Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier: AtJorHMFAgzIDAipUjDQrmA0WwIuIx1AAbziEbS3pt4=
Subject key identifier: 13:94:C1:56:D3:51:EB:23:79:3F:E3:76:F6:B8:F1:6C:60:CF:2B:C5
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial: 01992F368DF8C55232977740969742E72EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number: 0700
Signing time: Tue 09 Sep 2025 16:02:08 +0000
Manifest this update: Tue 09 Sep 2025 16:02:08 +0000
Manifest next update: Wed 10 Sep 2025 16:02:08 +0000
Files and hashes: 1: 846C_HHWsmfMuTteTAyqZtSs9uU.roa (hash: tRlhHsbjfBDjcdUQyF9uDZ6h5rAZGUSUYhMVpEGLRx8=)
2: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: +Vl5kpNG14Y5urfOfy6HmuEsVSpIXx12lMGoZs1gs3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:8d:f8:c5:52:32:97:77:40:96:97:42:e7:2e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
Validity
Not Before: Sep 9 16:02:08 2025 GMT
Not After : Sep 10 16:02:08 2025 GMT
Subject: CN=1394c156d351eb23793fe376f6b8f16c60cf2bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:b7:b0:e7:ad:f8:17:72:78:d4:0b:bd:a5:
b5:e4:37:75:8f:d8:b9:87:a9:ba:9a:85:74:9b:44:
07:b2:fd:7a:9f:a9:fe:1b:5a:22:5d:2c:99:38:b3:
05:71:ee:ed:8f:fd:5e:63:4a:74:c1:66:8d:9b:bb:
6c:91:2e:70:f7:f7:51:b6:69:25:91:c0:6e:d2:cd:
a8:c5:0f:61:c5:54:a8:46:9f:ed:40:79:fe:27:04:
42:18:a6:f6:d9:9d:3f:58:f6:56:a1:22:4f:24:41:
2b:1b:a3:97:7b:5e:e6:89:a6:47:db:d3:73:94:ed:
55:5e:29:50:00:04:09:47:48:1e:ce:62:d2:f1:53:
6f:28:f8:c6:bc:87:16:bb:e7:92:b3:d6:0d:07:38:
6f:1d:c6:72:0a:7d:4b:07:8c:1a:cb:07:c0:f6:c2:
50:61:ea:ce:03:c0:99:a9:e3:8d:4e:9a:a0:28:4f:
9e:1f:78:44:83:2c:07:c4:d7:e1:d7:87:be:81:82:
00:45:ce:a1:16:bb:e3:54:9a:f7:27:29:64:31:f4:
04:f9:cc:46:54:8a:15:40:1f:34:ea:1f:67:f4:df:
80:17:1a:73:15:a6:34:f8:2a:28:33:94:f9:21:44:
3c:f8:a3:ab:cd:6e:bf:cf:b5:35:11:10:72:1c:96:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:94:C1:56:D3:51:EB:23:79:3F:E3:76:F6:B8:F1:6C:60:CF:2B:C5
X509v3 Authority Key Identifier:
keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:4f:51:ac:e8:d3:ae:c9:af:c5:e6:c9:95:60:e9:d2:51:58:
fc:cd:10:67:2a:10:e1:ee:a7:be:24:cf:b8:c7:6f:74:ba:4d:
40:a1:0c:0f:61:d7:de:0b:78:e0:f9:f2:c2:86:dc:44:f0:39:
f0:68:71:76:b0:bf:cd:b9:82:cf:be:74:cf:79:b3:b4:11:19:
34:b1:d5:c3:1d:f2:89:42:20:3a:2b:c8:d8:7c:bd:bc:46:4d:
52:4b:c7:60:97:54:d0:4d:93:dc:c4:e2:ec:15:8b:0f:36:dc:
a1:66:85:8d:a4:d5:82:9a:55:4a:8d:3c:5a:50:d7:d3:e3:04:
b6:e8:2a:e2:1d:ec:ff:53:c9:ab:d7:e8:a7:4f:6d:89:8e:d8:
25:af:32:6e:ba:6b:0c:8c:66:71:f5:03:11:f6:9b:65:2b:df:
6c:60:42:b2:ae:79:28:e0:c8:5e:c8:0a:4b:92:76:53:fd:56:
4a:ff:ef:1e:bd:f7:3c:31:5e:f2:b9:6a:35:de:2d:42:39:5d:
38:b1:c8:4a:7e:af:f9:de:7c:e8:aa:23:a9:bb:d2:4a:7c:c3:
33:49:2f:25:8f:31:9c:08:f7:ff:e4:f1:50:5a:9c:cc:d4:9a:
5a:a4:75:05:f8:c8:59:a3:75:a6:db:3c:45:cd:8c:26:e8:c7:
a7:64:a0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:33:38 2025 by rpki-client