Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json)
Hash identifier: bVayPEVuVZ26wC6Zebm14rwljxEtiTIJjeG29fM4b50=
Subject key identifier: 7E:6F:BE:DE:78:70:F6:24:46:01:63:18:81:1D:97:67:EF:8E:66:7E
Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Certificate serial: 019A72CA9C6C2A4268EE4DC836DBE63E23EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
Manifest number: 1319
Signing time: Tue 11 Nov 2025 12:01:12 +0000
Manifest this update: Tue 11 Nov 2025 12:01:12 +0000
Manifest next update: Wed 12 Nov 2025 12:01:12 +0000
Files and hashes: 1: EZv_Oz18_ep5ks2EcgzgLDMuntA.roa (hash: lBizg0TLw4IiTc/RnpBc57fyU2N8mObQpuT7b6/poBM=)
2: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: pS1dXhKQbFCNQ+TJ9BRCDdtihTWLiS1KVcWSJkteZsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:9c:6c:2a:42:68:ee:4d:c8:36:db:e6:3e:23:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Validity
Not Before: Nov 11 12:01:12 2025 GMT
Not After : Nov 12 12:01:12 2025 GMT
Subject: CN=7e6fbede7870f62446016318811d9767ef8e667e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:8a:c9:e0:a9:3e:27:6b:b4:36:33:1f:c3:
dd:31:c3:45:7b:62:eb:9a:28:68:75:ee:9a:41:cc:
bc:7d:9e:02:fb:99:d9:2c:48:f2:7f:56:14:c8:f4:
0b:06:d5:30:53:3c:b8:44:0c:5a:51:50:b0:6d:9b:
4d:8b:ac:e9:b3:71:4c:df:46:6c:27:49:cc:6b:c9:
8e:51:6e:84:72:fe:2f:8a:d2:ed:30:37:9f:1f:7e:
1b:86:ac:ed:cc:25:0f:66:c8:f1:b8:1d:94:2a:e5:
44:f3:af:92:59:00:10:e8:85:81:e8:1a:ca:97:67:
c4:63:2d:fa:9d:77:7e:6c:eb:59:cb:00:37:2d:91:
4f:37:b1:15:c3:43:bf:97:bd:51:87:2b:51:24:56:
dc:18:ec:bd:b1:d0:aa:e0:c0:76:b0:93:77:e7:95:
6b:45:34:88:72:b3:52:ed:20:7e:fc:20:e0:75:e5:
35:af:f5:1a:6e:0c:b8:69:0b:7a:72:bb:8a:20:7b:
4e:9a:e7:4a:b6:a8:93:38:fd:f7:4d:f1:ab:de:1c:
dd:34:69:21:39:8d:63:f4:fe:ee:c7:99:a2:cf:5e:
c8:dd:da:da:85:8b:19:25:a0:7e:8d:38:58:f7:10:
f0:ab:ef:4a:95:b8:3d:f6:cc:28:40:0b:bb:ba:58:
e5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6F:BE:DE:78:70:F6:24:46:01:63:18:81:1D:97:67:EF:8E:66:7E
X509v3 Authority Key Identifier:
keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:14:d0:7e:88:c4:50:bf:9c:29:c3:c4:49:08:b0:ca:06:79:
5b:a3:7e:f4:a5:e0:90:f9:47:84:3d:6d:a3:72:66:13:92:a2:
52:d2:fa:a3:d7:e9:15:67:b4:12:c1:c3:6a:27:33:2b:20:6e:
f9:57:8d:90:f7:02:1c:2f:05:26:f3:22:f5:cd:7c:4d:43:c3:
a1:6f:e5:4d:b7:20:66:d9:db:cd:32:0a:56:c5:cc:85:70:d3:
79:39:87:ff:6b:62:93:fe:e5:25:41:08:b7:63:9e:a8:b9:ae:
f9:1b:a3:c5:ec:76:78:28:8c:8e:c1:25:7c:49:b2:2f:33:78:
87:af:55:75:f8:eb:78:6f:ad:02:f1:59:d3:34:af:17:55:f2:
59:e1:a8:84:48:59:f5:e0:1b:d3:a6:94:6f:8c:89:2d:9e:bc:
0a:d4:bd:68:04:ac:53:8f:1d:93:73:f3:58:12:97:93:70:95:
85:a7:40:cc:6c:1e:cc:91:e3:74:60:30:92:e3:b0:3e:1b:f1:
0d:85:f2:34:e9:6e:3c:e8:a5:9e:2f:f9:24:2e:b4:ed:d9:42:
ab:f4:b7:42:70:fb:5e:d7:8c:15:a8:4a:f5:0d:14:0a:dd:9f:
c9:4e:a7:97:21:6e:f6:fc:0d:ca:4f:2d:41:ef:3d:2c:a2:2c:
13:3e:91:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:43 2025 by rpki-client