Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
File: OcpQZQQ9KKKtw2ODod99O-yBzo0.mft (raw, json)
Hash identifier: qkP6WBmEqHy9ykTJ6X6wteRL04AVgZ3zYR9QGcUZiUE=
Subject key identifier: CE:4A:A7:B6:18:92:2D:45:BF:C0:1B:E9:E1:A9:03:65:54:05:19:0C
Authority key identifier: 39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
Certificate issuer: /CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Certificate serial: 019922C36A96D77D6BD5A2AF128497B1160C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
Manifest number: 126B
Signing time: Sun 07 Sep 2025 06:00:56 +0000
Manifest this update: Sun 07 Sep 2025 06:00:56 +0000
Manifest next update: Mon 08 Sep 2025 06:00:56 +0000
Files and hashes: 1: EZv_Oz18_ep5ks2EcgzgLDMuntA.roa (hash: lBizg0TLw4IiTc/RnpBc57fyU2N8mObQpuT7b6/poBM=)
2: OcpQZQQ9KKKtw2ODod99O-yBzo0.crl (hash: yX3bGc2yhlzNaWVqFW8jaajBjDHH3hRmTbMPgEywGhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:6a:96:d7:7d:6b:d5:a2:af:12:84:97:b1:16:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ca5065043d28a2adc36383a1df7d3bec81ce8d
Validity
Not Before: Sep 7 06:00:56 2025 GMT
Not After : Sep 8 06:00:56 2025 GMT
Subject: CN=ce4aa7b618922d45bfc01be9e1a903655405190c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b2:47:9e:dc:36:2a:4f:5d:83:32:5c:f8:3f:
ce:4a:ff:c1:fe:68:e3:91:c4:88:97:c7:92:f9:21:
7d:3f:0f:a9:54:7d:28:4e:44:22:7a:3a:27:56:e7:
ec:7f:6f:d4:a8:d2:af:11:1f:30:a7:c1:86:76:f8:
e5:71:8f:e3:26:8e:1a:eb:f4:56:cf:00:c6:46:69:
e9:06:d7:c7:4a:a2:13:af:e8:15:ec:c4:1c:0e:49:
61:31:39:37:d5:ae:33:fd:63:90:4c:24:60:05:b0:
02:32:ad:65:e6:13:0c:21:dc:bd:fa:6b:e7:fb:9e:
24:9f:00:a2:93:51:97:6f:c4:a5:66:b4:45:e9:09:
84:d7:69:3e:89:74:fa:90:80:d2:cd:c9:05:5e:ef:
da:ee:1f:6c:94:47:09:84:b7:ee:11:0f:75:7d:29:
f0:35:89:44:f5:96:78:84:a9:f6:41:03:20:51:14:
0c:1c:6f:9f:c2:5f:0a:0b:ec:c7:ad:3c:41:f8:f0:
3b:72:29:f3:d5:e6:4e:da:1a:e0:4b:0f:ca:ad:be:
d4:37:8b:ae:51:0d:7b:e8:fa:31:0e:fe:4c:0c:a3:
bf:36:1e:8b:53:b6:2f:2f:5b:e3:23:02:bd:14:2a:
89:6f:f3:05:4e:dd:ba:22:ec:ba:2c:11:0f:a8:80:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4A:A7:B6:18:92:2D:45:BF:C0:1B:E9:E1:A9:03:65:54:05:19:0C
X509v3 Authority Key Identifier:
keyid:39:CA:50:65:04:3D:28:A2:AD:C3:63:83:A1:DF:7D:3B:EC:81:CE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcpQZQQ9KKKtw2ODod99O-yBzo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/347c34-96d8-4184-a668-870acfecbcdf/1/OcpQZQQ9KKKtw2ODod99O-yBzo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:04:fc:b9:75:60:b7:8e:8d:e9:e0:c7:b6:80:cd:f4:05:e5:
96:2f:c6:9f:a3:57:b5:2c:b1:f7:78:88:73:b2:ec:54:46:67:
f5:d3:58:f2:d4:a6:71:a1:76:09:be:0c:39:30:bd:03:0a:6a:
ac:51:f9:01:82:2f:67:86:5c:b1:22:c5:4c:24:84:c6:ef:fd:
ee:a1:77:db:2c:12:83:81:3e:44:2b:f3:f8:31:c7:74:b9:3a:
dd:53:3c:6c:93:1e:f1:ee:4f:27:8a:be:49:73:9e:d0:bf:61:
81:23:8a:bb:0d:f9:e9:b1:55:f7:11:45:b6:6e:14:8a:d7:5f:
ee:18:85:0d:96:c4:a0:1c:5c:80:82:f7:dd:17:68:4b:b3:9d:
21:26:e0:57:95:b0:dd:c5:19:5b:f7:1f:da:f1:76:a3:a3:a8:
d3:99:6c:2c:b5:27:5f:4f:59:ed:34:27:be:eb:0c:ee:1d:ac:
03:40:38:12:d6:f6:7a:f2:bb:3b:95:1f:12:2d:c3:fe:ed:f4:
88:2c:af:98:4c:f6:f1:ae:8a:ce:4f:6d:0c:05:28:36:d0:42:
b8:7c:ef:f2:cd:54:46:5d:48:e3:38:82:90:e7:ea:2c:6a:35:
6a:7b:d6:39:57:8d:f6:5b:e6:8d:1f:ae:4d:8e:8e:db:da:3d:
be:4a:aa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:16 2025 by rpki-client