Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
File: PUM0D60kZGXejmFNA5VjppllfY0.mft (raw, json)
Hash identifier: dea5XELBYIpfMzUAf4lo/MTPGTn1IjYVeC7SnNI4bgA=
Subject key identifier: 1F:9F:67:E1:40:73:77:C7:91:FA:D3:8C:F2:11:4A:C6:0A:D5:BB:9A
Authority key identifier: 3D:43:34:0F:AD:24:64:65:DE:8E:61:4D:03:95:63:A6:99:65:7D:8D
Certificate issuer: /CN=3d43340fad246465de8e614d039563a699657d8d
Certificate serial: 01984588C6DE645A2D645F315A562AEED7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
Manifest number: 8F
Signing time: Sat 26 Jul 2025 07:00:48 +0000
Manifest this update: Sat 26 Jul 2025 07:00:48 +0000
Manifest next update: Sun 27 Jul 2025 07:00:48 +0000
Files and hashes: 1: PUM0D60kZGXejmFNA5VjppllfY0.crl (hash: rKziDvipYGZ7TZPjDl1/j1CvMxZW619lx1oa7RZ5SVk=)
2: wtKFjn0luOKNhpCBH0YWKLpKHKU.roa (hash: Z6YfBfkr08FSM8yJ/BnA5aNSDpKZqhovD8OdV3xTXpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:c6:de:64:5a:2d:64:5f:31:5a:56:2a:ee:d7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43340fad246465de8e614d039563a699657d8d
Validity
Not Before: Jul 26 07:00:48 2025 GMT
Not After : Jul 27 07:00:48 2025 GMT
Subject: CN=1f9f67e1407377c791fad38cf2114ac60ad5bb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:3b:6f:d9:4c:69:49:e8:c1:ff:3f:41:cf:
23:a4:3c:b8:70:1a:57:a2:79:97:aa:f2:71:6d:ac:
c2:92:31:49:8c:13:25:76:63:04:b2:12:b7:1a:cf:
40:70:f8:e6:37:3e:64:d4:66:1a:40:49:40:08:35:
5c:b8:72:ec:27:4e:54:5a:4b:cd:f7:a5:d7:a3:7e:
4a:b2:c5:7a:6e:c8:9a:95:8c:05:38:cb:fc:7c:6e:
cb:b5:d9:53:9e:63:0e:c6:ca:d1:7c:d3:25:43:5a:
6f:fe:b6:fc:a7:b5:c7:b4:60:66:ca:f1:12:dd:cd:
db:3b:d8:6a:c7:58:19:40:64:af:39:bc:55:46:9d:
fa:c7:9e:80:69:5e:eb:48:58:86:55:c4:64:0a:fb:
24:15:f5:08:ee:d3:e6:c5:e9:27:be:8f:00:95:6a:
1a:ba:40:37:20:51:d5:3b:84:07:c8:03:a0:06:0f:
fb:8d:a6:df:13:8a:22:0c:5b:8c:2b:77:14:fa:6c:
22:62:6e:90:1c:3f:a6:be:86:c7:8a:bf:6f:ff:bf:
6a:f7:44:3d:71:94:83:37:3f:d8:c0:59:bc:db:6a:
95:1b:78:9b:50:a0:a0:f8:43:d1:5f:bf:08:a9:81:
24:4f:0b:5f:7f:df:67:07:02:34:ec:2d:70:52:05:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9F:67:E1:40:73:77:C7:91:FA:D3:8C:F2:11:4A:C6:0A:D5:BB:9A
X509v3 Authority Key Identifier:
keyid:3D:43:34:0F:AD:24:64:65:DE:8E:61:4D:03:95:63:A6:99:65:7D:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUM0D60kZGXejmFNA5VjppllfY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6ce922-cdce-4c7a-b346-a437ce892841/1/PUM0D60kZGXejmFNA5VjppllfY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:39:de:74:bd:1c:5f:c9:a5:40:c5:1c:f5:01:e3:5d:d4:52:
c6:56:4d:98:6d:15:b5:79:96:3a:b5:ea:1a:dc:87:a1:a2:00:
68:17:28:d5:dd:cd:34:b0:e6:e8:4e:8b:f9:80:90:4f:70:a8:
5c:b0:5a:24:c3:e5:63:ef:8b:cf:16:12:d6:e5:a6:8f:c3:bd:
9e:49:d4:47:06:8f:e4:26:0b:83:52:f3:2b:17:e5:46:f0:db:
f5:9c:f2:9f:64:67:9c:7b:c7:ba:e4:30:34:8a:4b:7d:ca:3b:
f5:59:ec:a3:15:5d:99:a5:35:66:bb:a8:29:45:bd:43:fd:4d:
f8:d5:0c:50:23:73:81:b1:76:1f:e0:f1:50:53:9b:d3:3c:bc:
80:94:b3:1b:79:2e:67:42:09:4c:79:11:ed:44:35:4b:64:a8:
ca:b5:19:3f:fb:a8:87:c3:21:33:f8:eb:58:33:32:76:cc:f9:
a9:9d:99:77:81:82:a7:a9:71:b6:6a:9f:9e:82:b7:19:4e:f6:
b7:04:b7:07:1b:60:12:34:62:a5:07:32:81:5d:6f:f1:73:29:
a9:7c:68:4d:2c:3d:8d:65:a5:b0:8a:fc:fd:c1:13:61:c5:92:
39:10:52:73:11:97:5c:ef:83:58:f6:9a:2b:df:f9:a2:4b:d9:
6c:47:7e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:48:19 2025 by rpki-client