Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File: 0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier: QZXwqBqS6+hL5i794RRSU4DpZVs0jxHPO0vFuPdm604=
Subject key identifier: 73:64:6F:16:CC:CA:65:E7:7E:8D:D6:07:74:F6:E7:35:2E:0A:C5:C5
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer: /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial: 019510C7D0CBE1F33394B3E9A2E62D2BB0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number: 1458
Signing time: Sun 16 Feb 2025 22:01:25 +0000
Manifest this update: Sun 16 Feb 2025 22:01:25 +0000
Manifest next update: Mon 17 Feb 2025 22:01:25 +0000
Files and hashes: 1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: dQTRMOh70uVKjfGwvQxOiBnSkLt8QqxUd7QdmreyF5A=)
2: J8ZSaP5X7b8oUB1RfXySs77eTwE.roa (hash: O5hpA9e+z6B0C4p8y7a0RLXHzllt/qs6YXqVQLo/Jo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:d0:cb:e1:f3:33:94:b3:e9:a2:e6:2d:2b:b0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
Validity
Not Before: Feb 16 22:01:25 2025 GMT
Not After : Feb 17 22:01:25 2025 GMT
Subject: CN=73646f16ccca65e77e8dd60774f6e7352e0ac5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1a:56:dc:85:8e:86:cf:ef:3f:c2:09:7c:0a:
ac:74:b8:fb:12:57:2b:52:51:61:c8:61:b2:c9:84:
6f:43:84:c1:cc:00:af:38:f6:db:27:13:a0:ea:3e:
16:72:66:97:27:1e:b1:a0:d0:68:3c:71:58:59:0d:
40:c3:c4:a7:03:15:5b:2b:9f:76:d1:4a:62:32:4b:
ee:06:17:20:29:6b:7f:22:20:b1:75:e1:00:8c:6e:
ba:62:03:8c:45:64:42:bd:7d:7a:82:c5:f3:31:26:
90:41:81:88:f5:24:f3:08:20:0b:ad:d7:66:88:da:
75:96:ed:64:f6:2c:5f:c0:81:73:98:ec:3e:64:77:
19:f8:55:0a:8c:1a:80:1b:53:17:ea:a5:bb:6c:38:
5d:08:3b:04:94:46:f4:fe:e9:24:93:fd:70:de:f9:
86:62:5d:e3:05:fd:53:ff:b0:b6:3b:6a:b0:bc:26:
89:8b:5b:d3:01:35:13:6a:68:62:2f:c9:6c:ff:72:
32:2e:b7:26:d1:bc:12:00:93:12:ba:63:b1:22:d0:
62:77:02:39:92:a5:7e:5a:34:99:35:5e:97:be:9a:
6c:d0:fc:a0:ff:d2:b1:ca:e7:c5:a1:fe:a0:d8:59:
e6:b7:2f:d5:dc:03:69:e1:75:4c:f1:41:cf:94:cb:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:64:6F:16:CC:CA:65:E7:7E:8D:D6:07:74:F6:E7:35:2E:0A:C5:C5
X509v3 Authority Key Identifier:
keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:42:86:91:65:65:f6:90:fb:e7:af:19:67:01:db:30:a2:e9:
c5:c7:35:03:fb:73:fe:78:63:61:de:4b:03:f4:5f:b1:f0:5b:
9e:7b:23:71:c5:fe:b2:52:ca:70:81:3b:45:cb:c6:d9:30:d4:
2e:13:3d:6b:26:4d:60:6b:fc:cf:37:72:9b:2a:45:09:33:e3:
76:a7:d5:e0:ea:eb:44:29:7d:26:93:51:ac:b6:05:42:24:f3:
6c:6b:6c:57:fe:2e:ab:46:42:c9:43:65:c4:5d:9d:d8:42:63:
b8:61:be:67:c9:17:60:c1:33:02:e3:8c:57:30:b3:ab:f2:53:
80:e9:a0:3b:ec:03:62:3d:97:95:a4:23:d4:11:23:f4:d7:a3:
59:a5:4d:3a:6d:50:e6:ae:60:2f:39:10:e7:89:6b:4e:67:90:
31:38:90:fc:31:f7:c0:39:0d:74:f6:27:1f:49:67:96:bd:11:
e2:8d:14:9b:e3:b8:b6:a7:cf:f3:ce:21:27:57:ba:f7:c4:23:
b1:b3:02:5f:d7:c4:f3:42:b5:99:60:05:3c:6b:bf:f4:b9:61:
72:95:2f:a8:09:9e:7d:a7:ef:8d:7b:c9:bf:d5:35:94:6b:5b:
a4:af:11:b9:13:98:2d:c5:cb:83:0c:14:19:8e:d1:34:91:04:
b1:8d:c0:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQx9DL4fMzlLPpouYtK7DpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMGJhNjMzZjFlOTgyNDA3NmQxNjFhOTgzZDhiOGU4ODEy
NjM5ODIwHhcNMjUwMjE2MjIwMTI1WhcNMjUwMjE3MjIwMTI1WjAzMTEwLwYDVQQD
Eyg3MzY0NmYxNmNjY2E2NWU3N2U4ZGQ2MDc3NGY2ZTczNTJlMGFjNWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RpW3IWOhs/vP8IJfAqsdLj7Elcr
UlFhyGGyyYRvQ4TBzACvOPbbJxOg6j4WcmaXJx6xoNBoPHFYWQ1Aw8SnAxVbK592
0UpiMkvuBhcgKWt/IiCxdeEAjG66YgOMRWRCvX16gsXzMSaQQYGI9STzCCALrddm
iNp1lu1k9ixfwIFzmOw+ZHcZ+FUKjBqAG1MX6qW7bDhdCDsElEb0/ukkk/1w3vmG
Yl3jBf1T/7C2O2qwvCaJi1vTATUTamhiL8ls/3IyLrcm0bwSAJMSumOxItBidwI5
kqV+WjSZNV6Xvpps0Pyg/9KxyufFof6g2Fnmty/V3ANp4XVM8UHPlMvr1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNkbxbMymXnfo3WB3T25zUuCsXFMB8GA1UdIwQY
MBaAFNALpjPx6YJAdtFhqYPYuOiBJjmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEF1bU1fSHBna0IyMFdHcGc5aTQ2SUVtT1lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80MDg2NjctMGIzOS00ZGEwLTlhYTAt
M2NjMTFiYzlkNTk0LzEvMEF1bU1fSHBna0IyMFdHcGc5aTQ2SUVtT1lJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80MDg2NjctMGIzOS00ZGEwLTlhYTAtM2NjMTFiYzlkNTk0
LzEvMEF1bU1fSHBna0IyMFdHcGc5aTQ2SUVtT1lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkUKGkWVl
9pD7568ZZwHbMKLpxcc1A/tz/nhjYd5LA/RfsfBbnnsjccX+slLKcIE7RcvG2TDU
LhM9ayZNYGv8zzdymypFCTPjdqfV4OrrRCl9JpNRrLYFQiTzbGtsV/4uq0ZCyUNl
xF2d2EJjuGG+Z8kXYMEzAuOMVzCzq/JTgOmgO+wDYj2XlaQj1BEj9NejWaVNOm1Q
5q5gLzkQ54lrTmeQMTiQ/DH3wDkNdPYnH0lnlr0R4o0Um+O4tqfP884hJ1e698Qj
sbMCX9fE80K1mWAFPGu/9LlhcpUvqAmefafvjXvJv9U1lGtbpK8RuROYLcXLgwwU
GY7RNJEEsY3A6A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:17 2025 by rpki-client