Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
File: pP14NtcTCMQtD50Wj_1MWBZxRFk.mft (raw, json)
Hash identifier: OrvjDoz48t+oZXvl1NMCT+ZTMh0ZJp4/dms/+j3LQ7c=
Subject key identifier: 21:4D:66:2B:28:03:00:B0:CB:0E:D7:E3:72:56:BA:F1:9F:B1:9C:4B
Authority key identifier: A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
Certificate issuer: /CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Certificate serial: 01974A0CB524AD54C32263CD4C8AD22588E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
Manifest number: 10A6
Signing time: Sat 07 Jun 2025 11:00:36 +0000
Manifest this update: Sat 07 Jun 2025 11:00:36 +0000
Manifest next update: Sun 08 Jun 2025 11:00:36 +0000
Files and hashes: 1: pP14NtcTCMQtD50Wj_1MWBZxRFk.crl (hash: T3q3XP38l7zXPGjVgBZL3aGgx89ld4cBX+Q96E5uQns=)
2: wmP5bMOGyarS60pVYUn3YSNOkzU.roa (hash: dH7mhtw2CqlUgKyAjfzIndFqDCSJYD0W6bKpYCAp4x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:b5:24:ad:54:c3:22:63:cd:4c:8a:d2:25:88:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4fd7836d71308c42d0f9d168ffd4c5816714459
Validity
Not Before: Jun 7 11:00:36 2025 GMT
Not After : Jun 8 11:00:36 2025 GMT
Subject: CN=214d662b280300b0cb0ed7e37256baf19fb19c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:5a:ba:5d:50:83:82:f7:3f:07:19:29:dd:
4d:10:2e:5b:bb:9f:fb:5f:8a:c7:07:fe:ed:03:da:
c4:51:82:ce:4e:a8:4c:27:a9:c1:c5:8a:9e:05:f1:
2c:b7:2f:b4:69:1b:7a:be:64:a5:6e:6c:91:6b:a5:
6e:48:c4:19:7e:a4:5e:36:25:84:b8:ba:fc:34:9b:
cd:cf:bc:36:12:21:bb:c3:36:4e:36:38:31:aa:96:
c3:c3:5d:57:b6:ba:59:36:08:69:62:f9:79:c3:35:
ff:1e:21:45:5a:1d:a6:b6:0e:26:14:b6:cd:9f:e3:
3f:c5:6e:1e:01:74:ab:92:36:48:62:69:56:8d:1a:
99:e0:e6:e7:0c:18:22:74:68:d8:25:7e:5c:32:a1:
20:a3:56:0b:c8:83:af:88:03:61:04:03:76:eb:53:
b0:ad:33:0b:2b:b0:3e:a5:ad:56:2f:4a:61:5e:6f:
9d:9b:c5:99:5f:c9:79:52:c0:48:59:c5:43:1b:65:
58:80:86:5c:94:43:38:01:2b:ce:23:5f:13:b3:10:
37:60:c0:7f:84:68:04:51:59:27:df:ee:e7:99:01:
73:ef:cc:ab:5b:18:bd:0b:fa:db:75:34:49:b0:03:
8d:f6:33:f6:2f:94:31:c6:44:fd:3e:b3:0b:c5:7d:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4D:66:2B:28:03:00:B0:CB:0E:D7:E3:72:56:BA:F1:9F:B1:9C:4B
X509v3 Authority Key Identifier:
keyid:A4:FD:78:36:D7:13:08:C4:2D:0F:9D:16:8F:FD:4C:58:16:71:44:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pP14NtcTCMQtD50Wj_1MWBZxRFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e32494-84e5-4d7e-b793-9d130d48be34/1/pP14NtcTCMQtD50Wj_1MWBZxRFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:7b:db:e4:33:ac:31:e9:c8:ad:67:9a:30:31:a7:b0:0a:27:
b0:6d:ee:17:c7:ad:6c:87:ce:70:a3:e4:12:20:3c:83:57:b7:
27:df:03:d0:6a:4d:19:69:fd:c3:d4:8c:ac:c3:55:15:91:56:
20:01:53:5d:b1:30:63:4e:d4:14:ef:c9:3b:ff:2f:d4:2b:c2:
3f:a8:e2:8b:4e:91:23:f4:b5:ac:d2:0a:04:aa:ae:ea:89:66:
cb:97:de:2d:35:1c:48:6e:b5:91:f9:5d:7d:8d:37:3a:24:b3:
48:43:54:4d:c1:5b:23:cb:3b:f7:ef:13:92:0f:cb:d4:e0:b3:
41:bf:39:ab:45:d5:e0:45:9d:e5:86:0f:fd:fe:85:e7:1d:4f:
6a:81:5d:74:71:9b:56:c9:32:90:69:64:7c:ad:89:42:0b:31:
d0:80:dc:91:08:00:20:d5:ca:fa:69:7a:40:f3:a5:57:b2:f0:
3d:ab:a3:7d:f7:9f:a7:9b:1d:c1:37:8a:b7:57:a5:30:91:a7:
a5:8f:01:4d:72:f6:9f:a7:8d:b8:b7:d6:82:b0:8e:83:da:74:
58:c6:bf:e6:8f:d7:44:4c:07:af:16:70:68:d2:89:b6:86:32:
49:06:2f:85:24:18:3e:7b:75:6d:0f:8a:8b:9b:fd:ae:da:b9:
5e:40:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:12:30 2025 by rpki-client