Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File: 0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier: pn5EOYUOxnVtWMZJITUX4w2spht2/RnqHHhIp1fDnIA=
Subject key identifier: 60:51:83:61:3B:1D:23:6E:41:F2:9E:3D:F9:4A:13:17:70:40:6A:E4
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer: /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial: 0196BD80C289DED255CE878B9F8F57FAB7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number: 1536
Signing time: Sun 11 May 2025 04:00:54 +0000
Manifest this update: Sun 11 May 2025 04:00:54 +0000
Manifest next update: Mon 12 May 2025 04:00:54 +0000
Files and hashes: 1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: 8UhiqlJEipnvnKIjwreql/Db04P8DX+9N3yEzpv1xBQ=)
2: J8ZSaP5X7b8oUB1RfXySs77eTwE.roa (hash: O5hpA9e+z6B0C4p8y7a0RLXHzllt/qs6YXqVQLo/Jo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:c2:89:de:d2:55:ce:87:8b:9f:8f:57:fa:b7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
Validity
Not Before: May 11 04:00:54 2025 GMT
Not After : May 12 04:00:54 2025 GMT
Subject: CN=605183613b1d236e41f29e3df94a131770406ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:88:f8:47:9a:47:a4:5c:79:b1:85:bc:e0:
0b:72:89:a2:5d:98:12:7b:9d:62:62:f2:00:84:16:
fe:30:5e:b1:37:57:7c:84:74:1d:07:fc:49:ae:c0:
81:a9:81:a5:18:e5:60:69:35:dc:66:83:35:91:af:
7f:15:29:cc:27:70:cf:9b:0a:78:90:a3:44:2a:ee:
92:19:3e:b0:55:e6:b1:1d:f3:3a:10:11:53:e3:fd:
ba:44:26:fb:5d:5a:69:e6:c9:48:e4:19:62:6f:b9:
4f:23:83:95:75:4a:28:7a:25:68:d3:9f:bf:bb:64:
ab:ae:2b:ef:fd:06:b0:4a:ac:e5:6d:74:36:e5:5e:
37:70:3d:05:a4:bc:e7:d1:8e:3a:5e:19:5e:9d:0c:
54:4f:51:e4:66:c6:8a:71:fd:73:ba:63:e8:28:85:
7c:e2:cc:1b:c3:9f:a3:b1:81:dd:6f:aa:a7:35:ed:
e5:08:77:84:1a:4e:81:2c:9e:05:fb:6f:50:36:f4:
5b:fc:8d:b2:a9:36:48:09:af:4b:93:7e:ad:49:a6:
82:b1:1e:ab:b0:ae:1e:e9:5b:73:7d:fe:f1:9e:d5:
27:b6:5d:44:29:93:b7:69:3d:70:48:9d:58:f2:d1:
37:05:14:62:e0:c3:0c:5d:91:a8:ae:d5:0b:a6:e5:
69:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:51:83:61:3B:1D:23:6E:41:F2:9E:3D:F9:4A:13:17:70:40:6A:E4
X509v3 Authority Key Identifier:
keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:db:68:2f:39:4b:24:ea:e0:5c:b8:4d:d2:e7:a8:7e:89:b5:
69:30:94:1e:be:19:79:62:84:03:e0:70:62:88:e1:d3:05:1b:
17:3f:60:83:59:ce:8b:99:6a:35:0f:73:79:f0:8e:25:39:8a:
3b:d7:c5:7c:a7:7e:38:9e:b9:09:40:64:9b:45:69:f2:b4:0e:
cb:c9:e9:39:2e:32:2c:ab:8f:96:7d:49:10:3f:1e:5d:19:61:
d1:d3:df:01:34:f4:94:17:e3:10:4e:a7:c4:b9:83:3a:eb:36:
de:37:58:38:db:2d:85:f5:3f:87:11:31:c7:ee:db:52:de:86:
a2:1b:d4:81:93:e0:2b:fe:94:b7:e1:c5:3a:41:55:b1:fe:1d:
2b:a0:c8:ca:0a:1c:35:8c:ea:99:d9:34:7d:f4:f4:b7:f7:b7:
1b:68:5e:05:c9:51:49:12:ee:a5:32:ef:ec:b6:eb:7a:fd:93:
75:c7:55:13:3b:0a:39:0e:c5:9b:14:22:20:dc:ea:c6:89:79:
b4:fe:01:f3:00:8c:e0:e8:7c:2f:fc:2c:ba:02:25:cb:b3:8b:
d4:04:04:6f:8c:1e:72:66:4f:e2:43:01:64:10:7a:74:5a:fe:
d1:3d:c5:b0:29:0c:6b:27:d6:e4:64:8e:bb:56:90:2d:e5:e2:
e9:2c:a9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:19:20 2025 by rpki-client