Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
File: uOssmbjKaFoqU4WIFB2xxLZB03Y.mft (raw, json)
Hash identifier: +q61j/tzkWHEx4BiGEVTcsWJ8LQGaOgJkdVTjXpttJI=
Subject key identifier: B6:98:E4:46:2C:38:D6:0E:79:64:40:DE:81:B0:9C:15:18:3F:43:30
Authority key identifier: B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
Certificate issuer: /CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Certificate serial: 019643D6893D87BE4170ACB256B174D1CA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
Manifest number: 14F2
Signing time: Thu 17 Apr 2025 13:00:55 +0000
Manifest this update: Thu 17 Apr 2025 13:00:55 +0000
Manifest next update: Fri 18 Apr 2025 13:00:55 +0000
Files and hashes: 1: uOssmbjKaFoqU4WIFB2xxLZB03Y.crl (hash: 5V6AUS1MdiCX1lp5BdWCFRoygWGA12N3Sl+OchQOgak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:89:3d:87:be:41:70:ac:b2:56:b1:74:d1:ca:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Validity
Not Before: Apr 17 13:00:55 2025 GMT
Not After : Apr 18 13:00:55 2025 GMT
Subject: CN=b698e4462c38d60e796440de81b09c15183f4330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:80:17:2b:6c:ec:01:72:80:6f:7d:6e:29:0a:
57:08:bd:e1:b2:f3:5a:39:14:61:6a:ea:b1:93:40:
c5:62:66:ae:11:45:75:f0:5d:bf:77:98:02:dd:b0:
92:e6:8c:ca:f6:cc:cb:0b:f5:52:eb:f4:98:62:9f:
ac:c9:e2:dd:28:76:8a:e0:97:2c:ce:9a:0b:81:c6:
38:65:b9:d4:98:c7:3b:42:1c:f2:ea:2c:d7:0e:d8:
03:21:53:7d:a8:be:4e:86:0c:3e:b5:4e:48:e0:84:
fe:ca:a8:2a:06:e0:e6:85:a9:b7:30:50:f6:5e:99:
5c:17:1f:3b:ef:68:8d:38:35:44:2d:b6:ba:80:21:
e7:71:dc:c9:2a:b5:62:04:77:54:5e:53:4e:63:af:
66:c7:0b:58:38:34:67:cd:1b:84:ad:c2:66:6b:8a:
c3:99:68:d5:ec:76:b6:74:37:9d:78:79:1d:d6:e5:
05:f5:cc:00:09:e5:1f:4a:34:7d:e6:54:c9:48:d5:
4b:d9:33:c4:c0:e9:2f:97:8a:03:41:cb:21:82:74:
13:ad:83:77:f0:9b:e9:dd:a4:96:96:75:03:1a:89:
4d:d2:11:ae:38:6f:f0:be:44:01:8e:87:54:87:9b:
26:08:a8:b5:d2:68:dd:80:86:7a:52:7a:d5:9d:b5:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:98:E4:46:2C:38:D6:0E:79:64:40:DE:81:B0:9C:15:18:3F:43:30
X509v3 Authority Key Identifier:
keyid:B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4c:99:84:f5:a9:a3:86:d3:6c:18:55:a0:72:a7:1e:cd:dc:
6d:d2:b6:75:77:f1:51:5b:fe:cd:89:60:43:89:4b:c8:0e:90:
35:12:82:60:fb:86:2e:9d:e3:fa:b9:55:bf:07:db:53:96:0b:
d6:50:c2:90:92:9b:1e:d3:6c:f1:52:6c:c8:45:89:81:01:d5:
bd:4a:9e:44:a0:75:8a:c0:b2:cd:2f:da:bc:64:63:25:cd:ac:
1f:7a:d3:a2:6b:16:7f:62:54:b0:69:0b:f2:23:39:28:f3:34:
85:98:f2:45:da:c3:3a:0a:54:5c:b5:3e:c6:ef:b4:46:9e:c6:
3c:df:b2:d8:7a:30:8f:74:11:6d:b0:cd:f9:d6:61:d9:8e:ad:
f3:79:ce:72:a3:29:d2:30:7a:03:f6:ee:2c:2b:a5:29:71:77:
0c:aa:22:58:63:fd:5f:5e:db:63:51:fc:e3:2b:e3:2a:16:16:
e8:3f:d6:bb:84:57:38:79:a3:c4:9c:ee:00:ad:3d:19:3a:33:
ac:68:a7:59:ab:0b:15:e7:f9:ef:82:82:e9:7c:91:7a:2f:0c:
0a:56:f3:c6:b0:a7:d5:96:b3:c8:5e:83:d9:d9:af:7f:32:bc:
2e:a7:fc:3c:34:1e:8e:a5:f9:ab:d3:2c:06:14:3d:68:81:38:
c4:dc:88:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:13:41 2025 by rpki-client