Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
File: ocG-CYGk51dsVi9vCeZcF8GA48o.mft (raw, json)
Hash identifier: SCWArGPj2GYXz90wJot1Uhz+cIqz82506DtgyKxKG1w=
Subject key identifier: 41:53:0B:E7:DE:AC:5B:DA:0C:BF:5F:57:C7:03:CE:BD:58:6C:AD:E1
Authority key identifier: A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
Certificate issuer: /CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Certificate serial: 0197729A8FF2B3A61DA96FBABCCE69848847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 08:00:21 +0000
Manifest this update: Sun 15 Jun 2025 08:00:21 +0000
Manifest next update: Mon 16 Jun 2025 08:00:21 +0000
Files and hashes: 1: Nmiqzb5OKDKFPEDZ9AhOwfzW5jQ.roa (hash: 16HSNwP1Wfx8pQJ0EjO/70dnXDCvO8XmFYI9/xms5GY=)
2: ocG-CYGk51dsVi9vCeZcF8GA48o.crl (hash: avfEJI//ysdlBeDga+Ip9CGWhp8atdakozsI3mwo9Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:9a:8f:f2:b3:a6:1d:a9:6f:ba:bc:ce:69:84:88:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Validity
Not Before: Jun 15 08:00:21 2025 GMT
Not After : Jun 16 08:00:21 2025 GMT
Subject: CN=41530be7deac5bda0cbf5f57c703cebd586cade1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e5:c9:bb:13:5e:48:ab:63:39:f7:0c:95:e0:
b8:4a:29:ab:ee:3d:fc:cc:b8:4d:47:79:fc:21:a8:
06:9b:32:04:f0:27:4f:98:1a:f2:b8:fd:e6:68:6b:
49:8c:44:c8:2f:af:6f:c4:c6:9d:c1:6c:de:fd:45:
af:b4:b4:de:38:56:9c:96:51:51:e7:03:d3:d7:7c:
b0:1a:63:c9:88:ac:95:f3:d3:0c:0c:89:d8:f3:cd:
dd:46:92:81:ec:ab:be:69:e1:ef:ad:2a:be:7f:dc:
67:13:f4:e9:d8:1b:39:f7:a3:4b:a0:3a:1b:0c:3e:
64:3e:cb:01:a5:8c:9e:16:a1:d2:26:2d:03:d3:cb:
fc:c7:79:d8:33:95:76:9f:1a:da:a0:5e:9c:2f:7b:
eb:bd:dd:4c:c7:96:f2:49:14:9b:eb:23:06:0e:35:
0e:d0:ea:6c:b0:da:2e:23:81:4b:0d:8a:92:d7:34:
f2:98:5a:b6:23:b0:08:3f:aa:39:fd:38:8e:7b:cf:
2b:30:fd:44:b7:db:18:2d:d5:39:30:09:4a:50:3f:
21:3c:21:0a:a8:a9:1e:43:79:a4:6d:20:ff:64:1b:
23:5e:f1:aa:8b:39:2d:d2:72:83:88:33:4d:a4:1f:
2c:28:1a:8b:c7:0a:22:74:61:41:e4:1f:42:db:31:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:53:0B:E7:DE:AC:5B:DA:0C:BF:5F:57:C7:03:CE:BD:58:6C:AD:E1
X509v3 Authority Key Identifier:
keyid:A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:87:f9:a1:ce:53:65:6c:47:9f:66:4c:f8:17:55:ea:c6:eb:
a3:a8:ce:a6:ef:62:39:30:d6:84:d2:1d:ad:13:45:e6:9c:2d:
bb:e1:96:e9:29:33:41:d0:3e:24:10:43:6a:d3:58:d2:41:ae:
bd:05:41:35:67:c6:2e:03:3d:97:ab:d6:93:a7:93:4d:f3:cd:
f9:ac:39:54:db:a1:76:b6:77:76:5e:11:3a:f4:a9:82:b0:81:
87:78:32:f4:e5:b5:c1:36:cc:7c:de:ae:13:6c:05:10:21:c2:
0f:c0:15:af:64:09:98:13:d9:ba:0e:63:9c:60:18:2e:e0:bc:
42:59:ec:9a:21:6c:3f:eb:ab:4e:7f:44:e5:07:bc:ad:0d:06:
00:cc:c2:9b:13:e9:1b:02:2d:96:63:d6:aa:a1:3d:7f:57:52:
85:04:2d:69:95:c6:7e:05:18:c4:a3:e2:59:50:c3:b5:0b:84:
0b:71:73:34:e8:90:8d:ca:f9:12:c4:50:c8:da:fb:e0:71:dd:
f3:5b:09:c6:5c:d5:a5:1f:01:8d:e7:4a:95:f1:59:f7:91:03:
5f:ac:7c:68:0b:af:a8:62:d8:86:c8:83:cc:23:a6:08:24:40:
f5:db:a0:6a:7f:07:41:c0:f5:09:33:7f:7e:74:4e:cd:4e:0f:
2a:f6:fe:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:41:31 2025 by rpki-client