Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier: oYNEoRnnurRazCjAVLlo9ZZrWXGEthG9xJa7CiV+cUA=
Subject key identifier: 3B:7A:EC:B2:5C:E1:38:66:C0:C0:DF:6E:7C:C9:C5:4A:B5:BA:F6:1B
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial: 01976CCF60695892E746B6F90AE84F2C5C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number: 10B8
Signing time: Sat 14 Jun 2025 05:00:19 +0000
Manifest this update: Sat 14 Jun 2025 05:00:19 +0000
Manifest next update: Sun 15 Jun 2025 05:00:19 +0000
Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: nnxURDzOn9nyb7F/U4e9liPJ0zXsfIeLhp8Gg+wuGg0=)
2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:60:69:58:92:e7:46:b6:f9:0a:e8:4f:2c:5c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Validity
Not Before: Jun 14 05:00:19 2025 GMT
Not After : Jun 15 05:00:19 2025 GMT
Subject: CN=3b7aecb25ce13866c0c0df6e7cc9c54ab5baf61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:99:32:84:1f:47:c1:a7:d1:26:5d:ad:a3:
c4:8a:01:3c:8c:cd:41:c8:8d:0f:14:c0:a1:59:e1:
ae:2f:fe:56:05:23:0a:02:92:23:b4:f1:a1:f1:38:
56:a4:ce:b3:47:4d:f6:2b:39:e6:e3:b3:0f:77:ea:
fd:49:b2:7a:a4:09:7b:6e:1e:34:1d:8f:fc:63:63:
45:f4:53:ed:e6:dc:63:69:7b:3e:4c:48:94:4f:40:
c8:b8:72:28:96:20:ae:b4:d6:5c:bc:b0:38:73:f5:
43:18:ce:25:40:9d:09:84:87:5a:59:2a:22:2d:a4:
bb:3c:75:b2:e9:57:57:c3:81:b8:c5:a1:e1:2a:fc:
7a:f7:a3:a1:a7:d5:68:ff:23:fd:59:12:ae:b8:26:
e3:0b:da:2d:63:8e:a2:87:ef:70:87:80:0f:aa:ac:
fc:4c:0d:8b:59:1b:c2:32:7b:b0:2d:90:fc:3c:47:
6e:f4:27:d1:e0:2d:14:b6:c1:a0:6b:b2:44:5b:5b:
7c:51:ad:b6:10:8d:1a:25:73:70:63:3f:13:e2:f2:
7f:ae:5e:bd:ef:b2:57:e3:b6:6d:ec:3f:f2:3c:d6:
82:b1:9e:ac:2c:b1:5c:77:45:ad:96:68:b5:4e:d2:
74:3c:c5:74:44:28:fb:f1:c2:4f:cd:ca:98:71:fc:
75:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7A:EC:B2:5C:E1:38:66:C0:C0:DF:6E:7C:C9:C5:4A:B5:BA:F6:1B
X509v3 Authority Key Identifier:
keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9f:d8:4b:57:54:9f:01:f2:f0:ea:f3:30:66:f3:89:cd:af:
c8:d5:e1:22:31:1e:54:be:c1:a7:21:89:8e:b9:e0:bf:ef:f2:
de:67:7e:b5:5e:56:25:b5:e8:92:93:1a:b7:4b:a7:2a:c5:4a:
92:0b:78:aa:89:da:2e:b1:4e:a9:b5:89:a4:8a:74:c9:17:85:
a8:e2:55:23:7f:7b:6a:d4:a5:a1:ce:ff:61:5e:4f:4d:d1:79:
56:0e:03:3d:02:ee:9b:39:b1:bf:ff:07:9a:ed:49:c2:76:fa:
e9:e8:3a:76:9d:af:7c:fe:40:7a:5b:7a:26:07:88:89:b1:3b:
17:ff:d2:5a:39:d4:ca:0e:6c:f2:30:de:5f:bb:e7:ae:02:7f:
3b:e0:dc:a6:c0:9e:88:f5:88:f0:ef:2a:fb:76:6f:31:0d:59:
b5:61:d1:26:70:f0:b1:87:99:45:80:10:00:91:ae:93:4c:d7:
fe:cd:c3:08:24:e2:02:a4:3a:92:8f:bc:03:73:00:07:99:3f:
ae:e5:c8:88:8b:2f:e5:7d:ec:3f:be:6b:f5:1e:95:d4:dd:1f:
0a:53:bc:f4:c4:8a:33:11:6d:a2:7d:7a:8c:4a:2d:05:1c:c6:
6b:6d:4a:21:89:6b:a0:85:c4:57:3e:29:a7:b3:12:e0:7c:70:
c4:65:4c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:49:57 2025 by rpki-client