
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File: _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier: sthxBpmTZGljaifxVusceFYPmpQf8vAt0KDF8Tdk43A=
Subject key identifier: 71:39:7B:74:BD:EB:59:8A:35:71:99:39:44:22:DF:8C:20:3B:99:EF
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer: /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial: 0197B6A1CE9DF5B6EF63ACBB9AEF90E58D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:26 +0000
Manifest this update: Sat 28 Jun 2025 13:02:26 +0000
Manifest next update: Sun 29 Jun 2025 13:02:26 +0000
Files and hashes: 1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=)
2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: DuYK7D7S1zId0/mWXrD1vKbjSPqsyq9Qb9+KNvBMFI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:ce:9d:f5:b6:ef:63:ac:bb:9a:ef:90:e5:8d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Validity
Not Before: Jun 28 13:02:26 2025 GMT
Not After : Jun 29 13:02:26 2025 GMT
Subject: CN=71397b74bdeb598a357199394422df8c203b99ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:0c:94:8a:c5:38:d2:8d:f0:59:75:c0:92:
b0:61:c2:cc:81:de:34:7b:c2:96:30:45:02:13:f0:
8c:d1:6b:21:f2:e2:0b:58:59:bb:59:f1:a9:41:a2:
59:ee:cd:8f:e5:67:50:88:95:b5:e0:e8:cc:f9:4a:
d5:78:2a:90:5b:4d:d3:d9:df:3c:2c:f0:4d:9b:06:
e0:1e:ce:38:73:66:a8:98:03:e3:b7:80:3c:4f:0c:
99:25:60:a3:20:ed:76:35:03:29:ac:98:7e:1c:d0:
4a:33:3f:ba:b0:82:7a:9f:f7:ab:7b:82:e5:42:38:
1d:76:a6:70:bc:89:8c:28:ae:b0:6d:50:a2:98:2e:
69:fd:8e:d3:15:ea:0a:39:4b:e6:ae:a7:18:0b:8e:
20:ba:26:33:4d:eb:37:bb:15:80:31:88:6b:ec:51:
17:80:0b:f6:0a:95:1f:47:f8:b1:c0:42:a0:21:6a:
94:48:c9:0f:91:14:8a:9c:8d:a9:4d:63:1e:e3:0f:
3c:7d:06:02:28:ec:8b:8f:d5:62:51:d7:a8:4f:9f:
d1:a5:9b:e3:b3:05:23:f4:62:73:46:9c:8f:4c:f2:
95:d1:40:62:c9:c0:e3:af:f7:df:23:3d:a5:4d:f0:
db:b5:d5:44:7e:24:8c:ae:f0:7c:e3:4b:10:65:fa:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:39:7B:74:BD:EB:59:8A:35:71:99:39:44:22:DF:8C:20:3B:99:EF
X509v3 Authority Key Identifier:
keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:59:a2:06:f1:6e:b5:43:0e:d9:00:79:dc:bc:14:d9:e5:6d:
71:4c:17:33:cb:c5:c3:1a:20:f5:fc:ca:36:b8:35:d5:03:97:
ad:2b:47:c3:28:89:2a:6f:46:94:1f:86:5f:ff:b9:75:51:66:
93:47:a9:6b:83:e7:dd:bc:e7:08:cc:2c:36:00:c0:2f:fe:20:
06:6a:86:34:cb:ac:83:b2:b0:db:16:3f:b8:15:1c:34:99:be:
66:7c:7e:9e:a4:d4:ab:42:38:c3:90:4c:e8:67:95:bb:75:6b:
4f:9e:ae:2b:e9:dc:41:7b:a9:c9:32:23:3c:64:a3:05:10:40:
5b:f1:f7:3c:e4:fc:0a:c0:e4:12:06:65:f9:b2:94:61:42:67:
42:8d:f6:d5:ca:4c:f0:62:6b:d5:52:9c:ef:0c:0b:04:1b:18:
80:99:a0:77:4e:49:94:22:de:e8:b2:1e:3c:ea:cf:70:05:52:
db:9e:02:2c:61:ce:5e:f7:94:44:e1:62:81:ee:84:99:43:b0:
75:ea:a6:28:49:f8:17:52:f0:25:43:f3:61:d4:8d:f6:ee:16:
ec:92:a3:88:ea:14:aa:3c:6e:d6:35:62:30:0b:59:25:fe:a2:
7b:57:41:27:e7:e0:ca:b1:fd:e4:86:31:f5:cf:de:96:41:69:
e8:8b:c2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:59:15 2025 by rpki-client