Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File: _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier: X6rAATuIZZA2B3jmRM1dmG/q3rRjOq0o1kS7jxXL/aI=
Subject key identifier: 96:ED:3B:55:89:37:DD:C6:B1:0B:DD:FB:68:37:93:72:A5:BE:C2:B5
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer: /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial: 0199FBEBF4F7BA09DB95A68647C081502795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:48 +0000
Manifest this update: Sun 19 Oct 2025 10:02:48 +0000
Manifest next update: Mon 20 Oct 2025 10:02:48 +0000
Files and hashes: 1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=)
2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: WiprQFSGkcbnxQSwZTDzYfHg3MnUFOf5+CwhvYUWezE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f4:f7:ba:09:db:95:a6:86:47:c0:81:50:27:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Validity
Not Before: Oct 19 10:02:48 2025 GMT
Not After : Oct 20 10:02:48 2025 GMT
Subject: CN=96ed3b558937ddc6b10bddfb68379372a5bec2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:91:35:b8:60:ff:42:66:a4:d8:9f:7c:ef:
8d:7f:6a:00:1c:7a:b7:d9:ab:53:f2:0d:79:c0:d3:
f4:ba:c0:de:4e:b5:0a:32:39:f3:f5:06:d7:5e:d0:
00:74:7f:0b:0b:79:d3:65:d5:c2:5c:88:7f:26:e9:
33:51:22:6c:78:3e:8f:c5:75:4e:97:79:d9:31:48:
3e:25:f8:b6:7f:73:d6:68:40:ac:fd:6c:b5:e4:46:
7d:7f:78:54:c9:69:34:5e:d5:ac:66:35:0e:59:fe:
e6:b9:c0:44:4c:8f:86:91:cb:1a:9a:f1:ea:30:55:
42:93:61:58:5d:0a:b3:a2:40:a6:27:67:39:fb:87:
06:27:50:46:ef:16:b9:5f:a4:c3:e4:cf:b2:d7:6e:
a3:e3:d6:de:f3:06:2c:fc:76:90:54:63:a1:8e:0a:
2f:20:81:ad:a0:1b:ab:8c:af:db:db:33:e4:a6:ca:
dc:ad:b2:02:85:ab:c3:dd:60:c4:23:97:7f:87:8f:
1d:0d:ac:ea:97:31:d3:21:3d:a6:3f:d4:46:a0:5e:
d6:61:95:ba:1a:9d:7c:28:dc:2a:08:d2:3e:68:e1:
6d:fb:4a:bb:96:9c:4d:02:1d:f6:a0:25:71:6e:83:
13:bb:05:ac:6e:1a:c4:46:b2:d9:67:b7:f6:8c:72:
d5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:ED:3B:55:89:37:DD:C6:B1:0B:DD:FB:68:37:93:72:A5:BE:C2:B5
X509v3 Authority Key Identifier:
keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c7:a4:7e:24:e4:c5:a1:4c:d4:c0:d6:73:eb:70:2b:0e:2a:
65:2c:7d:b9:3b:de:07:e5:42:f8:e6:87:45:d5:02:60:23:71:
ab:2f:4d:d0:a3:fa:c5:2c:92:ae:3a:22:f3:51:8a:62:eb:a7:
24:0b:e5:33:b1:f4:be:2d:50:b2:50:3c:36:24:17:77:30:63:
20:26:f8:82:9b:06:64:3c:cb:26:f5:13:b4:be:3f:e0:d5:85:
16:4a:57:1f:a5:c4:8b:9a:72:e3:0b:a7:6d:8f:83:29:0f:65:
89:cd:bf:72:f4:6c:fc:29:6e:0c:c6:e8:03:19:4f:bc:ae:ad:
ec:49:86:42:ed:bc:2d:e1:2f:05:b8:49:87:28:9e:5b:e4:02:
fd:57:81:86:28:e4:7c:19:0c:fd:9a:91:ac:35:6d:e8:b5:90:
90:87:e5:48:48:df:f9:e7:95:1b:50:5b:d4:d3:6c:ea:0a:b3:
9b:19:3a:69:ff:5a:b2:62:6a:ce:6d:5c:df:01:47:77:b3:ac:
8b:f7:6d:a8:e0:b9:be:fb:d8:bf:87:97:9c:cd:30:67:30:89:
b2:ca:a5:84:e1:26:4c:1d:fe:e8:a8:8c:34:5a:8d:f5:a5:04:
e2:02:30:28:6a:98:a9:e0:b1:98:d4:20:8f:e3:8e:2c:20:38:
23:47:21:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:04 2025 by rpki-client