Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier: QgMw0la16AaWbFeKxbEavANOGMFcZnXp8WakoODiUvM=
Subject key identifier: 49:2A:A6:FB:2C:5C:15:D8:34:30:36:EC:C6:B2:5E:C5:79:ED:CF:25
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 0199221F304C83A0D23FFEA4050F77FDDFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number: EA
Signing time: Sun 07 Sep 2025 03:01:33 +0000
Manifest this update: Sun 07 Sep 2025 03:01:33 +0000
Manifest next update: Mon 08 Sep 2025 03:01:33 +0000
Files and hashes: 1: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: UFod1JO1q8mLDxNr96RmB7C3HaDFXQGHOvtkFOlGJv8=)
2: mTUK0_cMYs_FlNXkmrwcNZ-A9WU.roa (hash: vFAKDgKtbcMdQ9fcPL7goyOKxpH3iASXmuoUDIoP9TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:30:4c:83:a0:d2:3f:fe:a4:05:0f:77:fd:df:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: Sep 7 03:01:33 2025 GMT
Not After : Sep 8 03:01:33 2025 GMT
Subject: CN=492aa6fb2c5c15d8343036ecc6b25ec579edcf25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:94:22:5f:bf:5a:a4:2e:d3:bf:2c:07:b3:
e2:b8:57:eb:79:a7:c8:5b:05:44:30:7d:fa:17:1b:
80:f1:f7:f4:dc:73:27:ef:da:ec:5b:41:fa:89:ad:
39:ca:7b:ca:82:d5:4c:5a:a0:bb:b2:44:09:b1:34:
45:44:f2:fb:9c:4c:73:37:19:55:38:7b:10:71:69:
a3:34:28:11:67:3d:69:7d:46:75:56:02:b7:c8:31:
b4:5e:99:03:96:1c:31:4c:de:97:cb:4c:29:74:98:
0d:a3:06:f1:97:38:8d:6c:f1:94:ac:d0:91:74:78:
ce:ac:2c:4b:e7:3a:50:91:9c:20:eb:0a:9a:e8:7a:
75:69:14:d0:88:35:dc:5d:c1:de:3b:a4:d6:49:34:
3c:5a:2e:9e:e6:3f:a4:b6:ce:30:58:e9:57:61:c7:
fb:0d:66:a5:c6:a6:40:da:76:70:34:bc:6e:2b:5a:
af:11:f0:cb:bc:c2:c3:68:1d:de:99:9f:b6:75:4e:
8b:53:32:ef:b8:fe:5b:20:1e:ae:25:ee:23:9f:c6:
66:06:40:90:1d:18:b5:5a:ac:45:bc:c0:86:c5:1e:
26:e2:2a:2e:17:b0:85:01:42:1e:84:5e:23:b1:46:
ad:f4:1b:7d:dd:b5:aa:04:7b:1e:2e:b0:38:9f:9d:
26:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2A:A6:FB:2C:5C:15:D8:34:30:36:EC:C6:B2:5E:C5:79:ED:CF:25
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b3:6e:83:59:19:23:48:c1:e8:cd:d5:8e:20:c0:ae:1a:47:
8a:10:a6:8c:7b:c8:5e:7c:97:23:5b:7a:8c:d0:c2:d3:8a:f6:
d6:0c:1c:0e:bb:a6:65:0a:e5:f3:6d:db:bc:7e:cd:b7:ae:94:
f9:14:63:ac:01:ef:eb:b0:0d:83:6f:69:f8:02:b7:fe:50:df:
e9:04:65:d4:d4:48:cb:1d:d1:90:55:0e:bc:fe:c1:df:de:ad:
88:3f:a5:c1:1b:cf:2c:18:e4:22:2b:a2:0c:4a:7c:45:d5:28:
d1:48:02:46:b9:d9:c3:26:05:df:7d:6e:98:cd:c6:78:4b:5c:
b1:fe:ff:8e:2e:21:d3:20:38:e3:b8:81:5b:79:5a:38:28:2a:
c4:91:81:36:2d:8d:f0:41:b1:09:56:73:4f:d6:f8:5b:ab:c7:
55:e8:b4:34:1d:3e:82:bf:82:8a:16:10:61:00:ad:b3:03:49:
5a:8c:aa:06:5f:a8:ab:7e:89:a5:af:15:35:ef:ad:71:03:fe:
c8:fb:f4:9b:63:f2:1d:c7:f3:6d:f8:56:63:bb:21:bd:c0:11:
fc:46:db:3b:5b:0f:c9:c6:47:3d:0d:0d:41:44:fd:02:cb:92:
81:31:44:57:ea:42:d4:18:7f:65:c8:cc:ca:ef:94:6e:17:dd:
83:c1:bb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:02 2025 by rpki-client