Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
File: ocG-CYGk51dsVi9vCeZcF8GA48o.mft (raw, json)
Hash identifier: IFJHNDZ1Tt+vUG2XQ8Zv03V6qJW/0YsgIhvQUx1015o=
Subject key identifier: FA:E4:84:2F:2A:C3:E3:BD:86:CF:7A:81:A8:97:EB:D7:E3:8E:1D:90
Authority key identifier: A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
Certificate issuer: /CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Certificate serial: 019873742C0F50B8CF71DDF7CE095BCEB34F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 05:00:49 +0000
Manifest this update: Mon 04 Aug 2025 05:00:49 +0000
Manifest next update: Tue 05 Aug 2025 05:00:49 +0000
Files and hashes: 1: Nmiqzb5OKDKFPEDZ9AhOwfzW5jQ.roa (hash: 16HSNwP1Wfx8pQJ0EjO/70dnXDCvO8XmFYI9/xms5GY=)
2: ocG-CYGk51dsVi9vCeZcF8GA48o.crl (hash: 1T6asyePVI6fRH6ddpw2GzocMHs7Pp72pGfoX7N6YH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:2c:0f:50:b8:cf:71:dd:f7:ce:09:5b:ce:b3:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c1be0981a4e7576c562f6f09e65c17c180e3ca
Validity
Not Before: Aug 4 05:00:49 2025 GMT
Not After : Aug 5 05:00:49 2025 GMT
Subject: CN=fae4842f2ac3e3bd86cf7a81a897ebd7e38e1d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:08:74:7f:3c:37:34:1f:85:25:a1:28:b7:
7d:a9:13:cd:90:7a:11:ae:15:08:3a:b5:91:6e:97:
da:df:56:7d:fb:94:85:11:96:a1:b0:4a:30:b5:0d:
0f:fd:e3:57:8f:00:c3:92:b6:a6:eb:60:f1:e1:90:
d0:a5:3a:94:10:d5:51:a1:2e:08:f3:be:f0:af:28:
c2:da:c5:68:ff:b5:37:aa:b8:63:44:56:c3:34:1f:
c4:3c:a5:bf:ef:c3:53:43:44:16:c6:83:40:5e:69:
43:16:1b:f2:ef:d3:ac:24:98:1c:dd:0b:c8:fc:d6:
99:c9:ad:3d:81:6a:c0:84:51:8f:c8:b6:77:67:c5:
70:e2:92:83:37:3a:90:c6:5b:dc:4a:67:a4:e7:f5:
4d:06:68:45:40:c2:45:05:44:6d:5a:15:d7:3d:a8:
45:7b:ef:88:f5:07:18:84:e4:c6:a3:77:5e:eb:33:
f9:8a:fe:fa:4a:79:bd:fd:40:ce:2c:ad:c5:7e:11:
82:bb:c7:7c:71:76:2c:71:3a:4f:48:73:c0:00:52:
43:37:9c:73:e9:09:5a:6d:54:ed:d6:b3:07:0a:a9:
5a:dd:49:42:80:89:3c:48:04:3c:46:ec:83:a1:fb:
ca:a0:9e:9a:cc:02:ba:ae:fc:30:f1:a5:fb:16:4d:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E4:84:2F:2A:C3:E3:BD:86:CF:7A:81:A8:97:EB:D7:E3:8E:1D:90
X509v3 Authority Key Identifier:
keyid:A1:C1:BE:09:81:A4:E7:57:6C:56:2F:6F:09:E6:5C:17:C1:80:E3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocG-CYGk51dsVi9vCeZcF8GA48o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/81e5a5-ac39-43c1-872f-98dfc2ee6e0c/1/ocG-CYGk51dsVi9vCeZcF8GA48o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f3:19:d3:a0:33:67:25:f6:02:db:5f:5f:a8:d2:3d:96:fc:
b7:8a:e6:87:5a:04:85:b0:c0:7d:e4:08:c5:55:b4:52:86:84:
7c:8f:93:e2:89:95:ae:df:2c:9e:30:de:b0:a1:05:73:4b:36:
53:50:8c:38:3c:7d:c2:81:d3:7b:68:fb:de:fb:79:0e:06:9f:
ac:8e:c1:90:01:c7:5f:f8:31:f8:63:cc:fc:b7:95:0f:79:bf:
f5:bb:f7:67:61:4a:5e:14:20:fb:ec:d8:19:6e:5e:0c:66:3c:
31:f6:2a:72:21:67:e6:3c:b0:4e:18:ca:1f:ca:5d:80:25:0b:
a2:21:b8:c8:67:bb:19:db:5f:45:3a:c4:14:f4:c4:e7:4e:d3:
9b:d9:38:7b:7b:71:4d:78:99:07:e5:0a:2d:07:90:5b:3d:21:
1e:e9:25:be:ab:3a:9a:92:a1:e7:ae:aa:d8:ac:64:d6:31:d1:
7b:8c:2b:b5:6d:89:f2:13:34:64:f8:05:fa:1c:c4:e6:c8:dd:
a4:8a:3c:3b:27:b6:f3:1a:c8:c4:d0:ec:c8:2c:3d:54:f4:0e:
25:b8:e5:2d:fc:72:2e:10:8a:84:57:d5:b8:c1:ac:12:1c:03:
30:c8:1e:c5:b5:3f:df:f7:d9:fb:26:10:e7:fc:60:f4:2a:5b:
84:28:98:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:10 2025 by rpki-client