Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
File: uOssmbjKaFoqU4WIFB2xxLZB03Y.mft (raw, json)
Hash identifier: dQbwxXJQnN+XAlIWzI56TfNY38iLUX+qmTD9nUe+6hc=
Subject key identifier: 0E:BC:89:3F:DA:A6:46:F5:78:AE:01:F5:89:53:C9:D6:A4:C2:B0:9F
Authority key identifier: B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
Certificate issuer: /CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Certificate serial: 0198D850045C1EAC2FCDCE8187F5C073020A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 19:02:59 +0000
Manifest this update: Sat 23 Aug 2025 19:02:59 +0000
Manifest next update: Sun 24 Aug 2025 19:02:59 +0000
Files and hashes: 1: uOssmbjKaFoqU4WIFB2xxLZB03Y.crl (hash: refMOhaEI3OCwxBPzQGgxnhtVMuqo9RPVwCEsLrpv38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:04:5c:1e:ac:2f:cd:ce:81:87:f5:c0:73:02:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Validity
Not Before: Aug 23 19:02:59 2025 GMT
Not After : Aug 24 19:02:59 2025 GMT
Subject: CN=0ebc893fdaa646f578ae01f58953c9d6a4c2b09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:07:ad:85:6a:93:4b:16:64:1d:f6:ae:c4:
69:14:5f:61:a6:2f:df:5b:f8:03:91:20:99:b0:3d:
04:94:40:1f:78:38:48:76:15:ba:a8:70:01:f7:67:
06:c9:b5:b9:07:82:5f:b3:42:ce:82:54:f8:4e:9b:
13:cb:70:00:93:57:c3:40:b0:74:fa:78:b9:eb:19:
fb:2c:b0:e0:37:3d:a8:0e:5d:d7:eb:fd:c6:5c:b4:
9b:f4:79:44:60:33:d9:fa:6d:fb:e3:b8:e9:48:30:
18:6f:c7:aa:ed:d1:ab:0f:61:ae:a6:ff:90:5f:87:
30:4e:5c:f8:79:8e:02:cb:ca:11:39:94:c3:4e:c7:
1d:9d:15:62:ed:40:23:2d:46:70:0e:85:9f:16:9e:
af:2d:19:ca:19:f6:3d:15:97:1c:2b:46:bb:45:d7:
15:e4:69:55:4b:c8:d2:0c:ca:82:ab:2f:85:ce:76:
4d:19:39:e1:a5:11:b4:0e:1c:9f:58:bc:5c:34:7d:
96:ac:f1:9b:0e:3d:86:7c:ad:e4:02:92:3d:3e:2d:
4f:cc:cc:0d:95:cd:51:4e:dc:25:82:62:40:1b:f2:
3e:52:e9:c5:df:3c:83:6c:35:19:db:c2:ed:e0:5c:
4a:1d:08:5d:7b:71:c7:e0:4e:26:7c:15:a5:18:93:
c5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BC:89:3F:DA:A6:46:F5:78:AE:01:F5:89:53:C9:D6:A4:C2:B0:9F
X509v3 Authority Key Identifier:
keyid:B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ce:80:66:bc:58:f2:e6:79:01:d6:b1:f8:be:18:7e:a8:54:
27:fd:94:14:d9:ab:e7:d5:e7:8e:b8:ea:9c:62:c1:fd:3b:cc:
47:63:6b:aa:05:02:5d:e5:ba:8e:60:be:7d:a7:9e:f7:5b:df:
7b:ef:28:85:2b:09:a6:9e:6f:14:68:a5:67:1f:80:d3:cf:13:
aa:5b:4e:b1:99:59:c8:26:19:38:de:23:07:99:ae:6e:a9:c6:
a5:36:ca:bd:37:46:37:38:96:44:f0:df:18:37:3a:fd:46:49:
91:54:d1:e0:68:c8:9e:8e:71:89:4b:93:14:53:76:e5:7d:82:
50:78:b7:e2:ab:25:de:20:0a:8e:89:b8:45:9d:32:ec:28:80:
07:eb:07:ff:92:a9:ae:37:0a:bc:6a:84:43:64:02:73:bc:6d:
ca:3a:80:d3:68:22:9f:1d:bd:e9:7d:a2:d9:af:b0:01:a5:ba:
62:8a:f3:a6:1b:1f:ed:d9:26:b8:50:49:56:29:da:24:c6:52:
51:86:8f:3d:9d:10:c0:e8:c1:d6:0f:67:58:a9:6c:cd:23:3e:
99:ab:55:a5:f1:56:f9:06:11:41:d3:da:2e:33:6d:79:d3:e3:
2c:6a:0b:94:5a:25:d2:b3:74:7f:60:cb:09:be:55:a4:1b:83:
07:61:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:03:39 2025 by rpki-client