Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier: QOt2sGxKYzJiv5isPkjhfkh2OlPQWcnTBUax+H45nz4=
Subject key identifier: 0A:59:E9:E9:DC:D1:24:D8:20:7F:CF:0B:5B:FF:4A:A1:95:51:01:08
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial: 01958FCEFD30BA400D4CB4C05C43FB9305FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number: 0FC1
Signing time: Thu 13 Mar 2025 14:01:01 +0000
Manifest this update: Thu 13 Mar 2025 14:01:01 +0000
Manifest next update: Fri 14 Mar 2025 14:01:01 +0000
Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: GJCkG2N6wHPeu38FboYWy6mFtpqKEst2Li199gd+7OI=)
2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:ce:fd:30:ba:40:0d:4c:b4:c0:5c:43:fb:93:05:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Validity
Not Before: Mar 13 14:01:01 2025 GMT
Not After : Mar 14 14:01:01 2025 GMT
Subject: CN=0a59e9e9dcd124d8207fcf0b5bff4aa195510108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:d7:29:c1:cc:aa:2c:72:ad:9d:ca:6b:0b:
8d:9e:37:3d:18:88:4f:92:7e:8e:a5:78:6d:ea:eb:
7e:1d:3f:74:10:70:e6:56:90:a3:70:a9:a1:fb:94:
67:d2:eb:0c:f9:15:21:34:66:f6:cc:a0:bd:9a:64:
d6:1e:e7:e2:3e:24:59:e8:df:65:b4:45:f9:00:5f:
90:fd:ff:94:75:c2:1a:ce:3b:18:b0:e4:cd:4f:7a:
e1:b1:dd:57:45:a2:7b:d5:0e:0d:3a:52:28:cf:85:
78:4a:17:4e:c0:d5:9a:ed:c7:0b:81:42:5e:3e:68:
3e:48:48:b5:0a:fd:29:99:23:c1:da:f0:45:d1:63:
da:34:48:7a:8f:13:cf:32:59:89:34:84:62:21:fa:
a0:15:81:3c:2b:52:e0:bb:5e:e2:12:28:dd:bf:ce:
6d:11:99:c2:3b:be:ee:39:f6:36:b6:9d:92:05:07:
5d:3e:1a:7b:a1:b1:78:8f:91:8c:82:18:33:80:c7:
a0:43:44:c6:57:65:c9:e8:cb:da:48:a9:80:8c:f6:
44:fc:e8:f2:d7:d1:c5:dd:00:dc:3f:87:cc:67:fa:
29:ea:39:ea:ba:31:e4:82:ab:8e:bb:40:ef:2d:47:
97:6e:b3:8c:34:ca:59:7d:49:51:80:cd:4e:36:f3:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:59:E9:E9:DC:D1:24:D8:20:7F:CF:0B:5B:FF:4A:A1:95:51:01:08
X509v3 Authority Key Identifier:
keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:97:6f:f6:9b:51:5f:ac:2e:cd:64:11:05:5e:13:45:55:a6:
eb:eb:e8:4b:eb:e5:a6:ac:de:15:b6:1a:61:6d:b7:44:26:ad:
f4:83:81:00:b0:b1:5b:35:4d:55:5a:e0:03:9a:25:30:32:5c:
43:6a:07:96:b4:91:14:3f:56:90:b8:d4:84:9c:de:51:eb:a3:
f3:63:d5:73:1a:ea:bc:be:d6:8c:ba:77:9a:9e:ec:f3:b1:ce:
1a:a1:f3:2a:c1:77:3e:00:02:0f:c3:11:c9:1b:ae:9d:25:ee:
35:20:f8:94:50:99:f8:a4:82:87:01:95:5b:31:4a:51:ca:e5:
e8:22:59:03:98:52:c3:f7:2c:8f:db:79:88:f7:e4:b2:15:02:
8f:5b:48:7e:f9:f3:e6:27:43:00:39:99:b3:60:31:56:c1:c6:
a1:f4:e4:4a:42:0d:dc:ae:dc:a2:72:97:0a:4c:6f:39:7d:81:
ad:e6:8a:d7:27:40:4d:f6:50:af:65:25:35:8d:2e:b1:c8:49:
93:63:32:55:e6:82:bc:62:3f:85:d6:5c:8f:fc:ff:4b:b3:db:
40:33:09:87:e2:a7:ec:3c:bc:5c:d7:27:c4:5c:23:05:8f:af:
44:8f:30:f5:ca:c4:d8:3f:ce:5d:b4:be:fa:b2:ec:44:09:1d:
31:28:fc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:42 2025 by rpki-client