Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
File: uOssmbjKaFoqU4WIFB2xxLZB03Y.mft (raw, json)
Hash identifier: xjTgFYBIjykXhOt3du6c6O22dr64HfNCx2/wp89VFLA=
Subject key identifier: E9:BE:5C:58:17:C2:81:5E:C4:22:DD:6B:E3:33:E4:07:8B:42:6C:8D
Authority key identifier: B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
Certificate issuer: /CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Certificate serial: 019921B1392295F1047E70991407905A0797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 01:01:26 +0000
Manifest this update: Sun 07 Sep 2025 01:01:26 +0000
Manifest next update: Mon 08 Sep 2025 01:01:26 +0000
Files and hashes: 1: uOssmbjKaFoqU4WIFB2xxLZB03Y.crl (hash: evrJw/ulWplE5KSFkNWv4jofYo62Jx9WmCMwCBI/E28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:39:22:95:f1:04:7e:70:99:14:07:90:5a:07:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Validity
Not Before: Sep 7 01:01:26 2025 GMT
Not After : Sep 8 01:01:26 2025 GMT
Subject: CN=e9be5c5817c2815ec422dd6be333e4078b426c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:8b:0a:36:a5:b7:1f:fc:5d:55:97:22:1e:
cd:a4:f9:de:2a:39:17:39:03:bb:30:68:5d:15:4c:
27:96:c4:1b:44:12:9b:e0:a9:36:1f:9d:25:dd:3c:
7d:16:55:9d:44:43:f4:f6:39:ac:a7:b3:c1:b6:38:
8a:62:4f:dd:75:91:c8:28:33:1c:62:de:3b:1b:ff:
9c:c8:3f:3b:c0:97:e1:b9:ed:c2:b8:89:f3:a7:72:
7a:7f:c8:00:39:d5:1b:f8:e5:cc:07:ce:fd:ce:2f:
a1:0c:ad:03:59:b4:4c:a6:59:66:fc:de:25:b7:78:
c8:18:1f:12:44:90:c1:bd:07:07:e8:61:56:25:11:
0d:0a:ae:c9:5b:9a:b9:bd:ca:40:24:78:cd:12:88:
5d:df:4e:1d:94:74:d9:8b:7e:e3:1e:cf:68:07:76:
e0:81:08:9d:cc:6b:f0:15:34:71:28:b5:e8:67:36:
33:11:67:56:7f:88:f3:1a:a7:53:e0:6e:93:d9:ca:
3a:b6:66:43:bb:eb:43:3c:e6:11:7a:79:04:c8:d8:
06:d3:f1:24:b3:f3:0e:e3:dd:fa:0b:3c:ed:88:fd:
d3:bc:44:b7:59:63:48:a8:d0:9d:f5:cb:a3:0f:1f:
1a:2c:51:7d:ed:48:e5:19:a8:09:b4:8b:0f:d9:3c:
9c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BE:5C:58:17:C2:81:5E:C4:22:DD:6B:E3:33:E4:07:8B:42:6C:8D
X509v3 Authority Key Identifier:
keyid:B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:18:06:43:a0:41:1c:d9:c5:81:d2:b5:24:a1:b3:4c:b3:35:
2a:09:5d:2c:3a:af:b2:8b:25:70:06:3a:0b:df:a2:0e:46:bd:
85:5f:4b:0c:17:b8:a7:33:1c:bb:2d:75:2e:d9:f1:ff:be:19:
f4:5d:6e:f9:fd:3f:b1:f3:eb:6d:85:ef:b2:04:42:f7:ab:ae:
91:79:bb:62:49:b7:0c:c4:e2:2e:91:2b:fd:47:93:12:f1:ed:
cd:91:85:b4:fa:ac:21:d8:72:e6:29:00:04:8c:78:62:a2:66:
a9:dc:f3:d9:19:1c:b7:7f:22:48:9c:c2:37:d3:80:aa:89:ec:
02:f2:79:45:6a:88:40:28:1c:d4:e0:5d:1e:18:8c:be:e7:38:
52:44:28:1c:a4:07:7a:6b:c0:06:eb:26:e2:65:bc:dd:32:9a:
08:c7:83:18:df:8a:94:66:dc:a2:00:5e:0e:81:fa:a5:0c:d6:
f2:33:24:c7:07:fd:78:0c:8f:bf:10:c9:80:04:71:70:03:b9:
d1:6f:28:ec:d4:ae:d7:52:7d:ac:d2:59:5c:97:d7:f0:83:95:
55:ff:05:f4:6f:c0:7d:75:ed:4f:bb:bc:88:81:a2:62:b8:4d:
65:ab:dd:38:be:36:24:af:34:5f:26:cc:80:f5:66:02:d1:67:
13:09:34:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:46 2025 by rpki-client