Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
File: _PmtqbKLaZf9ocRoqNhpY4QHoLs.mft (raw, json)
Hash identifier: i2guR+0lbv12uVKduxSXTDYJke+4p6OOWsBEfn9Tlwk=
Subject key identifier: 67:8C:4D:9A:36:41:01:43:BF:E4:FE:49:C2:7A:BA:01:E6:9C:1C:C0
Authority key identifier: FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
Certificate issuer: /CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Certificate serial: 0197485568C3957290C546A6C60B94FD8F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 03:00:46 +0000
Manifest this update: Sat 07 Jun 2025 03:00:46 +0000
Manifest next update: Sun 08 Jun 2025 03:00:46 +0000
Files and hashes: 1: Le3v2H0wAOnsDtbYpl9GWGKprW8.roa (hash: 3pH+MsH30Kao3JM7UhwFK9NiYfes8F3zq57Gt61L8AQ=)
2: _PmtqbKLaZf9ocRoqNhpY4QHoLs.crl (hash: aJudEVZpWMYKZwdiJuie2DU28P4F97lsABzqce/ZEn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:68:c3:95:72:90:c5:46:a6:c6:0b:94:fd:8f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf9ada9b28b6997fda1c468a8d869638407a0bb
Validity
Not Before: Jun 7 03:00:46 2025 GMT
Not After : Jun 8 03:00:46 2025 GMT
Subject: CN=678c4d9a36410143bfe4fe49c27aba01e69c1cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:31:9d:5d:24:23:46:eb:40:9a:90:00:2d:
29:d4:ef:0b:bf:01:81:e7:1f:58:38:99:fe:f4:88:
fa:a1:02:92:ea:68:19:71:27:f1:dc:22:60:e6:97:
4f:f2:e6:18:73:03:13:44:5c:7e:97:d6:26:28:1e:
c8:88:f7:ed:10:d6:13:2f:59:3b:c4:20:ad:61:3c:
99:f0:f0:c4:bc:36:3a:aa:29:17:5c:7e:9c:f4:fe:
f3:b1:dd:77:f3:77:92:e3:62:56:d8:ac:2e:43:1b:
28:d7:76:ad:07:a6:48:46:5a:20:41:36:c3:27:21:
2b:4c:44:7c:12:86:d7:37:88:79:38:d1:9e:b0:05:
af:fd:ff:8b:5e:58:ec:76:91:84:ee:64:c5:23:97:
c2:3f:07:73:e9:e4:cc:20:31:e9:c4:5f:a4:1e:86:
56:dd:39:7c:7f:47:f8:48:fd:56:33:36:71:c2:c1:
bd:cc:2a:73:23:3b:b7:03:4e:2c:21:6d:b4:6a:d0:
bc:03:50:1d:1e:fb:b8:19:c3:4d:28:2e:a0:c1:80:
18:87:ed:8d:66:cc:1e:13:6d:9b:7a:51:f1:00:07:
d5:f6:e8:95:2a:fe:02:0f:7b:d6:87:e4:d9:72:97:
c2:73:5a:e2:71:e8:89:97:18:bf:96:97:c6:a7:da:
dd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8C:4D:9A:36:41:01:43:BF:E4:FE:49:C2:7A:BA:01:E6:9C:1C:C0
X509v3 Authority Key Identifier:
keyid:FC:F9:AD:A9:B2:8B:69:97:FD:A1:C4:68:A8:D8:69:63:84:07:A0:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PmtqbKLaZf9ocRoqNhpY4QHoLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7a96d1-cf1b-4f47-93ee-259fe1750eeb/1/_PmtqbKLaZf9ocRoqNhpY4QHoLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:13:9b:09:38:04:1a:d6:d3:b5:be:a4:3e:fb:ef:38:4e:e7:
8e:8f:76:9a:7a:c9:88:0b:57:bb:03:fc:75:74:c4:b5:32:c2:
7d:84:a3:34:40:47:b6:11:04:b4:88:08:f1:f4:0b:aa:63:4a:
ba:32:a6:4a:14:6d:13:c2:a4:3e:53:70:8a:b8:88:89:21:9d:
b6:9c:26:ba:52:0d:c2:c5:b5:25:d5:de:30:f5:f2:65:df:7f:
d9:7f:88:ef:43:8d:3c:42:f0:b6:e2:50:77:76:93:50:99:53:
97:9f:5a:9e:f2:a5:80:79:aa:1e:50:08:49:38:7c:21:dd:28:
e4:46:12:f5:d3:e2:9d:fc:67:9b:79:65:02:fe:0a:47:f1:ec:
f5:ae:2c:16:86:fa:0b:ef:5c:fd:d8:21:d0:17:0e:5d:e6:13:
48:67:e4:91:d3:1a:e1:88:aa:f9:41:67:70:2d:3a:24:11:d1:
a7:80:55:b8:85:cf:97:c3:9f:dc:ce:e2:a3:e4:25:c3:eb:8f:
9d:d2:03:ba:0e:fe:d3:ad:9e:28:0e:ac:ab:85:b6:64:f5:cd:
ad:41:23:85:f3:18:16:c5:45:1c:9b:2e:19:a7:3e:4c:51:c1:
58:42:a6:08:d0:5b:dd:97:ed:08:ed:78:85:f3:a9:39:27:e1:
f6:0d:a9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:12 2025 by rpki-client