
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File: 0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier: NkBti0dKgT2+ybc+exFp3Ihds27enULWQwAgckZQueI=
Subject key identifier: BE:63:DE:10:BF:05:D6:CD:7D:41:B2:57:D8:99:23:F8:32:97:30:95
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer: /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial: 0197B8907217FAC735C7AE29152F3AD744E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:02:43 +0000
Manifest this update: Sat 28 Jun 2025 22:02:43 +0000
Manifest next update: Sun 29 Jun 2025 22:02:43 +0000
Files and hashes: 1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: U9/ps6hCW6dUoYwepUSVSTH052BcGrO5yXuqHC8c0Io=)
2: J8ZSaP5X7b8oUB1RfXySs77eTwE.roa (hash: O5hpA9e+z6B0C4p8y7a0RLXHzllt/qs6YXqVQLo/Jo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:72:17:fa:c7:35:c7:ae:29:15:2f:3a:d7:44:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
Validity
Not Before: Jun 28 22:02:43 2025 GMT
Not After : Jun 29 22:02:43 2025 GMT
Subject: CN=be63de10bf05d6cd7d41b257d89923f832973095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:3c:bf:40:0c:27:d1:bf:cf:3f:5c:d0:34:
7a:7c:69:82:29:f5:e8:f3:49:4c:79:12:40:4a:7d:
ed:17:a4:ea:49:eb:63:57:15:57:f7:7d:e8:46:a0:
c1:40:28:90:eb:44:b0:6f:1b:22:c0:43:3b:c0:ee:
26:fd:f3:eb:35:33:23:e1:92:85:4c:0c:b8:a3:52:
ef:c1:e6:1b:38:de:ef:7f:45:a9:7c:bb:22:42:0c:
22:e8:16:9f:9b:3e:a2:4b:d0:d2:e2:55:e3:8c:c5:
a1:09:ca:0e:c1:41:1c:c1:b5:9a:cb:51:43:05:37:
a9:53:34:a9:6b:75:ff:92:27:35:fd:2d:32:fc:9f:
85:5e:16:9c:f4:03:86:7e:e1:57:b1:0c:ee:a8:00:
2b:f7:27:92:0f:21:44:aa:78:90:13:b2:ec:7f:0a:
75:9d:d4:4d:98:87:8e:d4:39:e1:7d:67:9b:33:fa:
9c:15:77:e6:1e:f8:d6:42:39:ef:65:e4:04:0c:17:
e2:fb:5d:d7:a7:f3:b4:fa:90:c0:21:8b:81:14:13:
b0:95:de:1b:33:0a:02:a3:ce:d3:ee:c1:fd:cf:71:
54:24:98:fc:f5:d0:6d:63:a4:c9:a1:22:bc:cb:75:
98:24:7f:c3:22:3f:c7:7b:7a:d4:20:c7:35:f2:e9:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:63:DE:10:BF:05:D6:CD:7D:41:B2:57:D8:99:23:F8:32:97:30:95
X509v3 Authority Key Identifier:
keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:13:ad:28:b6:22:d4:45:05:df:69:06:b9:72:c0:6b:18:59:
7f:32:c0:92:88:9a:34:c0:d8:2d:aa:76:3a:67:0f:4f:ac:8f:
a0:36:05:2c:7e:ab:66:00:f8:f3:73:9d:d7:18:b3:bd:49:c8:
22:c2:68:99:32:ad:19:4a:5c:40:c8:5b:1f:e5:6e:25:78:5e:
55:20:74:43:7f:7c:23:81:03:bf:b7:19:23:a8:ba:ff:0c:e0:
2a:bf:92:ec:4b:60:f5:43:8a:6c:b0:53:04:a4:12:c5:a2:48:
0b:ac:fd:44:42:ed:92:19:ac:4e:c7:d3:24:52:fe:54:32:5f:
6d:9c:92:01:e7:49:08:92:0f:94:31:72:6a:c4:33:99:1a:a1:
fd:e4:2f:6a:f5:d5:fa:f0:26:55:c7:8d:5e:7d:11:5b:73:45:
0e:16:4e:64:3c:02:50:43:63:5c:3d:d9:86:2b:10:1f:6c:68:
7e:c5:b5:0f:9a:d0:f5:f7:80:94:51:d0:a0:38:92:d4:6c:42:
70:b6:a6:bd:18:26:b5:6b:01:c1:c3:93:4a:4d:3b:30:89:97:
f1:21:cc:3e:33:03:e2:0b:e4:88:83:aa:fe:e5:5d:a7:9e:0b:
68:18:45:41:ec:ff:06:46:34:1c:d2:f4:26:14:d4:6b:6d:75:
b2:7b:6f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:36 2025 by rpki-client