Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier: UzVgodiHvjRQP7X8AxZtYJeTOGSJLUk+txlpgfcoQKg=
Subject key identifier: B7:4D:02:3F:4B:DE:24:35:F1:3A:D5:BE:30:D2:13:9C:52:4D:16:22
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer: /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial: 019A7293A3C21C5564BCDC516FDDDB27C387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:09 +0000
Manifest this update: Tue 11 Nov 2025 11:01:09 +0000
Manifest next update: Wed 12 Nov 2025 11:01:09 +0000
Files and hashes: 1: 3Gi7K5otbF8YAPl6ViRUI8XiRNU.roa (hash: aFHAU+eeRwSzWLG9T2U4VKkPQW4ZT7Ys728VZHAX80s=)
2: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: QqaALFWpePxvZWl9XVO9YAyNTjqb/3XS5eFvgm+tAqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a3:c2:1c:55:64:bc:dc:51:6f:dd:db:27:c3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Validity
Not Before: Nov 11 11:01:09 2025 GMT
Not After : Nov 12 11:01:09 2025 GMT
Subject: CN=b74d023f4bde2435f13ad5be30d2139c524d1622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:90:2e:1f:a1:fa:05:54:04:4d:53:b2:c1:
9b:b7:7b:0d:65:62:97:16:cd:9d:81:4a:84:bd:97:
e7:e4:d1:1e:06:f4:db:9d:67:49:47:ab:b9:01:fe:
09:7c:f7:6a:e3:9d:33:f9:a2:34:f4:5c:1e:5b:28:
76:2c:37:38:ae:d9:ef:69:02:9b:db:4a:92:dc:ab:
97:d6:29:0c:b2:de:d2:86:62:ea:c7:4d:ec:8a:06:
15:26:2f:1b:d6:4c:69:71:2e:fa:43:32:c0:79:6c:
bc:56:ca:49:9a:40:86:86:b5:0f:6c:43:a9:ad:df:
9d:91:63:c9:30:d1:31:4a:31:8d:19:29:86:e3:42:
7f:5e:ec:f5:54:d2:1a:aa:67:01:80:7f:02:e6:63:
08:80:0b:dd:cc:9d:7d:0b:2f:be:ae:c8:38:57:b2:
6e:92:0d:9c:d7:3e:56:a5:6e:9f:81:c6:de:e6:33:
4c:65:22:b0:4a:d4:01:21:be:73:9f:31:60:b9:1c:
ed:7e:4b:9e:3c:f6:12:5b:8f:c7:9d:ef:54:af:ff:
c8:7e:04:7c:5d:b3:b1:be:83:0c:3e:24:95:c5:8e:
a8:a2:da:a9:6c:94:80:f5:7b:83:73:13:0d:2a:b9:
31:b1:36:3b:9b:e8:60:4d:02:38:ff:e1:18:c4:53:
12:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4D:02:3F:4B:DE:24:35:F1:3A:D5:BE:30:D2:13:9C:52:4D:16:22
X509v3 Authority Key Identifier:
keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c2:dc:f9:f5:93:93:17:90:d8:6d:8e:8c:64:04:35:f2:77:
9c:7d:ac:84:4f:1a:c5:ab:3b:44:ce:5d:8b:3f:7c:23:cb:d4:
0a:38:d3:a9:2b:ed:c2:e6:72:ae:bf:7a:a7:29:9e:4d:95:e5:
e5:fd:58:3a:cc:ea:a9:41:c0:26:8f:0b:73:24:78:e7:eb:39:
1b:0e:b5:c7:10:a0:30:e8:89:c9:94:82:87:df:d6:9d:e0:18:
c3:c8:ca:3d:08:05:33:9b:f3:b2:d4:69:b1:76:a9:03:35:33:
40:44:a2:2b:31:03:6c:67:2c:05:70:90:8c:e6:63:8c:70:82:
ad:e6:ad:f2:d5:07:d8:f3:5c:ab:24:31:0e:46:ed:6d:aa:7e:
5a:34:c0:60:5c:84:75:df:09:4c:4f:56:6d:7a:e4:b5:0c:38:
c2:cc:10:e8:8a:1a:40:e8:c0:2d:72:c6:55:5e:3c:ab:cb:c3:
41:75:70:5d:3e:b8:c0:4e:34:b1:3f:6e:88:93:f9:27:ff:05:
e0:d1:77:72:cb:5d:72:ff:53:0d:48:94:0c:db:d5:97:55:4c:
7b:74:13:74:ea:63:86:31:8e:0e:a7:2d:72:f9:c2:10:06:ee:
b5:a6:a0:54:84:eb:45:c1:af:14:98:89:30:06:c2:7b:12:86:
57:ca:09:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:21 2025 by rpki-client