Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier: Muaoz1BG9q7Vs2t2k18EBjaqUVF5vwQsMAaREfGfia8=
Subject key identifier: B2:FB:52:5C:C7:7A:90:96:C8:B6:31:FC:4B:5E:B0:E5:DA:2A:73:03
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial: 019A228990F05A6195E24E6A90DFF496ABAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number: 077E
Signing time: Sun 26 Oct 2025 22:00:32 +0000
Manifest this update: Sun 26 Oct 2025 22:00:32 +0000
Manifest next update: Mon 27 Oct 2025 22:00:32 +0000
Files and hashes: 1: 846C_HHWsmfMuTteTAyqZtSs9uU.roa (hash: tRlhHsbjfBDjcdUQyF9uDZ6h5rAZGUSUYhMVpEGLRx8=)
2: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: eHpHU0GU2R7k4VGi1kI2cSLd5qV1pYiNrfHCy2o1rqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:90:f0:5a:61:95:e2:4e:6a:90:df:f4:96:ab:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
Validity
Not Before: Oct 26 22:00:32 2025 GMT
Not After : Oct 27 22:00:32 2025 GMT
Subject: CN=b2fb525cc77a9096c8b631fc4b5eb0e5da2a7303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:17:51:94:52:06:b2:ee:5a:3d:36:fb:b4:
e5:03:cb:39:eb:f5:36:0d:23:b3:07:d9:27:75:49:
04:7d:0b:fd:bf:d0:e2:ce:ab:b7:cb:ad:b8:3e:e3:
4e:f6:84:65:ac:a8:7a:f7:35:e6:4b:db:78:8c:35:
75:41:79:c9:1f:fb:ba:05:18:c4:df:aa:11:61:6f:
b6:ce:ca:8f:8c:a0:8d:65:0e:49:01:6a:d3:82:f9:
65:71:aa:f8:f1:ef:c6:3b:96:03:a2:ab:84:0d:4b:
58:16:84:be:21:94:f2:92:53:14:95:97:12:71:b4:
2e:9e:1d:d3:83:65:c7:0e:24:0c:d7:6b:08:41:16:
59:e4:2f:e7:62:74:22:39:5e:df:f0:43:1e:1d:45:
cd:07:bb:20:86:66:6a:97:f3:6d:c4:8b:b9:63:d4:
94:b6:f9:a7:18:c0:6b:dc:ec:2a:5c:dc:d0:4a:19:
10:1f:31:ab:57:f6:ca:1e:24:e1:ef:3e:ec:f4:23:
8a:17:eb:3d:29:fb:ad:b0:34:eb:fc:d3:6b:5d:b3:
c5:1a:6f:0b:4f:6d:19:c1:e9:02:b2:7a:81:73:eb:
3a:04:13:b7:d6:67:99:ad:8f:a1:5a:fd:d4:c7:9c:
28:a1:fe:2a:f1:ad:0a:50:b4:51:59:6e:64:52:86:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FB:52:5C:C7:7A:90:96:C8:B6:31:FC:4B:5E:B0:E5:DA:2A:73:03
X509v3 Authority Key Identifier:
keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:9a:04:0f:b2:2f:d7:64:9b:96:05:51:ae:c8:7a:e2:b0:71:
db:2c:c6:1e:d3:b0:ab:2a:8b:80:4c:e9:fe:89:2b:8b:88:29:
c7:19:8b:6d:99:c5:0d:6b:3f:5a:b9:2d:fd:5b:1f:cc:f2:21:
f4:0f:a1:da:15:3c:77:93:03:b0:c4:be:76:4b:9f:70:f8:70:
c6:79:d2:77:3f:87:76:5d:6d:d0:0e:c5:85:bc:ee:45:04:95:
73:ca:1f:c4:aa:e5:93:ca:35:2a:a0:73:57:25:11:ad:27:34:
94:2d:a4:d5:b8:2b:87:cd:b4:c2:fa:bc:b5:e5:be:e4:9a:34:
65:30:ef:56:59:00:fd:bd:4e:dd:91:c2:f8:a0:18:04:3f:0e:
f4:b3:1e:da:fb:50:fe:3f:7d:e6:92:18:5b:2b:bd:0a:f1:a3:
73:74:78:73:b8:eb:e3:5d:06:e1:38:e8:13:c9:a9:c3:70:73:
99:e6:32:93:55:d4:7e:99:cb:90:c2:2e:64:0c:13:7f:14:a0:
8b:52:1f:7d:53:c3:fa:35:83:55:ec:0b:ae:b8:91:b5:89:3b:
bd:8b:f8:a0:37:63:ff:f2:36:9d:45:e4:b6:ba:28:7b:88:a1:
ea:93:ca:2e:9e:fd:24:2a:5c:9b:88:9e:31:66:ed:aa:43:10:
91:7d:b5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 02:07:27 2025 by rpki-client