Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File: 0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier: 0RFxzcRtSosPKuCUNCZu4ECu9QS+3o13OQyaBstzFmc=
Subject key identifier: EC:13:6C:F6:DA:47:48:A3:93:70:84:DA:AC:BD:62:AA:E1:FB:21:B9
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer: /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial: 01965B038A2205A3B5FE9B92C824654291B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number: 1503
Signing time: Tue 22 Apr 2025 01:01:20 +0000
Manifest this update: Tue 22 Apr 2025 01:01:20 +0000
Manifest next update: Wed 23 Apr 2025 01:01:20 +0000
Files and hashes: 1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: 7n8BJ/vmIf1B9d0PMnI/+f1UtOlXXxNCS6qr6Y1Jmpg=)
2: J8ZSaP5X7b8oUB1RfXySs77eTwE.roa (hash: O5hpA9e+z6B0C4p8y7a0RLXHzllt/qs6YXqVQLo/Jo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:8a:22:05:a3:b5:fe:9b:92:c8:24:65:42:91:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
Validity
Not Before: Apr 22 01:01:20 2025 GMT
Not After : Apr 23 01:01:20 2025 GMT
Subject: CN=ec136cf6da4748a3937084daacbd62aae1fb21b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:60:73:3f:b5:ad:2d:14:35:6f:7b:62:76:
fc:88:b0:ea:fc:e0:c6:d2:af:19:80:35:e0:90:a3:
b1:62:38:58:bd:66:f9:19:4b:9b:c2:3b:46:47:0c:
fc:32:ee:be:c8:fd:4d:f2:6b:e9:4f:48:15:e7:8f:
b9:d2:a0:d9:8e:08:fe:a0:00:51:15:13:4b:42:28:
d2:37:54:d4:57:8c:1c:d8:12:32:1d:ae:d4:8c:63:
d8:89:47:ee:0c:8e:1b:a8:1e:4c:f4:f4:66:3b:5f:
ee:c2:9d:06:53:a2:17:ff:1b:94:fe:01:41:ef:a3:
bf:bf:be:de:7a:d9:b2:0b:67:98:c5:b0:38:ba:d3:
82:9e:71:09:76:e6:3e:c4:bb:33:4a:90:53:f6:35:
0d:7b:48:5b:a6:5d:2d:6e:0d:66:8c:cc:61:09:e7:
aa:43:92:08:ad:9f:36:d7:40:79:fb:b5:25:7e:12:
de:bb:c1:a9:ed:bc:87:d5:18:23:30:53:6c:36:5d:
c2:97:f3:ba:c4:c4:87:41:0a:93:04:1e:59:30:8f:
8c:7a:d9:2e:5e:39:ea:fb:05:ac:da:9d:53:c5:26:
4d:ac:17:a2:fa:1c:2a:7e:08:fa:8f:f9:76:cb:72:
77:bb:fc:19:49:40:96:6e:03:93:8e:37:32:df:32:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:13:6C:F6:DA:47:48:A3:93:70:84:DA:AC:BD:62:AA:E1:FB:21:B9
X509v3 Authority Key Identifier:
keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:23:25:9b:21:6a:47:10:b4:64:a7:b4:0e:7e:77:f2:34:76:
d3:d7:dc:20:66:b3:99:37:ce:f4:ec:a6:d3:1a:10:18:db:c7:
34:1b:ef:82:ee:cb:df:89:16:bb:34:61:55:d0:19:b9:41:a5:
72:79:fd:20:77:3e:fa:a0:a1:33:e8:cb:ef:23:70:a8:fd:7a:
14:83:a4:62:63:48:4d:7b:59:c2:b1:f2:5f:c1:a2:41:fb:ed:
ac:f4:f8:3d:de:6c:77:c2:e4:50:78:cf:95:1b:f0:e2:2e:2e:
c7:44:fc:8e:54:eb:cb:9d:48:df:6b:5b:47:46:c3:bb:0d:34:
d7:77:ef:0a:d8:9b:03:01:02:d6:87:66:ed:3c:a0:22:6c:73:
4a:b0:73:91:c2:8b:47:a0:e1:91:9a:1c:f3:cb:c2:c9:03:3e:
fb:38:68:e8:7f:0b:bb:29:e4:a7:19:d9:fa:c5:79:e5:95:b4:
59:40:0e:17:e5:a9:4e:d0:b4:0d:63:a8:2b:37:a4:51:1e:ad:
b5:2a:31:3d:1c:bf:2c:cf:d6:1d:a0:7f:a9:ea:46:66:16:5a:
82:c4:49:b4:73:53:f8:09:7d:ee:41:b3:c9:6e:3a:1c:d9:16:
96:0a:46:6c:ab:82:3e:66:41:ae:e6:1b:79:18:f4:a2:ea:66:
83:fa:34:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:03:54 2025 by rpki-client