
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File: _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier: IsIehwe/7xduNwFFNpgIXC24KLkJdrqMRtJMWfOMUBE=
Subject key identifier: D4:F0:32:52:91:FF:D2:20:09:FF:CE:7F:53:89:21:F5:1F:CB:28:EF
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer: /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial: 019873E25DE188151EFA328FEB4B45657E2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:11 +0000
Manifest this update: Mon 04 Aug 2025 07:01:11 +0000
Manifest next update: Tue 05 Aug 2025 07:01:11 +0000
Files and hashes: 1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=)
2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: 9TEKWbRavFwrV5A4AQ3jq2FhSNv40z32V5b51sMbVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:5d:e1:88:15:1e:fa:32:8f:eb:4b:45:65:7e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Validity
Not Before: Aug 4 07:01:11 2025 GMT
Not After : Aug 5 07:01:11 2025 GMT
Subject: CN=d4f0325291ffd22009ffce7f538921f51fcb28ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:5d:40:12:3f:b1:56:42:da:05:2f:57:cf:
f6:c2:b9:65:ad:c0:38:19:11:5e:3f:7b:de:00:ae:
0c:31:b8:20:bc:90:89:82:58:e4:59:ca:c8:37:73:
92:0f:2e:0a:9d:9f:b4:8c:a2:0b:09:77:ae:8f:9a:
70:3a:be:b8:3c:34:c6:ba:0d:7a:5d:ae:ec:87:3d:
83:5a:07:95:da:b5:55:ec:27:dc:f5:41:e0:d2:33:
cb:ba:b8:ba:3d:de:6a:69:7c:86:57:83:c1:03:e1:
18:ba:11:e3:ca:a5:61:57:8e:ff:8e:c1:ad:75:47:
a1:62:18:45:51:6f:57:31:d3:49:3d:8e:2f:2d:d6:
82:76:5f:4d:14:c3:6e:2a:97:24:c1:13:12:6b:94:
b6:27:6b:24:78:82:08:57:e7:bc:c4:98:ac:ed:31:
e9:be:18:8d:dc:72:cd:f9:00:55:2f:8c:cb:e7:70:
62:d7:16:7c:c4:6a:3e:08:db:ef:f3:77:7b:9b:64:
74:ce:f6:68:6f:52:48:18:04:43:3d:a7:30:4a:92:
c2:96:86:ae:26:b4:e0:17:a5:5b:43:ee:fb:f4:bc:
e3:2d:37:77:6c:69:54:ab:04:56:49:92:2e:a1:1d:
7a:01:86:7f:80:44:30:61:c0:60:d5:f9:e3:ca:40:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F0:32:52:91:FF:D2:20:09:FF:CE:7F:53:89:21:F5:1F:CB:28:EF
X509v3 Authority Key Identifier:
keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:18:1e:c7:db:67:11:e1:6f:61:95:b8:63:b0:78:1a:a5:3e:
31:9b:72:f4:d8:00:ce:e3:55:ac:9f:3e:10:9f:0a:be:be:a4:
0c:07:25:d8:63:2c:e6:66:f9:25:fd:09:32:11:f3:ce:6e:a4:
16:e5:50:03:ad:c5:29:9f:c6:a4:5d:8c:84:c7:07:42:05:3f:
e1:84:7f:52:77:1e:46:0f:58:7f:66:6b:de:d7:9f:5b:d8:ce:
ca:ee:30:22:e5:47:2c:5f:e6:72:0d:76:bc:6a:4b:60:ba:30:
66:d1:3c:4a:cf:cd:2c:1f:54:f2:c8:6d:20:26:81:54:ff:1d:
40:cd:af:b5:f3:3f:99:d5:ad:51:e0:c8:66:fa:7a:71:43:5b:
34:50:17:d3:ae:84:99:05:38:68:4f:1a:e0:ee:b2:b2:ca:ed:
f1:87:5d:87:2e:71:ca:f5:8b:62:95:ca:8a:76:f4:47:1a:07:
30:72:a7:fc:a1:f1:ea:5e:6a:15:d7:39:d6:15:d7:9e:3c:44:
8f:f1:c6:43:2a:d0:e2:32:6b:f7:02:72:bb:df:63:aa:f5:22:
46:bb:66:23:cb:9d:80:67:f1:ff:33:e6:6b:1f:e7:98:aa:e7:
8d:a4:8d:50:d5:02:0d:ba:fc:42:cb:31:0c:b6:a2:40:7b:fb:
9c:bb:3d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:23 2025 by rpki-client