Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier: VVxQJY5l2L7WZodqxFC+dHfxAdhT7BEDMtelM8912Mw=
Subject key identifier: DA:3D:8C:6A:77:1E:17:7A:93:A2:72:09:E0:CC:64:50:2C:2E:BC:98
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial: 019512478E7B4D14B0D593B8B1511EE6F42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number: 0F80
Signing time: Mon 17 Feb 2025 05:00:34 +0000
Manifest this update: Mon 17 Feb 2025 05:00:34 +0000
Manifest next update: Tue 18 Feb 2025 05:00:34 +0000
Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: CTDGg+JjqfzGmqmO4xlzBtMfi3iMFNLkMC+htkLcT4o=)
2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:47:8e:7b:4d:14:b0:d5:93:b8:b1:51:1e:e6:f4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Validity
Not Before: Feb 17 05:00:34 2025 GMT
Not After : Feb 18 05:00:34 2025 GMT
Subject: CN=da3d8c6a771e177a93a27209e0cc64502c2ebc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:d3:05:eb:29:99:ae:70:e1:42:6b:3a:53:
17:59:d0:cf:f7:f8:3a:af:52:7e:89:a4:42:37:2f:
f0:14:13:41:1e:1f:84:f4:66:0e:00:b2:45:b0:26:
fb:ec:6b:bc:a7:3d:f5:d3:3d:e3:42:07:57:19:53:
a3:5a:45:d6:e9:80:af:2a:6f:e3:2b:aa:17:ca:13:
0b:42:2f:b0:1d:26:a3:99:2d:dd:ed:92:b8:b7:58:
c5:27:17:71:e5:0b:5b:61:69:0c:4c:94:0c:82:bc:
bf:4b:5a:77:08:01:ba:a1:b3:88:ba:0e:a0:fb:c5:
7b:62:37:39:8d:17:b5:e6:5e:8d:62:0b:d9:4e:8a:
28:71:37:28:a5:2f:94:d3:10:50:14:f2:49:23:f7:
d9:49:e1:66:dd:6a:02:24:82:c0:2f:ee:b7:1c:79:
af:fb:0b:b2:e1:bc:c4:0d:2e:f0:81:80:df:b1:e1:
53:61:25:5d:09:ee:04:ba:78:db:15:ea:83:4c:56:
bc:8f:25:de:3d:55:57:64:cc:c2:ee:51:c9:84:76:
17:41:cb:f6:a9:9d:03:ff:6f:9a:38:46:f1:26:e4:
f2:51:22:88:72:33:c3:59:8d:89:8e:dd:d1:34:2a:
8d:da:65:7d:bf:69:17:db:21:7a:d6:3b:f9:61:d9:
4f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3D:8C:6A:77:1E:17:7A:93:A2:72:09:E0:CC:64:50:2C:2E:BC:98
X509v3 Authority Key Identifier:
keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a1:3d:d2:5a:7a:14:52:8c:bf:ee:07:07:8b:1a:91:e4:51:
e8:40:09:e5:56:00:d8:5e:a4:f9:6b:ce:db:64:ca:f4:5c:dc:
4d:91:0b:ec:7d:66:88:4b:e4:d1:18:32:09:16:3a:6b:9e:61:
12:7a:aa:82:82:c3:df:1d:f2:03:87:2c:86:28:96:6a:5c:23:
47:1e:9a:9d:65:5c:6f:70:7f:04:ed:66:f1:42:50:75:e6:77:
06:4b:39:23:a2:a6:c7:58:be:cc:88:87:fb:41:52:73:8d:3e:
44:00:d8:7a:cf:ef:4c:ad:2b:db:2b:69:ed:ab:6b:41:14:1b:
7d:43:00:7d:a3:e7:bb:7a:51:6a:3b:79:9d:33:37:86:f1:fa:
3e:fe:11:e7:80:6c:ea:ad:2d:57:47:bc:a8:5f:e1:ff:d5:41:
05:00:08:d5:02:cb:1a:20:57:3d:e0:bd:d0:4a:aa:3f:82:85:
22:cc:1d:22:25:5c:42:53:6f:51:b1:24:8e:19:6b:89:79:3b:
96:a9:48:9c:4e:3b:e1:a6:ba:09:86:71:9e:09:8f:64:6e:75:
95:63:72:ab:e5:10:06:ca:6f:3a:a5:f0:01:9a:ec:c4:12:89:
18:e2:47:f9:96:3b:1b:55:ef:36:05:f5:76:b7:a8:8d:17:57:
fb:b3:4a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUSR457TRSw1ZO4sVEe5vQvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZmQ3ODM2ZDcxMzA4YzQyZDBmOWQxNjhmZmQ0YzU4MTY3
MTQ0NTkwHhcNMjUwMjE3MDUwMDM0WhcNMjUwMjE4MDUwMDM0WjAzMTEwLwYDVQQD
EyhkYTNkOGM2YTc3MWUxNzdhOTNhMjcyMDllMGNjNjQ1MDJjMmViYzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2bTBespma5w4UJrOlMXWdDP9/g6
r1J+iaRCNy/wFBNBHh+E9GYOALJFsCb77Gu8pz310z3jQgdXGVOjWkXW6YCvKm/j
K6oXyhMLQi+wHSajmS3d7ZK4t1jFJxdx5QtbYWkMTJQMgry/S1p3CAG6obOIug6g
+8V7Yjc5jRe15l6NYgvZTooocTcopS+U0xBQFPJJI/fZSeFm3WoCJILAL+63HHmv
+wuy4bzEDS7wgYDfseFTYSVdCe4EunjbFeqDTFa8jyXePVVXZMzC7lHJhHYXQcv2
qZ0D/2+aOEbxJuTyUSKIcjPDWY2Jjt3RNCqN2mV9v2kX2yF61jv5YdlPJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo9jGp3Hhd6k6JyCeDMZFAsLryYMB8GA1UdIwQY
MBaAFKT9eDbXEwjELQ+dFo/9TFgWcURZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMt
OWQxMzBkNDhiZTM0LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9lMzI0OTQtODRlNS00ZDdlLWI3OTMtOWQxMzBkNDhiZTM0
LzEvcFAxNE50Y1RDTVF0RDUwV2pfMU1XQlp4UkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6E90lp6
FFKMv+4HB4sakeRR6EAJ5VYA2F6k+WvO22TK9FzcTZEL7H1miEvk0RgyCRY6a55h
EnqqgoLD3x3yA4cshiiWalwjRx6anWVcb3B/BO1m8UJQdeZ3Bks5I6Kmx1i+zIiH
+0FSc40+RADYes/vTK0r2ytp7atrQRQbfUMAfaPnu3pRajt5nTM3hvH6Pv4R54Bs
6q0tV0e8qF/h/9VBBQAI1QLLGiBXPeC90EqqP4KFIswdIiVcQlNvUbEkjhlriXk7
lqlInE474aa6CYZxngmPZG51lWNyq+UQBspvOqXwAZrsxBKJGOJH+ZY7G1XvNgX1
dreojRdX+7NKmg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:33 2025 by rpki-client