Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
File: OCZCPrAZVSJObBHRnG05OB6L4h0.mft (raw, json)
Hash identifier: 6jke6wpvpfkgoiuUatXblfRGdISqdGiXqDBHpZmluME=
Subject key identifier: 3C:14:58:46:A8:8B:FC:1C:3B:DD:AF:A1:C0:85:8D:11:71:B5:64:F4
Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
Certificate issuer: /CN=3826423eb01955224e6c11d19c6d39381e8be21d
Certificate serial: 019A4DE1CAA03D475C57A1EBF2CC53877C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
Manifest number: 0B41
Signing time: Tue 04 Nov 2025 08:00:34 +0000
Manifest this update: Tue 04 Nov 2025 08:00:34 +0000
Manifest next update: Wed 05 Nov 2025 08:00:34 +0000
Files and hashes: 1: OCZCPrAZVSJObBHRnG05OB6L4h0.crl (hash: HWtxZwfWncIP7ICYF3jKwGfZaxjqho5m9YBy6uY2/lw=)
2: uEaPXwIvt3nd0ncZqWTmGRgN2Co.roa (hash: V/FrvYjkhAUQhpjTMGaHfRf+RO486rwY6D+JJKx9Z6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:ca:a0:3d:47:5c:57:a1:eb:f2:cc:53:87:7c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d
Validity
Not Before: Nov 4 08:00:34 2025 GMT
Not After : Nov 5 08:00:34 2025 GMT
Subject: CN=3c145846a88bfc1c3bddafa1c0858d1171b564f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:71:c2:6b:ed:4b:aa:c3:84:09:40:04:e0:
22:00:f5:a3:dc:20:f4:e5:65:02:c8:76:57:2d:3a:
b7:e6:bf:fe:3b:93:43:bf:d4:c8:a4:15:53:14:5a:
3b:c2:35:33:26:ed:99:1e:6b:57:fc:72:48:2a:ba:
a3:df:01:56:a1:11:3d:a7:39:3f:db:84:fb:51:4c:
bf:13:82:9f:0b:37:48:e9:a5:28:33:37:6d:15:cb:
88:56:06:9d:16:d9:52:4e:9c:be:23:93:10:90:b2:
62:16:0c:d1:0b:3a:77:d9:44:0c:87:6e:12:5e:14:
be:85:85:b6:02:3b:0b:d4:9b:de:07:93:11:6d:69:
43:e8:a2:79:88:de:6d:a9:ab:86:9c:43:db:42:76:
be:c0:05:86:e9:48:84:e7:e0:6e:6b:8a:4f:80:9c:
2f:bf:2d:9a:ad:63:fe:a5:17:3b:84:fd:8c:45:40:
b1:72:1e:64:f6:02:8b:5d:7c:7f:15:5c:39:d7:eb:
b8:4f:47:89:72:ff:ec:11:93:92:da:9c:e6:ba:f8:
58:70:12:88:d3:de:9b:6f:28:b9:11:8d:25:c2:06:
3b:7a:96:10:25:18:3b:d1:6f:c8:80:c4:4b:52:84:
30:d3:c6:49:01:53:d0:13:77:11:da:b1:44:94:bf:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:14:58:46:A8:8B:FC:1C:3B:DD:AF:A1:C0:85:8D:11:71:B5:64:F4
X509v3 Authority Key Identifier:
keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:64:37:b8:35:c9:47:0e:6d:9d:6d:7c:c7:12:12:00:9d:21:
82:1b:34:b7:6c:40:eb:7b:81:5b:f3:a3:5b:9f:1c:da:5d:d4:
e9:f8:ab:65:da:aa:46:6a:54:4f:f3:b5:cb:8d:1e:61:7d:72:
d0:d0:3c:8e:c2:14:9c:b0:27:9b:ee:9e:9e:a1:54:9b:9b:37:
71:30:bb:48:60:9e:4a:48:81:d8:be:cf:82:49:38:1b:db:28:
b3:c3:5e:43:6d:a3:2c:58:f7:ab:5c:c6:4a:b0:38:83:19:f6:
4d:ec:a3:bd:34:df:16:c2:ab:61:6a:3a:b4:28:a7:63:68:26:
fa:ff:e5:f3:c9:b6:5f:ef:e0:20:24:30:ed:df:4e:8e:21:bd:
37:6d:57:ad:75:f6:9b:c1:b1:04:ee:6f:dc:f2:b8:e0:fc:51:
3c:89:25:66:cf:85:aa:9b:04:ef:72:b2:07:d0:75:43:e2:ee:
ea:70:9b:20:e3:cb:9e:35:d3:b0:6a:84:3b:0f:ec:bc:e8:e8:
1b:aa:f4:f3:34:db:3c:29:55:32:8f:1e:95:18:5a:7c:16:0c:
10:79:3d:ff:00:45:8d:24:e6:94:bb:17:3e:35:2b:25:a7:f3:
c7:3a:3e:45:1a:51:90:9c:d1:b2:bc:97:83:73:7c:c9:b8:79:
15:db:69:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4cqgPUdcV6Hr8sxTh3wGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MjY0MjNlYjAxOTU1MjI0ZTZjMTFkMTljNmQzOTM4MWU4
YmUyMWQwHhcNMjUxMTA0MDgwMDM0WhcNMjUxMTA1MDgwMDM0WjAzMTEwLwYDVQQD
EygzYzE0NTg0NmE4OGJmYzFjM2JkZGFmYTFjMDg1OGQxMTcxYjU2NGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+1xwmvtS6rDhAlABOAiAPWj3CD0
5WUCyHZXLTq35r/+O5NDv9TIpBVTFFo7wjUzJu2ZHmtX/HJIKrqj3wFWoRE9pzk/
24T7UUy/E4KfCzdI6aUoMzdtFcuIVgadFtlSTpy+I5MQkLJiFgzRCzp32UQMh24S
XhS+hYW2AjsL1JveB5MRbWlD6KJ5iN5tqauGnEPbQna+wAWG6UiE5+Bua4pPgJwv
vy2arWP+pRc7hP2MRUCxch5k9gKLXXx/FVw51+u4T0eJcv/sEZOS2pzmuvhYcBKI
096bbyi5EY0lwgY7epYQJRg70W/IgMRLUoQw08ZJAVPQE3cR2rFElL8AawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwUWEaoi/wcO92vocCFjRFxtWT0MB8GA1UdIwQY
MBaAFDgmQj6wGVUiTmwR0ZxtOTgei+IdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NaQ1ByQVpWU0pPYkJIUm5HMDVPQjZMNGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8xMWQxZTUtM2NjNy00OTcyLWEwN2Et
Nzg1ZTNlODc2OGY5LzEvT0NaQ1ByQVpWU0pPYkJIUm5HMDVPQjZMNGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8xMWQxZTUtM2NjNy00OTcyLWEwN2EtNzg1ZTNlODc2OGY5
LzEvT0NaQ1ByQVpWU0pPYkJIUm5HMDVPQjZMNGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2Q3uDXJ
Rw5tnW18xxISAJ0hghs0t2xA63uBW/OjW58c2l3U6firZdqqRmpUT/O1y40eYX1y
0NA8jsIUnLAnm+6enqFUm5s3cTC7SGCeSkiB2L7Pgkk4G9sos8NeQ22jLFj3q1zG
SrA4gxn2TeyjvTTfFsKrYWo6tCinY2gm+v/l88m2X+/gICQw7d9OjiG9N21XrXX2
m8GxBO5v3PK44PxRPIklZs+FqpsE73KyB9B1Q+Lu6nCbIOPLnjXTsGqEOw/svOjo
G6r08zTbPClVMo8elRhafBYMEHk9/wBFjSTmlLsXPjUrJafzxzo+RRpRkJzRsryX
g3N8ybh5Fdtpnw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:17 2025 by rpki-client