Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier: M75Tr5B7OUNPUpzWIfWjJ/wXd8blEteEPR0oCA1LMDo=
Subject key identifier: C0:F2:A4:92:E2:F1:47:AC:78:60:F9:C1:AA:2F:CC:AA:A9:9E:CE:BB
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial: 01968322E4AE26F983DE7F534B5890EDFCC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number: 103F
Signing time: Tue 29 Apr 2025 20:00:24 +0000
Manifest this update: Tue 29 Apr 2025 20:00:24 +0000
Manifest next update: Wed 30 Apr 2025 20:00:24 +0000
Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: jIsoSYphWCG7uMgjKyhWMsDIplJGQ6+mc/g5w4exkT4=)
2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:e4:ae:26:f9:83:de:7f:53:4b:58:90:ed:fc:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Validity
Not Before: Apr 29 20:00:24 2025 GMT
Not After : Apr 30 20:00:24 2025 GMT
Subject: CN=c0f2a492e2f147ac7860f9c1aa2fccaaa99ecebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:e8:46:21:93:41:7d:5a:d3:91:ad:0f:80:
61:c8:82:84:c1:9f:ec:10:1a:41:d9:54:09:4a:6a:
61:c5:59:e3:f6:2e:ba:18:a0:ae:49:4c:0c:a0:4c:
57:22:17:e6:84:6f:16:cc:b7:04:80:b6:e4:1e:bf:
29:2b:5c:ec:bc:13:32:e8:2c:92:d2:49:9f:53:f3:
52:c6:c4:f9:94:5d:a9:13:a8:b4:b9:dd:80:44:20:
b3:9a:d2:04:a3:37:99:07:c6:86:46:63:4a:fb:48:
a7:54:69:54:69:65:e4:a5:48:cf:22:52:72:45:74:
2b:d1:fe:fa:60:0b:ec:3c:3e:8a:80:0f:79:f9:53:
f9:6b:e4:97:99:86:c5:2e:90:f8:1f:1b:db:c1:e3:
9f:4b:cf:66:a3:88:d4:65:f8:80:c2:c5:57:a1:c8:
83:fa:e1:70:d1:76:ad:5b:84:3b:27:d9:7c:d0:60:
6c:50:23:18:05:93:d4:b2:48:6e:e8:42:d0:d1:02:
84:50:cd:7e:ab:04:e9:be:5d:53:4b:36:63:c7:84:
37:47:4e:e1:3e:e3:81:9d:9f:3f:48:9f:98:8b:fd:
80:d3:8f:a1:2b:9b:4d:c0:02:90:3b:08:3a:1f:d1:
3c:a7:16:eb:07:5f:ef:9f:b1:1c:4c:cd:69:8f:03:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F2:A4:92:E2:F1:47:AC:78:60:F9:C1:AA:2F:CC:AA:A9:9E:CE:BB
X509v3 Authority Key Identifier:
keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:9b:f4:00:6a:4d:a2:6c:57:14:cf:a0:a2:57:37:1d:42:0b:
d3:15:6e:be:f1:e8:f3:23:65:c5:91:7d:91:03:48:f2:be:8f:
5f:47:63:c1:0b:5b:56:14:01:dc:09:ed:4d:83:46:dc:03:43:
da:aa:6a:b3:5c:83:c8:33:bf:5b:7a:0e:68:df:eb:0c:66:2d:
12:af:6e:78:22:df:6f:ee:0b:e2:17:b6:e2:e5:af:c1:cd:f9:
4e:ab:2e:fd:d1:5d:01:97:2f:12:03:71:ab:dd:ab:d2:32:f6:
92:29:5b:d0:ba:d1:d4:5e:05:65:d4:2b:46:34:fd:f5:49:b7:
b5:27:fa:8c:84:29:1b:66:76:84:5e:42:b4:40:9a:ed:cc:f4:
a6:f3:01:bf:aa:25:b1:40:7c:a7:62:83:69:f1:3b:82:31:4b:
09:24:f1:8c:46:27:fb:3f:71:1f:7e:8a:e9:95:91:b3:3f:49:
25:8f:b0:21:2a:22:16:20:44:ba:ef:dd:ad:03:63:b7:57:ab:
26:9f:69:d5:74:7f:71:e3:b7:58:f1:36:45:d3:eb:fe:5f:91:
55:5a:6a:1e:69:69:fc:cb:b7:bd:56:91:d1:83:da:31:2c:1a:
29:d6:3c:72:d3:28:44:4c:a2:14:b4:2e:e7:c1:ff:dd:dd:bb:
e6:e9:e7:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaDIuSuJvmD3n9TS1iQ7fzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZmQ3ODM2ZDcxMzA4YzQyZDBmOWQxNjhmZmQ0YzU4MTY3
MTQ0NTkwHhcNMjUwNDI5MjAwMDI0WhcNMjUwNDMwMjAwMDI0WjAzMTEwLwYDVQQD
EyhjMGYyYTQ5MmUyZjE0N2FjNzg2MGY5YzFhYTJmY2NhYWE5OWVjZWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOjoRiGTQX1a05GtD4BhyIKEwZ/s
EBpB2VQJSmphxVnj9i66GKCuSUwMoExXIhfmhG8WzLcEgLbkHr8pK1zsvBMy6CyS
0kmfU/NSxsT5lF2pE6i0ud2ARCCzmtIEozeZB8aGRmNK+0inVGlUaWXkpUjPIlJy
RXQr0f76YAvsPD6KgA95+VP5a+SXmYbFLpD4HxvbweOfS89mo4jUZfiAwsVXociD
+uFw0XatW4Q7J9l80GBsUCMYBZPUskhu6ELQ0QKEUM1+qwTpvl1TSzZjx4Q3R07h
PuOBnZ8/SJ+Yi/2A04+hK5tNwAKQOwg6H9E8pxbrB1/vn7EcTM1pjwNZbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDypJLi8UeseGD5waovzKqpns67MB8GA1UdIwQY
MBaAFKT9eDbXEwjELQ+dFo/9TFgWcURZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMt
OWQxMzBkNDhiZTM0LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMtOWQxMzBkNDhiZTM0
LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZv0AGpN
omxXFM+golc3HUIL0xVuvvHo8yNlxZF9kQNI8r6PX0djwQtbVhQB3AntTYNG3AND
2qpqs1yDyDO/W3oOaN/rDGYtEq9ueCLfb+4L4he24uWvwc35Tqsu/dFdAZcvEgNx
q92r0jL2kilb0LrR1F4FZdQrRjT99Um3tSf6jIQpG2Z2hF5CtECa7cz0pvMBv6ol
sUB8p2KDafE7gjFLCSTxjEYn+z9xH36K6ZWRsz9JJY+wISoiFiBEuu/drQNjt1er
Jp9p1XR/ceO3WPE2RdPr/l+RVVpqHmlp/Mu3vVaR0YPaMSwaKdY8ctMoREyiFLQu
58H/3d275unn6g==
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:15:35 2025 by rpki-client