Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
File: uOssmbjKaFoqU4WIFB2xxLZB03Y.mft (raw, json)
Hash identifier: zCjEdvKuykjXS2iZaNxRk0hMhAV/pdAO73AS8ps4dOM=
Subject key identifier: E3:B2:AE:E7:4C:A5:97:DE:12:31:6D:70:DA:4A:E7:1E:36:87:A4:83
Authority key identifier: B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
Certificate issuer: /CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Certificate serial: 01976D3E49A63259B82A9D17FFBBD175B65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 07:01:27 +0000
Manifest this update: Sat 14 Jun 2025 07:01:27 +0000
Manifest next update: Sun 15 Jun 2025 07:01:27 +0000
Files and hashes: 1: uOssmbjKaFoqU4WIFB2xxLZB03Y.crl (hash: SpodRoorWLscjsNsS7LIMueE/VSGDpfpRmEPJLCOm8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:49:a6:32:59:b8:2a:9d:17:ff:bb:d1:75:b6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Validity
Not Before: Jun 14 07:01:27 2025 GMT
Not After : Jun 15 07:01:27 2025 GMT
Subject: CN=e3b2aee74ca597de12316d70da4ae71e3687a483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:85:b4:96:a1:bf:e1:e2:cf:18:aa:f6:37:
7d:65:7b:cf:b4:e6:1d:16:48:f0:b3:8d:07:4e:d8:
a6:97:a0:b7:a6:8b:ef:a1:8f:5e:25:9d:23:01:2d:
fa:69:f5:49:d4:1e:ce:f5:a3:29:c7:5c:75:e2:bd:
35:30:33:0c:5c:8e:08:52:b0:36:17:47:eb:dc:71:
e4:0d:d0:dc:83:ef:ec:73:49:b2:e2:df:46:1e:3a:
33:37:d2:4a:53:8c:18:af:fd:de:df:d0:99:05:68:
5f:14:3c:e7:0a:b8:fa:c2:3e:81:44:79:53:52:19:
3d:7b:27:67:dd:44:74:21:a1:83:16:87:ec:8b:80:
0e:a6:2b:86:8c:35:1c:df:71:92:e0:99:cc:79:99:
33:da:78:cb:5d:86:a5:d3:70:85:4a:67:b3:d6:9b:
fa:4d:ed:e3:69:ea:02:4a:c3:c5:b4:bd:9f:44:25:
78:22:92:a4:28:b6:90:2b:91:43:df:fe:3d:52:98:
0b:05:e5:a9:b8:6f:1f:99:33:87:f1:17:08:e4:d1:
ed:1c:8c:6d:5a:67:5d:7e:cd:b1:36:d1:fa:a0:ef:
b4:61:66:4c:63:5c:11:0d:e5:ff:ac:2a:54:17:13:
24:e5:dc:dd:d1:53:0c:c8:28:16:c3:3c:bf:40:06:
56:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B2:AE:E7:4C:A5:97:DE:12:31:6D:70:DA:4A:E7:1E:36:87:A4:83
X509v3 Authority Key Identifier:
keyid:B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b8:7a:41:71:50:67:aa:86:60:7a:8b:f9:5c:11:90:08:c1:
82:9c:c2:d8:a2:b3:d1:ef:04:4e:9c:01:22:5c:6d:a9:ea:99:
9f:74:c5:02:b7:ba:13:a2:2a:8a:79:39:52:bd:79:4f:80:a6:
de:cf:cb:31:be:48:e2:95:09:89:78:13:cd:18:fe:a1:4d:9f:
40:47:c1:b7:e5:4a:09:3c:b3:32:95:d0:64:4c:7b:d7:38:c4:
80:04:5d:7e:6d:eb:0c:6f:df:74:43:d3:47:9a:aa:25:df:8b:
60:ce:f2:48:e7:0e:fc:91:dd:48:c3:6d:e9:a7:68:f1:0a:4c:
ea:c9:b2:44:60:2a:48:c0:b5:6f:07:a9:77:97:bb:bd:d5:f8:
66:c9:eb:cb:54:93:66:6c:8d:bd:4c:ea:60:e3:3b:13:6a:ba:
2b:51:be:b7:cf:02:98:ad:f0:cc:a6:11:88:55:1b:c9:1b:d4:
65:bc:01:f4:cb:6f:d7:9a:6d:ca:c7:c2:fc:21:31:7d:6c:90:
df:ad:44:93:45:3b:77:1f:e1:cd:96:7e:4b:3f:58:84:21:53:
b7:95:91:40:df:89:1c:a7:a1:63:b9:21:16:4b:ba:38:53:2f:
af:02:89:2b:cf:33:2c:bc:da:81:be:9b:ac:91:77:b0:09:77:
8e:62:7a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:39:05 2025 by rpki-client