Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier: QnNb8Q2cIHgSfHS7KMpSv1QRABBfKZyRebxVDiyyN3I=
Subject key identifier: B9:FD:A7:26:EE:09:E1:73:9B:58:3F:86:54:50:55:20:94:EE:6D:B2
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial: 019923312DD0CA543B5B5356F611D30BB2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number: 119B
Signing time: Sun 07 Sep 2025 08:00:49 +0000
Manifest this update: Sun 07 Sep 2025 08:00:49 +0000
Manifest next update: Mon 08 Sep 2025 08:00:49 +0000
Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: 5aOEZ3xjHb4/3unzSU/hsymXFWU0h48tcMeEjGMwDd0=)
2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:2d:d0:ca:54:3b:5b:53:56:f6:11:d3:0b:b2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Validity
Not Before: Sep 7 08:00:49 2025 GMT
Not After : Sep 8 08:00:49 2025 GMT
Subject: CN=b9fda726ee09e1739b583f865450552094ee6db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:68:11:f3:3e:3f:b8:92:e1:42:6a:26:26:
62:90:9d:ea:39:16:a7:01:70:e1:1c:a7:46:b9:d6:
28:5e:4f:be:11:8e:23:8f:9a:89:6a:eb:88:4e:41:
71:e3:9e:91:ef:a9:dc:20:f0:36:24:aa:a1:df:98:
c6:01:42:bc:74:cc:42:42:f2:d1:d3:9b:59:60:a3:
5c:6d:0a:04:78:db:95:7b:9b:49:3b:2b:f4:3e:7e:
e7:2f:bc:d6:f1:18:72:e6:1e:b1:ad:8b:be:38:91:
e1:2c:a8:45:da:12:e6:24:f8:29:0e:6f:61:61:6d:
f7:be:8c:65:c4:98:ea:9a:bb:97:fb:4a:51:7b:e2:
51:ce:f3:bc:2b:1e:1f:87:64:63:3f:6e:9f:4b:c7:
01:50:11:f5:03:29:33:81:0f:a9:d9:55:f5:87:d2:
17:b6:05:b4:9b:5e:06:e1:bb:f7:f5:9d:97:36:51:
06:33:c9:94:12:a9:2c:c5:41:67:70:ee:6c:bf:20:
28:27:c1:5e:8d:3f:8b:c8:88:51:dc:79:de:85:62:
da:e2:e0:1b:23:13:ad:0a:d2:9d:a8:f5:d6:bc:f7:
63:98:f3:d7:21:50:f4:ed:08:5a:97:21:a2:9e:9d:
0d:51:e3:02:31:a9:2d:c3:29:a0:4e:e7:8a:9f:7e:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FD:A7:26:EE:09:E1:73:9B:58:3F:86:54:50:55:20:94:EE:6D:B2
X509v3 Authority Key Identifier:
keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b7:21:a4:59:1e:eb:4c:8c:c5:e3:c3:dd:94:3e:43:6e:7f:
5f:ab:58:b1:46:65:d9:84:13:d5:c5:8a:bd:67:90:bf:cc:15:
34:a2:1f:02:94:27:2e:59:63:07:5c:7e:ae:4e:a0:31:81:7a:
95:12:56:5b:1d:93:a5:69:59:a9:22:b6:4a:40:fb:1f:f8:2e:
66:f1:a0:f5:5b:57:51:c3:f2:f3:69:87:6f:17:e8:8a:4c:83:
be:a0:5f:ea:63:8b:60:25:c5:e5:95:18:d6:49:ff:b3:ac:88:
e9:2b:e9:15:7e:15:26:66:e9:27:33:4e:be:b5:f0:2b:c6:a0:
19:6f:6a:60:4b:33:21:92:20:f5:53:61:a8:50:fa:fc:9e:af:
96:52:21:79:bd:39:8c:1e:98:c3:4b:59:33:d2:e4:d9:05:1d:
d7:8a:02:d2:72:95:60:75:b4:5d:e6:21:e1:62:24:eb:ba:80:
99:17:c8:a4:0f:76:db:4b:f5:5a:8c:2a:46:56:ea:cc:27:01:
03:92:85:3b:f1:ae:82:c5:5d:a5:f1:93:06:25:3e:05:ad:85:
30:62:a0:ab:52:1f:73:f1:3e:9c:bf:23:15:b4:dd:dc:5d:a4:
6a:e3:b1:fe:87:ab:52:12:52:56:af:9a:97:38:a4:76:a2:2c:
73:ea:dc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:03 2025 by rpki-client