Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier: BGpYYEJ/MhIM+P+BPuMoZV2kvEVubnr8oopRmmzoxoc=
Subject key identifier: 2B:09:FC:72:58:BD:54:B6:FC:D4:0B:6B:46:0D:28:3F:0B:61:A3:09
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial: 01984589935BD948A7CC69A03500858431B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number: 0687
Signing time: Sat 26 Jul 2025 07:01:40 +0000
Manifest this update: Sat 26 Jul 2025 07:01:40 +0000
Manifest next update: Sun 27 Jul 2025 07:01:40 +0000
Files and hashes: 1: 846C_HHWsmfMuTteTAyqZtSs9uU.roa (hash: tRlhHsbjfBDjcdUQyF9uDZ6h5rAZGUSUYhMVpEGLRx8=)
2: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: BRkNOQru7godIWmA/k6HFWHGgfM5XWID/whQApfi8l0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:93:5b:d9:48:a7:cc:69:a0:35:00:85:84:31:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
Validity
Not Before: Jul 26 07:01:40 2025 GMT
Not After : Jul 27 07:01:40 2025 GMT
Subject: CN=2b09fc7258bd54b6fcd40b6b460d283f0b61a309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:d9:51:42:91:26:69:17:c3:46:4a:26:d7:
8a:6d:1d:a3:67:4b:73:b4:c8:de:86:0a:fb:7e:8a:
bd:c3:4a:f7:cc:ff:56:32:38:f7:ac:5c:68:64:23:
79:d6:bc:d3:16:31:21:c1:ea:23:2c:bb:fe:c7:10:
78:9c:e0:45:8b:03:87:d4:39:0d:f5:0c:29:63:dd:
b9:e0:e3:e9:89:ce:fc:9b:3b:2e:f0:cc:9d:c5:49:
5f:e6:35:73:ac:48:97:b5:97:c0:9b:ad:92:e6:f4:
c7:52:6e:ab:b8:17:81:cb:a9:00:5a:c2:76:d6:6f:
c3:80:a0:77:68:9a:84:dd:9e:d2:24:39:6c:c7:69:
14:cb:cd:03:4b:05:64:7b:e3:83:6a:42:e3:b7:a6:
98:ab:98:12:48:6f:01:a9:b8:4d:9a:ee:ba:ab:98:
66:81:06:1d:08:b3:e0:b8:b4:7e:03:55:f9:65:9c:
d5:e7:0b:6e:23:58:6e:92:b3:01:ac:dc:78:12:ce:
aa:30:44:06:37:3d:49:25:17:19:ba:50:45:4f:f8:
09:33:b8:fa:d5:75:6e:89:57:97:da:fa:80:66:ab:
26:b6:4e:40:d7:9d:c1:47:10:67:0c:b4:99:fb:3b:
db:2f:3a:cf:d2:81:09:a8:d3:6d:28:22:e8:10:3e:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:09:FC:72:58:BD:54:B6:FC:D4:0B:6B:46:0D:28:3F:0B:61:A3:09
X509v3 Authority Key Identifier:
keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6a:4e:05:bc:4f:06:22:7b:00:46:01:26:99:e9:06:cd:79:
0f:92:3b:1d:93:17:4d:b6:1d:5f:51:3a:bf:bc:9b:8f:bf:dd:
e4:f7:06:82:6c:48:23:2a:ed:ff:dc:93:66:5e:7a:47:09:22:
eb:cd:6f:26:90:49:32:c1:77:82:34:96:ef:bb:ac:67:e7:85:
65:b9:1e:28:6e:f6:dc:fa:38:92:17:73:1f:e2:4a:54:d1:ef:
15:9d:6f:59:06:2a:33:ea:49:96:35:5d:ea:95:0e:01:ca:b4:
ea:49:11:b6:c8:f5:22:c3:43:c6:7a:da:88:b0:ce:0f:66:12:
af:a5:2a:e3:9f:fe:67:f6:5b:b7:5a:51:8b:b0:8b:df:72:e0:
eb:16:40:da:0a:b3:e4:75:b9:99:2a:b0:1e:15:bd:d2:3d:15:
2b:50:80:77:bb:52:5d:39:ae:10:01:47:b4:0c:9b:0e:16:44:
61:43:41:af:4c:9a:e7:33:e8:24:fd:3f:a9:01:ad:47:2f:1b:
37:53:a5:4d:56:09:30:6d:be:d7:8e:1e:39:5b:85:5f:87:e2:
70:d3:b2:4d:48:15:69:2c:ff:0e:fa:56:69:6e:85:56:31:f7:
fd:68:06:21:21:bf:1d:87:60:64:ae:d0:64:b1:2c:24:f6:10:
73:46:d2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:26:46 2025 by rpki-client