Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File: 0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier: 8ed/K/WZNrA6SJ0bbqLJx4vb6x71C7NAhmRyCdYBrV8=
Subject key identifier: A6:9F:D1:DA:85:45:1A:BC:3F:C7:16:6A:85:CB:34:CE:6C:B8:88:79
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer: /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial: 01974E57BC148931ED56AA9C80D8E1B983DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 07:01:01 +0000
Manifest this update: Sun 08 Jun 2025 07:01:01 +0000
Manifest next update: Mon 09 Jun 2025 07:01:01 +0000
Files and hashes: 1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: hBl/i25G83d3qtPPojy8QxYfcrWp5uzkZNOn47KPUfo=)
2: J8ZSaP5X7b8oUB1RfXySs77eTwE.roa (hash: O5hpA9e+z6B0C4p8y7a0RLXHzllt/qs6YXqVQLo/Jo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:bc:14:89:31:ed:56:aa:9c:80:d8:e1:b9:83:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
Validity
Not Before: Jun 8 07:01:01 2025 GMT
Not After : Jun 9 07:01:01 2025 GMT
Subject: CN=a69fd1da85451abc3fc7166a85cb34ce6cb88879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:97:78:c0:39:f6:aa:c6:cf:c4:36:0e:ff:9d:
e7:8f:37:1b:b8:2c:8b:48:cd:ae:9d:4e:01:07:c9:
60:f8:e3:3f:e3:3e:21:23:b7:f5:3d:df:82:59:8b:
94:a0:b2:60:16:dd:e3:c2:66:9d:2f:0d:e2:da:b8:
61:e8:a7:d9:dc:a8:79:d3:e6:23:6d:52:86:a7:fc:
30:53:da:e4:2d:ac:f2:e0:e1:58:cd:dd:be:1f:20:
94:bc:18:d6:de:ef:cd:50:db:dc:be:b2:ab:61:d6:
9d:26:b7:71:ed:5e:82:29:f0:22:97:d3:df:e5:14:
d0:5d:84:72:8a:3f:24:ad:88:15:b5:37:36:d5:49:
0b:1e:da:ce:b1:86:a2:af:20:4e:93:0f:21:bc:2c:
52:96:14:a4:7a:fb:f8:c0:71:82:36:5a:97:47:5f:
2f:27:f8:a9:06:89:f1:22:dd:42:16:ed:53:30:67:
91:df:4c:a8:3d:71:c8:35:db:27:68:7f:65:90:24:
54:28:cd:60:28:72:e1:44:a2:0e:84:ea:f0:fe:99:
43:32:9e:3c:7d:ea:b4:df:a1:d4:cd:37:37:09:9a:
e6:fe:c7:5f:67:d8:29:88:43:69:aa:82:62:8b:b2:
c8:c3:fb:01:d4:b8:49:37:ff:e3:88:84:83:4a:18:
cc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9F:D1:DA:85:45:1A:BC:3F:C7:16:6A:85:CB:34:CE:6C:B8:88:79
X509v3 Authority Key Identifier:
keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c6:cf:96:2e:7a:13:8c:de:57:ce:7b:00:46:39:e0:c6:b7:
c3:09:25:95:66:69:84:72:b9:a1:c8:c1:f1:95:7e:6c:99:9f:
36:45:dd:0c:9e:68:de:c6:ec:89:02:8a:7d:be:7a:6a:f0:4a:
88:35:82:ee:98:da:23:a2:fa:15:cf:57:11:12:ee:a1:69:d0:
39:cb:d3:6f:46:b4:64:d0:58:13:98:06:f4:e2:83:34:e1:76:
c3:20:0d:44:49:eb:01:d0:e7:b5:4f:59:2d:41:9d:42:7d:43:
9b:2e:13:e0:2f:55:92:00:6c:ca:9e:dd:a8:87:a8:4b:3a:c4:
30:6f:2d:c0:2d:35:14:ce:2f:a4:c7:e2:d2:b2:46:10:9a:f4:
ef:34:7f:4b:c1:3a:3c:eb:6c:91:7c:7f:f0:d9:9f:bb:24:be:
9e:a5:41:ed:f2:4d:e6:66:d7:71:01:55:33:8b:0e:82:d1:3d:
3b:48:3c:6e:ec:bf:7b:ae:e5:df:23:29:93:cf:38:12:92:ed:
2f:32:67:e0:0f:37:fa:36:42:f1:fe:0d:d6:4a:ce:24:d0:b0:
82:70:3d:ae:8a:6e:41:4c:14:f5:ef:b3:9c:1d:73:73:88:b4:
67:e6:8d:9a:99:b4:7f:d9:0c:d0:15:40:6e:79:c0:79:a3:46:
f5:f9:93:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:39:10 2025 by rpki-client