Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File: _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier: LN6Kmup1rR10l9V/8r9LD2T2eH5fpb6hQFfQ7fkeYIc=
Subject key identifier: BC:81:32:F9:A7:21:10:B9:87:06:59:8A:8E:83:83:8E:90:6F:70:5E
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer: /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial: 019A4EF50CB508BD38A4727929D26347666E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=)
2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: sLhvPm5+D//m5AYhlhZeUrDD1Q8KGRy5qkr289+BnXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0c:b5:08:bd:38:a4:72:79:29:d2:63:47:66:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=bc8132f9a72110b98706598a8e83838e906f705e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:01:ad:ab:e3:62:f5:08:e9:93:1a:e0:31:
65:b3:43:97:5b:fa:82:ba:4b:06:8b:cf:23:ee:4b:
37:0e:1a:ec:f9:90:a5:4f:02:37:91:1c:64:4c:66:
b5:d5:18:55:45:4c:41:cb:da:1a:92:b2:20:95:7b:
5a:0c:68:ae:5f:2a:b3:3c:1f:63:ee:c5:87:b0:da:
ad:13:68:b1:ac:c5:4d:86:c6:ab:fe:8a:4e:d0:78:
b5:b5:e6:f0:43:a4:f8:f6:d0:16:bd:2d:58:ec:8d:
70:cf:8d:bf:dd:3b:68:3d:7b:92:f9:99:8f:35:68:
86:d5:74:e2:55:0e:49:98:f0:89:59:38:9e:fc:a1:
74:ac:f7:6e:5a:2b:6d:97:7c:17:99:e3:50:6d:78:
95:78:ad:9d:3d:08:89:d6:7d:0f:98:82:7f:ce:c0:
52:9a:3c:f2:04:51:f2:30:f0:33:ba:e1:6a:6b:57:
ba:07:71:9d:b1:67:f2:2f:1a:48:ac:0a:3f:e6:14:
d1:69:db:5a:72:ed:52:d6:d7:72:25:ce:70:b0:6e:
52:d1:b0:fa:68:86:0f:d8:28:9b:d8:4d:eb:53:83:
32:70:d3:ad:8f:83:59:3e:6d:04:92:5f:9e:38:d0:
01:e3:51:22:c4:c5:52:a7:7c:5c:66:1c:1c:9a:e0:
df:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:81:32:F9:A7:21:10:B9:87:06:59:8A:8E:83:83:8E:90:6F:70:5E
X509v3 Authority Key Identifier:
keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c3:c9:9f:93:53:6b:c6:cb:a6:b1:90:0b:0c:8f:15:4f:35:
59:da:1a:03:f3:c0:6d:32:9c:fb:52:e1:3d:ed:91:d7:2e:7a:
b4:6e:22:99:fe:c1:fc:93:28:3a:39:4b:dc:d6:bc:02:ac:c2:
19:5a:88:df:ca:01:00:09:35:6c:0f:89:ea:50:19:26:b7:f8:
a5:f1:d2:dc:e1:d3:e8:b9:8e:0d:66:23:8f:6b:11:f5:76:02:
2e:00:44:d6:68:ef:9f:ed:2a:f7:93:ea:0f:96:32:0b:13:7b:
09:3a:a4:c3:e6:f5:64:73:b8:16:38:60:78:aa:92:bc:5e:de:
6c:a7:5f:3a:64:74:4c:85:3a:fd:59:5e:85:e3:59:52:86:bb:
3f:c9:7f:35:64:a0:b1:78:cb:df:b2:51:00:e5:7f:9b:30:d3:
79:1d:87:c7:94:5b:43:b4:d8:31:ee:bf:6c:22:04:37:fc:00:
6f:9e:57:d0:2b:5c:7a:da:c5:c2:5b:38:25:d5:ea:5f:bc:2e:
a7:a9:1b:61:30:25:31:7b:09:3e:03:99:d8:84:70:2e:a7:7c:
0f:de:60:19:68:6c:ee:93:1c:aa:99:32:12:5c:36:09:7c:9c:
5f:c2:83:f0:f5:39:66:ce:0e:49:a5:8b:05:2c:a2:ce:82:4b:
b7:e5:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:04 2025 by rpki-client