Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier: KEGhsFpWFiZdfEzKxxcchSqpEUc8NDVed9cbhWOQdj4=
Subject key identifier: 8B:5B:F6:58:E3:38:B2:6C:03:B0:04:BF:4D:CE:67:CE:3A:BB:F2:98
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 019A7226683AC7CFF4E844627A1C5467FB43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number: 0198
Signing time: Tue 11 Nov 2025 09:01:50 +0000
Manifest this update: Tue 11 Nov 2025 09:01:50 +0000
Manifest next update: Wed 12 Nov 2025 09:01:50 +0000
Files and hashes: 1: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: VPGsIz0hhhF6Gu/K0JTbREAqffDTHBo7mw8hMMnuCdg=)
2: mTUK0_cMYs_FlNXkmrwcNZ-A9WU.roa (hash: vFAKDgKtbcMdQ9fcPL7goyOKxpH3iASXmuoUDIoP9TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:68:3a:c7:cf:f4:e8:44:62:7a:1c:54:67:fb:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: Nov 11 09:01:50 2025 GMT
Not After : Nov 12 09:01:50 2025 GMT
Subject: CN=8b5bf658e338b26c03b004bf4dce67ce3abbf298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:65:25:75:4f:09:d5:46:0e:69:cf:28:c0:
b1:51:9e:66:bf:2f:ac:d8:4d:92:3b:59:42:96:b0:
0b:02:52:23:7b:61:fa:56:c9:82:13:07:9d:cd:ee:
e3:cc:d7:fb:60:9b:78:e4:36:7c:8f:6e:3e:4a:b3:
3d:c1:39:56:3e:c3:09:74:16:b6:ad:e8:88:34:e4:
84:27:68:46:bb:4f:29:86:a9:38:3a:cb:ef:95:bd:
a8:9a:cd:ae:37:11:c7:13:2b:9b:54:1a:4d:d7:71:
c3:a4:e2:49:6a:b8:d8:5a:44:58:08:8f:ce:a6:e8:
e4:78:6f:e0:d3:15:40:b3:59:c8:dc:9b:c5:b9:65:
0c:e3:a9:29:af:f0:8d:ab:cd:76:5e:95:20:ef:46:
15:34:a4:92:ed:8a:dc:12:29:53:1a:62:42:52:c5:
61:f2:44:15:a9:e7:46:41:21:25:f0:18:83:9e:64:
51:c0:b5:94:cd:e2:2c:d9:68:c7:16:04:66:3d:70:
94:cf:83:15:c0:76:3c:f1:a5:71:a9:33:68:23:20:
58:01:a0:92:06:5a:56:6f:86:01:fd:19:1a:8e:39:
b4:7c:b1:78:88:e7:5c:d8:ac:8b:44:8f:6b:7b:2c:
fb:cd:03:01:df:c2:bc:30:66:ff:d9:19:90:59:24:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5B:F6:58:E3:38:B2:6C:03:B0:04:BF:4D:CE:67:CE:3A:BB:F2:98
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:80:ed:01:fc:c1:c2:80:90:5a:5f:af:fc:1d:4e:8e:f9:51:
15:ad:8f:92:f9:0c:98:1f:99:03:f7:a2:d1:b7:8d:29:66:1b:
64:6b:ee:1e:8d:85:a5:93:29:24:1a:ff:6a:c8:7b:d9:30:6c:
0f:ea:fb:e1:60:57:e5:08:94:f0:50:76:f5:31:19:75:9f:8f:
ba:a3:64:1d:70:6c:ed:e3:00:30:4a:18:18:e7:ad:ec:de:c2:
0d:d1:ff:dd:81:bc:f5:57:c1:a6:7f:b5:d9:06:c4:43:93:bd:
9d:6d:ef:b3:80:74:75:df:0f:95:3d:90:4d:6c:4b:a7:98:d9:
1e:90:6b:b1:9c:4c:79:4d:82:f3:f5:49:a4:8c:dc:84:ba:89:
c7:ea:cb:9d:c2:3c:ec:09:b7:80:e7:a9:5e:3b:30:0a:cc:0c:
19:1b:8d:3a:c6:c9:3c:8a:9d:25:b6:4c:c3:15:17:1b:a0:de:
cf:49:07:d7:cc:90:fd:4c:96:40:08:7c:05:cd:18:b6:45:39:
78:b2:53:f1:34:d0:0e:a3:7d:f3:38:9d:c4:82:d6:b1:92:73:
72:85:93:eb:8e:ba:ce:74:e9:83:4d:fb:ce:dd:8a:71:d2:9b:
f1:58:68:d1:b7:a1:4a:c3:74:23:89:d3:6f:b5:7c:6f:92:89:
97:41:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:38 2025 by rpki-client