Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier: AeaoGV8LSAT5+P77JZG0r4bzxZQFB74gbqGJ5+L0L2E=
Subject key identifier: BB:31:95:FF:45:13:53:0E:4E:20:E6:03:82:47:32:4B:AD:4D:5B:A8
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial: 0197B820E643194179DDDCFCAAA8A5A439C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number: 10DF
Signing time: Sat 28 Jun 2025 20:00:53 +0000
Manifest this update: Sat 28 Jun 2025 20:00:53 +0000
Manifest next update: Sun 29 Jun 2025 20:00:53 +0000
Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: Agg7LDIZUaWQRrfTpWrIB+3BqCtZVV4TPBNzSfNLP4U=)
2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e6:43:19:41:79:dd:dc:fc:aa:a8:a5:a4:39:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Validity
Not Before: Jun 28 20:00:53 2025 GMT
Not After : Jun 29 20:00:53 2025 GMT
Subject: CN=bb3195ff4513530e4e20e6038247324bad4d5ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:a9:6b:34:d1:0e:f5:13:61:ee:76:9f:be:
5b:3c:af:96:9b:b9:bb:81:f2:ed:95:2d:64:48:3a:
b4:b3:92:94:da:fd:17:d6:64:2d:77:90:21:d1:1b:
63:c0:90:e6:56:c5:df:35:d8:7f:cb:ee:19:fb:f3:
fd:4e:a2:36:63:4e:90:53:51:05:bf:d7:50:e6:c7:
2c:d2:69:bc:a5:34:2d:3b:8f:c0:9a:9e:e1:c6:3d:
7e:12:5a:ef:35:74:51:62:25:00:9e:4e:d3:c9:39:
53:1d:f8:e3:3d:d8:66:c2:ce:0b:64:1e:48:1d:78:
2a:30:5d:f7:7e:57:51:aa:4a:e7:3b:eb:3c:bc:c5:
a8:c3:1c:e5:ab:19:5a:46:40:76:35:71:44:0c:a7:
be:5f:33:b7:27:c6:ce:18:43:af:50:e6:5f:e8:2e:
56:97:b5:a9:f7:08:ce:09:6a:2d:8c:aa:66:7d:dd:
8c:e2:43:94:66:53:4e:b1:17:0f:4b:24:1b:d9:5c:
e7:d8:37:ae:d8:be:f4:c4:ba:84:99:42:ce:d6:97:
b7:f4:c0:0f:7b:93:0f:5d:d6:eb:1d:d3:68:7d:23:
dd:e1:4c:72:d2:6b:36:8a:03:f4:6a:d3:77:d0:f9:
e5:05:3e:f4:1d:99:72:d8:79:39:7f:85:af:10:17:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:31:95:FF:45:13:53:0E:4E:20:E6:03:82:47:32:4B:AD:4D:5B:A8
X509v3 Authority Key Identifier:
keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d7:b6:75:22:7b:b7:42:22:79:b9:c9:94:ca:31:5a:a8:65:
07:41:2a:8e:27:e6:ac:04:68:8a:e6:02:da:89:02:af:f6:43:
b4:59:f6:1b:5b:07:4d:7d:cf:6f:6e:8b:9b:b4:33:6e:4b:cf:
a5:02:48:3b:83:9e:41:c1:f4:af:69:33:cf:b1:49:98:26:92:
1b:01:78:ee:b4:63:4f:e5:8b:3e:0c:e8:ba:98:39:ba:9d:6a:
f0:b7:e1:f6:a4:04:7b:b9:cc:da:41:04:a2:ba:da:ac:b6:0c:
b2:6a:ce:0a:01:52:67:c6:5b:13:4e:44:12:ba:d1:5b:a2:06:
bc:96:68:82:00:fd:58:72:dd:21:c2:1a:41:9d:dc:82:19:f8:
0e:47:31:00:f0:63:77:ca:7c:2a:fc:5a:82:66:85:ae:2f:80:
dd:12:53:5b:60:23:f4:3d:2a:6d:18:49:4c:b1:af:ca:c0:b1:
e6:9f:1f:d6:ae:41:ee:61:0f:84:53:81:2c:f9:8a:bb:c0:af:
60:93:5f:02:d2:70:2e:c2:3b:3f:55:4b:3c:bc:91:64:c2:cf:
b0:16:aa:be:f3:05:c7:48:54:c8:02:63:3c:e9:f2:c0:c2:ff:
e7:61:ae:7f:d0:9b:81:21:75:5a:16:8d:23:09:37:d5:d0:f5:
ed:06:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:14 2025 by rpki-client