Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier: zsV8cW9pZ1JI4R8UX2yRZpozh1R00OmZBmVfGRUS0uY=
Subject key identifier: 1B:F6:0B:CD:E9:5E:38:C1:6D:0F:E9:A7:71:38:01:91:B7:90:C3:EC
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial: 01987B2DCD365007C16D04F499633CEC0744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number: 1144
Signing time: Tue 05 Aug 2025 17:00:55 +0000
Manifest this update: Tue 05 Aug 2025 17:00:55 +0000
Manifest next update: Wed 06 Aug 2025 17:00:55 +0000
Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: bMbk/+6MKR9o/qp1dGUQcDdC0qHdyupg7NKCjwgUrQQ=)
2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:2d:cd:36:50:07:c1:6d:04:f4:99:63:3c:ec:07:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Validity
Not Before: Aug 5 17:00:55 2025 GMT
Not After : Aug 6 17:00:55 2025 GMT
Subject: CN=1bf60bcde95e38c16d0fe9a771380191b790c3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b4:14:2e:c0:df:55:f1:b6:a5:7c:39:15:8a:
83:2c:b9:67:f7:4a:c5:c2:5c:a0:b9:bb:9e:64:52:
cb:09:8f:ff:28:48:a1:8a:7f:6f:35:bb:ec:7d:6c:
62:29:20:58:8b:fd:22:cb:39:4e:aa:52:27:c3:79:
bb:ca:7c:42:98:21:06:89:ea:ec:5e:01:89:1d:5a:
51:8d:9a:44:3e:1b:3d:6f:1b:1f:2a:fc:5c:7f:30:
a1:5a:53:1f:2c:8f:59:ca:25:26:ca:c9:5e:b8:78:
1b:0e:9c:8e:6a:58:8e:12:04:4f:da:0b:f7:cd:05:
f8:6f:a5:6c:78:91:21:d8:f4:aa:16:da:f0:5a:f4:
55:83:ab:11:34:51:b4:a8:88:73:e6:ed:f3:4f:d4:
c8:5d:df:45:c7:e2:c7:17:70:43:e0:bf:95:32:56:
a2:c1:93:6c:a8:8a:ea:9c:b3:d9:e0:bf:83:2d:2a:
69:82:2c:29:c1:85:b6:b5:ea:93:09:ed:5f:a2:dc:
04:c7:aa:79:91:e1:97:9b:23:d9:9d:bc:52:41:a2:
98:63:4b:8c:55:0a:c7:21:d8:0a:f8:38:e8:3c:8f:
b4:5b:b1:4d:93:f9:87:3a:cd:38:c6:af:0a:71:19:
29:e5:49:cb:16:1b:44:ee:0c:5d:70:fb:35:e6:90:
33:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:0B:CD:E9:5E:38:C1:6D:0F:E9:A7:71:38:01:91:B7:90:C3:EC
X509v3 Authority Key Identifier:
keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:43:a7:c4:3e:9c:4b:08:6f:ba:82:e9:d3:95:e5:22:d7:98:
73:dd:19:99:7a:87:47:12:48:3b:08:65:6a:84:91:56:13:a6:
05:90:15:11:db:63:21:93:fd:f8:22:b7:f5:3c:73:f7:92:01:
29:c0:50:f6:2a:05:e4:bc:79:23:d7:b5:49:e0:78:e5:18:27:
36:18:f4:0b:b7:36:3b:d7:9a:a3:a1:94:4a:da:89:2d:78:9b:
22:81:35:dd:79:56:d3:2b:1e:bf:43:80:7b:1c:95:15:d8:30:
29:42:b8:59:66:83:f2:c9:9b:ff:de:eb:85:27:59:59:89:1a:
ae:08:1f:49:a5:e8:28:10:5a:49:50:09:13:90:2d:4c:a4:34:
25:b6:4e:1b:bd:28:3e:ff:ba:87:dd:a4:a3:a1:c1:a2:1e:d1:
11:66:8c:0a:a6:e0:bd:de:47:95:a4:3d:02:34:e1:ce:8c:fb:
b8:82:fb:30:34:28:eb:0d:6f:56:0a:e8:8f:bf:7b:ad:33:d0:
90:9b:7c:db:93:99:b2:4a:2a:ef:f3:a0:36:b3:4c:12:f7:54:
6e:71:41:56:b5:b2:1b:b3:e5:08:fd:ae:9e:aa:9a:f0:f5:5a:
44:c3:2d:b1:c9:86:f1:75:92:f0:8c:4d:05:2e:05:45:65:3f:
39:d7:9e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:36:19 2025 by rpki-client