:76:ec:eb:7a:7f:54:b8:87:
2a:84:ec:13:0b:ed:74:25:af:c3:44:56:50:31:ee:8e:e4:27:
0e:12:da:fa:1e:51:b7:97:ef:a6:37:16:7c:57:6f:62:7d:9a:
69:ee:9e:d7:d4:13:c2:29:f4:f2:d1:87:31:9a:9f:ff:57:b3:
95:05:ea:f3:23:eb:97:50:26:c7:a3:41:f8:5e:80:c5:59:12:
3e:67:29:e2:47:8f:6b:67:fb:ec:0a:d2:71:f0:6e:01:02:35:
74:05:69:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:48 2025 by rpki-client