Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File: _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier: hvJ++qI6yCElavlMGS7qXe82OVle7qYVkDyBiujTwbs=
Subject key identifier: 74:A6:D7:FF:51:DB:D3:A0:27:E7:BD:E2:91:9C:55:BE:A3:31:C0:4A
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer: /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial: 019A71B8EC0419F3E10737E634EFB25446AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:15 +0000
Manifest this update: Tue 11 Nov 2025 07:02:15 +0000
Manifest next update: Wed 12 Nov 2025 07:02:15 +0000
Files and hashes: 1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=)
2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: DPQ7626S3IM9vB4FUAtTkzUM63vCO6iC73H7YQErY4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ec:04:19:f3:e1:07:37:e6:34:ef:b2:54:46:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Validity
Not Before: Nov 11 07:02:15 2025 GMT
Not After : Nov 12 07:02:15 2025 GMT
Subject: CN=74a6d7ff51dbd3a027e7bde2919c55bea331c04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:c6:34:4c:ff:34:62:4b:d7:83:02:83:6e:
ec:6a:d0:72:84:b4:5b:e2:9b:db:8d:6b:7a:de:a6:
f6:58:83:c2:5a:52:47:31:0b:6f:c9:fb:27:98:2a:
d7:82:d9:17:89:8c:50:3b:20:e1:25:d2:e0:80:76:
8f:00:de:4b:d6:ad:a2:26:75:41:5c:85:0e:16:d3:
33:9c:64:8a:34:7e:f0:e5:29:e0:45:0a:56:85:b7:
47:1c:8f:fd:03:b0:36:3f:e5:0a:e5:ea:a8:6b:ee:
c7:ef:d0:f5:14:44:ed:ce:72:4a:bf:dc:7c:42:80:
33:36:77:14:d0:17:05:e5:eb:a3:bd:cc:60:16:01:
2c:df:80:78:c7:04:af:32:0b:1a:96:85:7f:93:5a:
41:c5:4c:52:fa:d4:9f:c1:bd:ec:b5:6c:d7:34:8d:
1a:2c:2e:7e:48:08:db:94:06:e0:b0:56:74:d1:97:
4b:6e:e1:bf:1d:97:8e:8b:3e:e2:33:05:5f:d3:0e:
1c:b2:84:bb:66:ce:b1:7a:4f:10:25:6d:11:7d:c3:
9c:94:73:27:b8:4a:be:c1:b5:23:9a:6e:75:7a:05:
71:3a:90:da:29:ef:23:c1:1e:ab:26:56:da:31:19:
6e:a6:51:d7:51:30:5f:3b:69:55:f1:df:3b:19:14:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A6:D7:FF:51:DB:D3:A0:27:E7:BD:E2:91:9C:55:BE:A3:31:C0:4A
X509v3 Authority Key Identifier:
keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:5a:93:d3:e9:19:21:8a:43:01:38:44:53:2d:c3:f1:be:d3:
e5:47:f0:2a:58:5d:55:a9:de:1d:98:9e:eb:1f:72:ea:07:6b:
54:1d:ad:b3:fd:ec:f1:ce:a0:75:bf:4d:f8:9d:d9:12:12:0f:
fa:43:44:39:3f:1c:2b:0e:22:04:af:d2:7b:2b:fc:0b:f2:ba:
67:aa:4c:85:e5:c8:42:c3:70:d3:05:07:86:19:18:fe:1b:17:
84:9f:0a:57:eb:57:84:31:20:80:b2:f1:09:a8:d5:4b:a3:99:
d7:ce:b9:6c:e1:bf:4e:a6:29:1a:15:e1:af:b2:71:6a:16:c2:
8f:b7:9a:20:4d:27:0e:9f:d8:4e:d8:f8:ed:af:f2:99:36:09:
20:ac:65:f2:c2:4f:a2:aa:8a:af:7f:9b:48:00:49:2c:6d:7b:
94:fd:8b:19:00:24:78:b7:e0:91:db:be:9a:0e:6c:10:a4:99:
c3:ae:aa:1b:ac:e4:27:f1:6f:01:a8:cb:4e:4f:88:99:99:a7:
60:bd:30:d0:ce:97:19:40:ac:dc:c1:1a:d5:02:11:47:e9:bd:
6c:15:21:84:de:2d:32:f9:54:e5:df:ef:3b:83:b9:d1:07:68:
8e:d7:7e:16:e0:53:2d:c5:98:49:12:13:d2:d6:6e:e7:0b:84:
4e:f0:27:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuOwEGfPhBzfmNO+yVEauMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZjlhZGE5YjI4YjY5OTdmZGExYzQ2OGE4ZDg2OTYzODQw
N2EwYmIwHhcNMjUxMTExMDcwMjE1WhcNMjUxMTEyMDcwMjE1WjAzMTEwLwYDVQQD
Eyg3NGE2ZDdmZjUxZGJkM2EwMjdlN2JkZTI5MTljNTViZWEzMzFjMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjbGNEz/NGJL14MCg27satByhLRb
4pvbjWt63qb2WIPCWlJHMQtvyfsnmCrXgtkXiYxQOyDhJdLggHaPAN5L1q2iJnVB
XIUOFtMznGSKNH7w5SngRQpWhbdHHI/9A7A2P+UK5eqoa+7H79D1FETtznJKv9x8
QoAzNncU0BcF5eujvcxgFgEs34B4xwSvMgsaloV/k1pBxUxS+tSfwb3stWzXNI0a
LC5+SAjblAbgsFZ00ZdLbuG/HZeOiz7iMwVf0w4csoS7Zs6xek8QJW0RfcOclHMn
uEq+wbUjmm51egVxOpDaKe8jwR6rJlbaMRluplHXUTBfO2lV8d87GRSCAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSm1/9R29OgJ+e94pGcVb6jMcBKMB8GA1UdIwQY
MBaAFPz5ramyi2mX/aHEaKjYaWOEB6C7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YTk2ZDEtY2YxYi00ZjQ3LTkzZWUt
MjU5ZmUxNzUwZWViLzEvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83YTk2ZDEtY2YxYi00ZjQ3LTkzZWUtMjU5ZmUxNzUwZWVi
LzEvX1BtdHFiS0xhWmY5b2NSb3FOaHBZNFFIb0xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwVqT0+kZ
IYpDAThEUy3D8b7T5UfwKlhdVaneHZie6x9y6gdrVB2ts/3s8c6gdb9N+J3ZEhIP
+kNEOT8cKw4iBK/Seyv8C/K6Z6pMheXIQsNw0wUHhhkY/hsXhJ8KV+tXhDEggLLx
CajVS6OZ1865bOG/TqYpGhXhr7JxahbCj7eaIE0nDp/YTtj47a/ymTYJIKxl8sJP
oqqKr3+bSABJLG17lP2LGQAkeLfgkdu+mg5sEKSZw66qG6zkJ/FvAajLTk+ImZmn
YL0w0M6XGUCs3MEa1QIRR+m9bBUhhN4tMvlU5d/vO4O50Qdojtd+FuBTLcWYSRIT
0tZu5wuETvAnFA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:48 2025 by rpki-client