Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
File: 0AumM_HpgkB20WGpg9i46IEmOYI.mft (raw, json)
Hash identifier: stBUw+qU/oZ+Wh5IJFTr5zSwBQVh9fvQFazDN/g//E0=
Subject key identifier: CC:43:2D:B2:F2:0F:45:DE:3F:88:D1:55:EA:C3:77:C9:97:C3:50:00
Authority key identifier: D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
Certificate issuer: /CN=d00ba633f1e9824076d161a983d8b8e881263982
Certificate serial: 019679EA105443229467F865527EE7C446FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
Manifest number: 1513
Signing time: Mon 28 Apr 2025 01:01:44 +0000
Manifest this update: Mon 28 Apr 2025 01:01:44 +0000
Manifest next update: Tue 29 Apr 2025 01:01:44 +0000
Files and hashes: 1: 0AumM_HpgkB20WGpg9i46IEmOYI.crl (hash: NeeCfyj68RKJ0EFvZLsA6LjcT/vn812WBoA4DfxXDFU=)
2: J8ZSaP5X7b8oUB1RfXySs77eTwE.roa (hash: O5hpA9e+z6B0C4p8y7a0RLXHzllt/qs6YXqVQLo/Jo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:ea:10:54:43:22:94:67:f8:65:52:7e:e7:c4:46:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00ba633f1e9824076d161a983d8b8e881263982
Validity
Not Before: Apr 28 01:01:44 2025 GMT
Not After : Apr 29 01:01:44 2025 GMT
Subject: CN=cc432db2f20f45de3f88d155eac377c997c35000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0c:ef:61:19:ee:97:d1:94:f6:4b:1b:7f:1e:
24:90:b6:4f:3b:3a:0c:2d:c9:b7:c8:48:66:1f:0a:
04:90:db:5e:00:01:c9:b8:f9:da:b1:69:4e:5c:c4:
09:1e:22:6f:b6:4c:b6:b4:74:18:52:5f:31:ac:b9:
db:f6:f3:2f:29:b9:4d:d8:a2:35:b2:60:78:2d:4d:
50:08:1c:cd:6b:72:c7:0e:6e:2d:f8:90:3c:8c:e2:
9c:57:41:9d:f6:e6:ff:4d:1b:80:1a:34:a6:b1:00:
70:43:70:8c:cc:93:99:81:5c:eb:76:1b:48:bb:f9:
b3:dc:df:ab:66:d5:3d:64:6c:36:12:48:41:03:7c:
07:d9:38:64:13:98:b2:d3:2e:0c:d1:5a:a4:d0:92:
50:60:46:93:38:b8:49:0d:5a:5c:45:2b:d5:9d:ec:
8b:86:ef:42:0c:39:ee:5a:f2:f8:da:fb:29:bd:13:
20:bd:f2:e2:b8:3f:ec:a6:6d:d7:6b:aa:e1:8c:60:
b2:80:21:06:12:12:c2:2d:e5:42:a2:b8:96:b9:df:
ab:64:47:91:29:52:6e:f3:ad:c0:ef:6f:58:44:86:
59:1c:31:05:8e:26:a5:64:1c:08:55:b8:cd:da:60:
b3:6a:66:7d:76:e2:65:7f:91:ee:6b:5d:0c:0e:9b:
8c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:43:2D:B2:F2:0F:45:DE:3F:88:D1:55:EA:C3:77:C9:97:C3:50:00
X509v3 Authority Key Identifier:
keyid:D0:0B:A6:33:F1:E9:82:40:76:D1:61:A9:83:D8:B8:E8:81:26:39:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AumM_HpgkB20WGpg9i46IEmOYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/408667-0b39-4da0-9aa0-3cc11bc9d594/1/0AumM_HpgkB20WGpg9i46IEmOYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:41:e6:1f:05:14:73:53:c1:d6:9f:71:ca:57:5f:e9:59:b8:
c0:4b:c1:9d:04:69:89:06:57:e2:37:12:53:2c:5c:76:b4:c8:
a3:c2:f0:77:a4:0b:a8:68:06:91:23:b3:57:09:61:f8:9a:9a:
0b:73:54:72:59:d6:69:2e:7a:ca:4a:57:77:d5:bb:0a:35:16:
a6:73:fd:71:e9:af:82:2d:ae:52:42:eb:b7:60:b2:91:80:2b:
f3:c9:52:ba:d8:36:34:53:29:1a:35:f6:bd:3f:be:43:88:6a:
e8:5e:60:ea:c4:c2:aa:1a:d6:e8:8e:60:a0:be:0f:4c:de:d6:
e6:44:84:96:62:bd:33:a9:aa:3c:3e:81:4d:14:b9:60:8b:f4:
74:c8:4c:c8:18:b6:21:81:3d:1d:61:5f:4f:5f:7a:cd:e0:de:
b6:e5:c1:3b:d4:f6:b8:e0:c8:f4:3a:2b:7d:12:fe:66:ce:71:
fa:3d:69:fa:4b:f6:56:27:0c:9c:a9:35:30:94:77:38:9f:19:
d3:2f:69:5f:94:59:6a:e8:f4:85:92:33:b1:b1:84:4d:1c:c9:
7e:e3:f6:89:a2:d4:fc:c1:c5:36:86:a2:53:95:4b:fa:24:55:
2d:0b:c2:37:09:03:21:41:9b:47:15:65:98:5c:b4:88:0b:5e:
62:cb:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:46:56 2025 by rpki-client