Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File: 0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier: MRwnBMy3SjaGLIHgjzaTQP7JmF6/p6VgTE81y6c4qTo=
Subject key identifier: FA:6D:3F:6A:6D:D3:33:00:DE:94:E3:56:78:CF:77:77:2B:73:A1:C5
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer: /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial: 0198D4736193927A6BEF8836972D4E50B491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 01:03:07 +0000
Manifest this update: Sat 23 Aug 2025 01:03:07 +0000
Manifest next update: Sun 24 Aug 2025 01:03:07 +0000
Files and hashes: 1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: ODREd3WyEU3irgPGQ08cLsudEOba/Kb5A1LKEkwPSvY=)
2: J8ZSaP5X7b8oUB1RfXySs77eTwE.roa (hash: O5hpA9e+z6B0C4p8y7a0RLXHzllt/qs6YXqVQLo/Jo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:61:93:92:7a:6b:ef:88:36:97:2d:4e:50:b4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
Validity
Not Before: Aug 23 01:03:07 2025 GMT
Not After : Aug 24 01:03:07 2025 GMT
Subject: CN=fa6d3f6a6dd33300de94e35678cf77772b73a1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:1d:37:18:d4:52:93:7e:04:9b:b2:b3:8f:
77:f8:8d:9f:72:45:de:56:d4:dc:c2:9d:52:73:17:
15:d6:28:83:fe:cf:aa:3e:03:00:01:d7:e2:d3:2e:
d2:99:e4:2c:0c:6f:d4:2c:99:1e:25:3d:80:88:3c:
ca:db:b9:dd:19:6e:f2:24:a6:ab:94:b7:2a:6b:9a:
e1:33:1a:b4:4d:aa:08:bf:e1:fc:2d:95:0e:e7:b7:
b4:94:ac:27:a6:94:f5:ae:4a:25:f1:e0:b2:fd:d7:
79:4d:ed:73:84:06:ab:f7:30:f8:db:05:8a:7c:a9:
1c:c5:4a:95:bd:3b:07:13:f7:20:fa:e6:f8:8f:44:
21:da:03:1d:47:11:5a:03:a5:e8:3c:57:c9:eb:fa:
07:4f:d6:7e:3f:16:86:45:25:6d:a1:03:af:21:e2:
d8:db:41:ac:a2:ab:0a:45:dd:62:3e:4e:88:c1:1e:
60:7f:2d:52:59:98:1b:ae:52:e1:64:12:35:15:1e:
06:33:9c:f2:fa:24:2f:43:03:6f:a3:c7:4b:a4:4c:
87:67:b0:cf:35:f0:ea:32:93:b3:19:96:a9:66:d8:
e3:34:1b:2f:51:c3:a8:fa:c8:35:da:39:10:e1:4b:
e5:44:16:55:3a:54:fb:9c:81:c6:5a:b1:8b:da:ed:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6D:3F:6A:6D:D3:33:00:DE:94:E3:56:78:CF:77:77:2B:73:A1:C5
X509v3 Authority Key Identifier:
keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:75:f8:b1:a3:87:a9:72:77:e4:c9:ef:03:87:7a:fd:d8:2b:
9b:6a:18:7f:ae:a3:9c:30:3a:f7:2e:0e:c6:2c:65:3d:25:13:
81:1c:e9:ac:05:b8:3b:3f:89:ee:f7:29:e4:35:21:03:2d:8c:
8b:06:6a:2b:c6:60:11:ee:4c:f8:4c:51:a5:12:0d:49:93:bb:
d1:74:03:0e:98:10:3c:b4:86:53:c3:c3:47:69:63:91:db:c8:
e0:2a:72:17:17:8a:2c:1c:56:2e:af:8b:7a:c4:ec:92:51:1a:
14:63:35:c8:c1:d9:8a:c7:fc:90:79:6e:95:ca:c4:e4:36:0a:
1e:13:10:82:e6:33:51:9d:fc:bc:05:0f:f5:a1:98:cf:98:b7:
11:52:e7:32:0f:fc:d8:55:c5:3d:3a:32:6c:e4:49:79:e3:9b:
6b:c0:d3:84:6f:67:44:7d:f0:c9:ea:38:24:c2:73:1d:14:22:
03:9c:0e:25:2d:94:75:71:1f:e7:32:5c:d5:fa:ec:b6:46:20:
8b:41:cf:3f:07:be:95:9f:c3:a2:d3:4e:11:43:cc:11:59:cb:
54:5f:0c:c8:38:62:a8:d7:c5:14:e3:29:cf:fe:0e:04:0c:c4:
9f:8f:06:d4:dc:4c:e5:ac:63:81:0f:4c:a6:92:dc:6f:35:d6:
05:b4:af:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:36 2025 by rpki-client