Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File: 0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier: +Sbc+LSY3gm6dDBc0n0q2k7iYQgQipRNuWV7CgMJoTY=
Subject key identifier: CD:F6:D1:3A:36:EC:1F:36:09:92:87:8C:06:40:2F:C8:29:D3:BF:D0
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer: /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial: 0199FBEBB07B08FBEA11687D72589A60FA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 10:02:31 +0000
Manifest this update: Sun 19 Oct 2025 10:02:31 +0000
Manifest next update: Mon 20 Oct 2025 10:02:31 +0000
Files and hashes: 1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: 7RUZh64CsPy5E911y1ZP6FaOlX4GJ1rwpSchNsdm5pQ=)
2: J8ZSaP5X7b8oUB1RfXySs77eTwE.roa (hash: O5hpA9e+z6B0C4p8y7a0RLXHzllt/qs6YXqVQLo/Jo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b0:7b:08:fb:ea:11:68:7d:72:58:9a:60:fa:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
Validity
Not Before: Oct 19 10:02:31 2025 GMT
Not After : Oct 20 10:02:31 2025 GMT
Subject: CN=cdf6d13a36ec1f360992878c06402fc829d3bfd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:9a:10:ff:e1:38:3d:00:79:3d:75:33:a5:
e4:d6:8f:f4:37:c3:2f:19:69:ec:99:da:37:55:78:
7f:e3:fa:32:ea:c8:d8:80:09:d6:b5:6d:be:fd:20:
45:ac:6f:cf:14:0c:f8:62:c2:cb:06:23:30:1d:59:
9e:d5:e0:49:c5:20:c1:2a:98:be:48:2c:04:8d:5d:
f5:c8:a9:7a:d1:a2:c4:a9:6f:cd:1b:0d:a9:a5:57:
8d:fb:a6:56:a4:41:29:d3:52:ae:8f:1e:50:ab:30:
be:47:3d:75:50:02:85:4d:32:69:d9:a0:1d:f4:a1:
02:7d:18:c6:fe:8f:88:c4:58:dc:b5:d1:bf:6f:a1:
70:09:60:91:5f:f9:03:9e:bf:7b:79:23:ca:c2:e2:
48:08:82:18:86:9d:24:10:d9:dc:fd:8f:39:6c:6b:
b8:c8:6b:fd:e8:1c:cd:15:a3:0e:2a:9c:5b:83:90:
0d:6a:72:62:58:45:82:aa:ce:04:d4:56:50:a1:21:
0b:ce:92:92:60:ae:57:67:a0:30:d0:db:82:e8:b4:
68:ba:74:44:d4:fa:0b:38:65:49:0e:15:91:c1:f9:
27:6e:54:ff:fc:bb:a2:a0:17:82:d9:b7:dd:21:95:
9a:1c:12:14:e0:ad:7c:6d:6e:50:79:96:9c:13:d5:
4c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F6:D1:3A:36:EC:1F:36:09:92:87:8C:06:40:2F:C8:29:D3:BF:D0
X509v3 Authority Key Identifier:
keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:00:69:ef:d0:d0:27:d4:89:02:79:70:95:e4:f8:72:45:4c:
02:9a:1b:c0:aa:1b:77:8a:db:5f:d8:cb:a2:e7:4c:8f:ba:03:
e2:74:ad:46:69:ae:63:be:65:79:25:96:3e:34:1e:26:64:bf:
47:5a:b3:db:74:20:b3:ae:d4:b1:f6:86:80:5b:7c:59:1d:2e:
d2:49:3a:06:ee:a0:85:4b:55:a2:77:15:1f:05:ae:24:3e:19:
0c:13:21:15:5b:b8:a7:7c:4f:57:7c:2e:c4:d6:33:26:a8:da:
72:49:d1:c1:67:f9:06:6a:15:20:6e:39:73:7d:9c:d6:fa:b2:
9d:18:de:9b:a4:a1:f6:98:47:cd:04:49:c1:3c:2b:10:0f:ae:
4f:f4:85:d2:66:ab:b6:83:29:11:c6:ec:eb:b0:6d:b4:5c:c2:
14:19:3d:18:ab:8c:49:51:c5:da:57:c5:bd:58:f2:07:f7:f5:
b7:6b:f7:92:54:54:f5:be:b4:ba:bf:db:a0:00:66:78:86:d9:
dd:5f:b9:f4:61:05:48:0c:5a:5f:af:c4:9b:bd:98:e5:cb:f6:
66:7c:29:81:e2:8a:c3:27:01:89:a6:0a:af:1b:ec:3f:d3:aa:
2f:bf:85:64:4a:a2:fa:9d:e7:67:37:40:dc:9a:c8:ff:2b:99:
72:7d:10:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:22 2025 by rpki-client