Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
File: uOssmbjKaFoqU4WIFB2xxLZB03Y.mft (raw, json)
Hash identifier: fVDbqxaVhsh+aRHgHtoHl626U8nvLcVmz/BACORmQFA=
Subject key identifier: FE:1D:F8:72:7C:5F:10:8C:38:EC:70:30:94:11:CE:19:0B:63:3A:3C
Authority key identifier: B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
Certificate issuer: /CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Certificate serial: 0196DE556C704619DDF3151B6A31A59DFA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
Manifest number: 1542
Signing time: Sat 17 May 2025 13:01:02 +0000
Manifest this update: Sat 17 May 2025 13:01:02 +0000
Manifest next update: Sun 18 May 2025 13:01:02 +0000
Files and hashes: 1: uOssmbjKaFoqU4WIFB2xxLZB03Y.crl (hash: m7S0NRdFlrbQr/gcad0A8cwgnYdPLiAoJLvXgxuIA20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:55:6c:70:46:19:dd:f3:15:1b:6a:31:a5:9d:fa:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8eb2c99b8ca685a2a538588141db1c4b641d376
Validity
Not Before: May 17 13:01:02 2025 GMT
Not After : May 18 13:01:02 2025 GMT
Subject: CN=fe1df8727c5f108c38ec70309411ce190b633a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:10:68:2b:aa:a5:d8:0a:98:cb:dd:f3:35:
2d:42:6a:89:c1:0a:f7:b0:05:36:09:a7:e3:40:b5:
9d:4d:70:4a:ce:fc:8f:12:02:3e:5f:6e:2b:70:1d:
82:ec:d2:47:17:a9:0b:69:40:9b:30:ea:45:23:4d:
18:50:0b:62:0b:67:a8:d3:d3:4d:9c:1a:65:1a:ff:
fd:f0:d7:24:aa:1f:d4:0b:c4:0e:40:2f:64:5c:43:
2e:53:f1:43:08:46:5d:48:93:3a:d6:1d:16:d5:6d:
61:bf:6e:28:c8:c0:4f:bd:ca:b8:2a:f5:0d:45:ff:
77:e9:25:f2:74:2e:75:66:64:46:f8:78:82:46:9c:
fe:30:b8:06:de:02:ed:c5:d4:79:14:3b:d7:1e:a3:
3c:04:ff:7b:27:13:f0:3d:d0:97:88:d2:cc:58:af:
46:05:12:28:b4:da:ae:87:f7:bf:ff:33:84:5f:06:
e2:db:26:18:e4:fd:44:f3:7e:9f:85:65:a4:90:bc:
90:a5:23:31:cb:b7:46:8b:df:67:e4:78:f2:00:ad:
b2:58:0e:9b:50:d8:38:fc:1d:26:78:0a:9c:47:8a:
e5:b0:21:90:39:61:0a:21:62:7a:6f:b2:de:ed:a3:
15:ba:b4:72:64:35:c6:04:a2:61:fd:cd:ec:b0:7c:
dc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1D:F8:72:7C:5F:10:8C:38:EC:70:30:94:11:CE:19:0B:63:3A:3C
X509v3 Authority Key Identifier:
keyid:B8:EB:2C:99:B8:CA:68:5A:2A:53:85:88:14:1D:B1:C4:B6:41:D3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOssmbjKaFoqU4WIFB2xxLZB03Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/457533-6905-4840-883c-ab6d0c213fdc/1/uOssmbjKaFoqU4WIFB2xxLZB03Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:28:ed:63:5e:26:ce:68:5a:05:e5:9e:5c:bc:6f:99:48:0c:
0e:bc:19:75:06:bb:25:ec:34:8e:fc:6f:6d:23:91:f3:09:9a:
76:98:e1:e9:7d:27:60:2e:9a:09:9f:3d:53:13:26:1e:95:62:
3c:11:f7:15:ac:53:42:02:e0:49:14:e8:17:84:41:ed:01:a1:
2c:8b:cd:0d:5b:5c:23:1c:97:74:ed:e9:60:16:98:13:cb:f0:
8a:17:20:5c:83:36:94:d9:3e:ba:21:0c:4f:73:41:ef:c8:11:
10:77:9b:88:73:e2:89:38:b0:0f:2b:47:fe:38:8a:15:41:dd:
ee:12:5b:83:a1:ec:d6:88:cb:e7:6e:3a:ef:da:6f:59:ae:be:
86:8b:72:56:d3:8a:95:bf:e5:64:1d:92:cb:e1:03:fd:ea:1c:
50:10:2d:9a:0c:a9:0d:a5:77:3a:1f:1c:2e:f8:9b:a5:b7:10:
3a:53:ad:08:5f:ed:77:dd:79:ea:26:7d:1c:a7:2c:d1:53:22:
b6:14:8f:ec:a5:b0:52:9e:90:4a:b5:02:cd:98:a7:b6:da:11:
15:03:b7:74:cc:76:cb:2f:6b:7d:8a:33:87:ab:3e:49:c2:e7:
ef:d5:4e:13:65:4c:84:b6:87:7f:48:65:a5:45:e9:d4:1e:5f:
17:01:6f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:44:12 2025 by rpki-client