Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
File: OCrZBtcZpmqFoxPRBSlAAstlf3s.mft (raw, json)
Hash identifier: WD9pUqvNvGjYRBuU2pnotFgjXfxpdcwaA2Wgcj4Ma00=
Subject key identifier: EE:90:D4:1E:64:D0:35:79:46:A1:B0:8F:C0:41:0E:D2:6A:68:24:0C
Authority key identifier: 38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B
Certificate issuer: /CN=382ad906d719a66a85a313d105294002cb657f7b
Certificate serial: 01984AAEBC987DF1CB5FA462EAF8DAC08862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
Manifest number: 01E2
Signing time: Sun 27 Jul 2025 07:00:22 +0000
Manifest this update: Sun 27 Jul 2025 07:00:22 +0000
Manifest next update: Mon 28 Jul 2025 07:00:22 +0000
Files and hashes: 1: OCrZBtcZpmqFoxPRBSlAAstlf3s.crl (hash: OIerdEydl5uACm68Hv9UY2AN+RpqGPjpNBFVEDWCZJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:bc:98:7d:f1:cb:5f:a4:62:ea:f8:da:c0:88:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382ad906d719a66a85a313d105294002cb657f7b
Validity
Not Before: Jul 27 07:00:22 2025 GMT
Not After : Jul 28 07:00:22 2025 GMT
Subject: CN=ee90d41e64d0357946a1b08fc0410ed26a68240c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:af:1e:d7:3a:e6:ba:a1:ec:dc:ef:81:4c:
00:8d:38:92:84:0d:a7:15:90:f8:d3:18:01:39:81:
30:22:f6:41:6e:d5:91:56:bd:26:31:22:a0:d0:f4:
24:d6:ca:1f:2e:e0:27:31:3e:1a:36:17:3c:21:78:
61:4e:72:93:62:32:93:16:d2:1f:97:fd:5b:53:62:
82:6b:b9:cb:cc:de:f8:a4:2d:e2:a2:4e:6e:f8:08:
62:78:7a:34:76:6f:ee:fc:6c:50:a6:a9:64:ff:8d:
2b:65:b7:73:84:00:aa:9b:59:71:83:d7:bf:93:d4:
47:e7:fa:d8:f9:60:43:88:6e:0e:e8:c5:a4:42:89:
4c:31:ec:52:54:6a:73:6f:96:3c:a9:d9:45:a3:1c:
55:ab:70:d7:5a:4f:4c:66:cd:26:c8:d3:2f:ca:55:
1f:89:11:67:ea:c8:f6:5c:05:b4:21:c0:40:4b:f0:
41:2c:be:88:9d:be:fd:ee:e5:28:37:41:88:24:18:
6a:8d:8a:d1:c4:62:10:3f:13:ab:db:4d:57:16:39:
2e:89:9d:13:d0:f2:31:78:26:c5:42:f7:2b:45:b3:
a0:78:32:e9:c0:40:1f:9d:e7:ef:bb:c9:a8:d4:42:
85:be:6c:e9:fc:40:db:f9:ba:ab:97:fe:c1:d2:ac:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:90:D4:1E:64:D0:35:79:46:A1:B0:8F:C0:41:0E:D2:6A:68:24:0C
X509v3 Authority Key Identifier:
keyid:38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a2:6b:7b:98:33:61:a1:ed:24:58:af:c7:4d:cd:94:c8:8c:
41:07:98:46:fb:16:a9:c0:bb:70:40:49:24:fa:61:77:db:cd:
3f:64:ef:6e:da:b7:55:84:85:c8:db:21:1b:79:e3:c7:69:8d:
39:ad:d4:38:ba:6b:7b:97:0a:54:fb:df:03:57:25:22:c1:83:
6c:78:6e:78:24:5c:be:01:ac:95:8d:be:e2:d6:38:c7:d9:20:
eb:62:ac:fc:b9:fa:11:db:8e:e3:b0:a2:c9:3e:e8:31:5e:ca:
ca:e7:35:66:4d:60:51:0d:e8:5b:d3:f5:15:6b:ab:9b:dd:70:
cf:e7:bd:b1:22:e9:40:a5:4d:88:d0:b0:ca:e3:15:ec:06:21:
2d:cb:30:a7:7e:8e:9e:0c:96:51:3d:6a:ae:b0:cc:e8:2f:af:
ab:8b:9f:09:ba:cc:1e:42:09:00:6d:05:50:3a:ff:52:fc:e6:
63:dd:d0:58:98:40:0a:a1:8b:79:f5:5e:c3:7e:45:6f:45:7a:
78:8a:a8:43:98:2b:86:c6:6c:86:ef:ac:cd:31:ac:f0:f8:c0:
18:d6:ec:52:f4:37:18:fa:76:d2:20:f7:0f:32:7e:de:43:ce:
97:5e:a8:c8:d5:60:c8:e2:35:13:3d:cc:56:c3:71:75:ba:62:
e8:ec:b6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:12:10 2025 by rpki-client