Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
File: uOssmbjKaFoqU4WIFB2xxLZB03Y.mft (raw, json)
Hash identifier: tfKKq2V1BBPkXgUXpJvqGDkq62lD1olbCXQ9mNcax64=
Subject key identifier: 38:9E:9D:67:89:B1:D0:29:F6:30:1C:63:F2:8A:9C:5E:96:66:04:44
Authority key identifier: B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
Certificate issuer: /CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Certificate serial: 01975DCB10DAEEA8968D14873D4CE8612AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
Manifest number: 1584
Signing time: Wed 11 Jun 2025 07:01:18 +0000
Manifest this update: Wed 11 Jun 2025 07:01:18 +0000
Manifest next update: Thu 12 Jun 2025 07:01:18 +0000
Files and hashes: 1: uOssmbjKaFoqU4WIFB2xxLZB03Y.crl (hash: PUKzNfh2ivjsQM4AG6SBD8lYMqmyttzMDktn08UtguI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:cb:10:da:ee:a8:96:8d:14:87:3d:4c:e8:61:2a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Validity
Not Before: Jun 11 07:01:18 2025 GMT
Not After : Jun 12 07:01:18 2025 GMT
Subject: CN=389e9d6789b1d029f6301c63f28a9c5e96660444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:df:c6:68:da:75:dc:8e:60:31:fb:1c:a1:b3:
fa:82:9e:32:d8:bd:22:bf:fa:87:4d:2e:9e:a1:3c:
a2:e7:90:17:6e:43:e1:ad:7e:9f:e7:eb:02:3f:bd:
58:d0:1a:11:a0:57:0a:87:3b:95:2a:d6:0a:e5:42:
19:51:47:7f:a8:0a:6a:e6:fd:75:2a:fd:97:47:ad:
82:0f:2c:b7:cd:9f:d7:21:a2:71:63:49:3e:75:cd:
ea:aa:57:48:71:af:5f:88:3d:f6:37:f5:e6:3a:17:
fb:1f:77:c1:b2:75:5d:58:d4:44:6f:9d:7a:9b:56:
47:16:05:44:06:21:ca:20:82:e5:30:21:c6:b2:ae:
9b:de:7c:9d:44:38:c9:5a:35:fe:7b:07:9b:d1:4a:
34:cc:f7:4a:28:3b:e2:e5:54:1e:46:dd:22:90:21:
ee:4d:16:38:97:f1:83:fc:d6:5c:c0:b1:ea:e7:d7:
e4:04:98:12:c2:eb:f2:35:c4:31:69:3c:1f:8c:d9:
14:f1:c9:f6:70:0c:74:6f:78:36:2c:b8:1d:81:55:
d4:72:d8:ee:da:e1:1a:5d:67:51:12:c8:ea:62:88:
20:8e:11:14:1b:4b:b0:2b:e0:30:3c:e3:d8:47:43:
f6:79:11:44:c9:23:ab:92:4e:93:ee:a1:09:62:04:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9E:9D:67:89:B1:D0:29:F6:30:1C:63:F2:8A:9C:5E:96:66:04:44
X509v3 Authority Key Identifier:
keyid:B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0f:ff:2a:72:27:db:e8:16:bb:d6:1a:bd:d4:98:68:78:d7:
29:10:57:31:b8:0f:5c:21:fb:92:56:a8:ed:fa:20:5e:37:f2:
bb:96:3c:f9:da:6e:00:97:38:22:7d:6b:51:8b:27:05:6e:7f:
e8:22:14:2d:87:74:e1:f2:7d:8b:4d:b2:dc:d7:1c:6f:c4:7a:
b3:df:b6:ca:01:cf:d9:7b:f5:e7:ba:89:c5:7e:ec:8a:72:37:
7a:5a:9f:3e:66:b3:bf:8d:30:3e:a9:53:35:6a:22:eb:e1:c0:
e7:1e:eb:4b:ea:f4:85:6d:1e:fe:cc:72:66:0b:3d:de:9f:c7:
24:ec:b0:3f:d2:58:b0:ee:a2:c4:e3:f3:9c:ca:19:b5:4e:77:
fe:d0:53:04:da:7a:cb:8f:dd:83:b6:1b:92:e0:d1:54:1b:fb:
30:c7:50:70:cb:c4:47:a0:ff:39:6d:06:c3:d2:b2:5b:1e:5c:
5d:87:34:ec:e7:88:e8:a3:27:bb:d2:8e:4c:eb:1d:28:2b:e5:
eb:bc:7e:e0:88:16:d2:6a:9d:47:6c:c5:34:d9:3a:40:99:86:
cf:c2:0d:24:bd:11:77:65:a7:4f:a3:b4:e0:b6:94:46:37:71:
aa:84:ac:8a:d5:e3:59:75:1e:07:49:21:14:13:35:1f:d5:11:
ca:7d:c4:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddyxDa7qiWjRSHPUzoYSrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZWIyYzk5YjhjYTY4NWEyYTUzODU4ODE0MWRiMWM0YjY0
MWQzNzYwHhcNMjUwNjExMDcwMTE4WhcNMjUwNjEyMDcwMTE4WjAzMTEwLwYDVQQD
EygzODllOWQ2Nzg5YjFkMDI5ZjYzMDFjNjNmMjhhOWM1ZTk2NjYwNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd/GaNp13I5gMfscobP6gp4y2L0i
v/qHTS6eoTyi55AXbkPhrX6f5+sCP71Y0BoRoFcKhzuVKtYK5UIZUUd/qApq5v11
Kv2XR62CDyy3zZ/XIaJxY0k+dc3qqldIca9fiD32N/XmOhf7H3fBsnVdWNREb516
m1ZHFgVEBiHKIILlMCHGsq6b3nydRDjJWjX+eweb0Uo0zPdKKDvi5VQeRt0ikCHu
TRY4l/GD/NZcwLHq59fkBJgSwuvyNcQxaTwfjNkU8cn2cAx0b3g2LLgdgVXUctju
2uEaXWdREsjqYoggjhEUG0uwK+AwPOPYR0P2eRFEySOrkk6T7qEJYgQnJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDienWeJsdAp9jAcY/KKnF6WZgREMB8GA1UdIwQY
MBaAFLjrLJm4ymhaKlOFiBQdscS2QdN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC80NTc1MzMtNjkwNS00ODQwLTg4M2Mt
YWI2ZDBjMjEzZmRjLzEvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC80NTc1MzMtNjkwNS00ODQwLTg4M2MtYWI2ZDBjMjEzZmRj
LzEvdU9zc21iakthRm9xVTRXSUZCMnh4TFpCMDNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQ//KnIn
2+gWu9YavdSYaHjXKRBXMbgPXCH7klao7fogXjfyu5Y8+dpuAJc4In1rUYsnBW5/
6CIULYd04fJ9i02y3Nccb8R6s9+2ygHP2Xv157qJxX7sinI3elqfPmazv40wPqlT
NWoi6+HA5x7rS+r0hW0e/sxyZgs93p/HJOywP9JYsO6ixOPznMoZtU53/tBTBNp6
y4/dg7YbkuDRVBv7MMdQcMvER6D/OW0Gw9KyWx5cXYc07OeI6KMnu9KOTOsdKCvl
67x+4IgW0mqdR2zFNNk6QJmGz8INJL0Rd2WnT6O04LaURjdxqoSsitXjWXUeB0kh
FBM1H9URyn3E8g==
-----END CERTIFICATE-----
Generated at Wed Jun 11 13:34:20 2025 by rpki-client