Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: J2pNchGBA1audsGsX3hcRJbHBEfzTQX38k8HaMicxIQ=
Subject key identifier: 6D:5D:13:58:5E:56:08:41:A8:6E:0A:D5:F3:F8:A5:25:1B:38:D9:40
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 019A22C0A0BBB8B80834EF79DAB7018C78BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 14B5
Signing time: Sun 26 Oct 2025 23:00:40 +0000
Manifest this update: Sun 26 Oct 2025 23:00:40 +0000
Manifest next update: Mon 27 Oct 2025 23:00:40 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: As2I0NrsRtSE+aDX0CjWLKDmJetEv7ydG05ItWaeqbg=)
2: XOdvLraV2qR3zq976W5c3J9zPFs.roa (hash: bgSJB/XwiNZRaO9bNHldSaleJhQexHKIWnqzJX66Ook=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:a0:bb:b8:b8:08:34:ef:79:da:b7:01:8c:78:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Oct 26 23:00:40 2025 GMT
Not After : Oct 27 23:00:40 2025 GMT
Subject: CN=6d5d13585e560841a86e0ad5f3f8a5251b38d940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:28:88:9a:4e:d7:4f:05:5b:01:bd:e7:63:
d5:25:92:cb:c2:79:a2:13:ad:30:8d:73:df:2a:7a:
21:39:7e:87:bf:5f:c4:3c:ef:f2:85:ca:52:e7:24:
b0:61:61:ee:a9:05:9a:65:26:e8:13:7d:bb:d1:02:
dd:6b:10:0f:ce:31:fe:f6:37:95:96:55:4c:4a:00:
c3:08:1f:95:75:2a:c0:e3:cb:70:bb:a5:22:60:76:
cc:25:d1:87:31:9c:67:85:3a:ed:65:c2:38:43:fc:
ac:f4:a8:41:f7:a5:15:94:c0:0a:58:4d:23:1a:6e:
af:88:68:c4:df:82:cc:73:78:a3:03:e3:45:31:d4:
d4:89:4e:65:25:e3:d4:4f:1c:b8:9a:db:36:c7:53:
01:a9:0d:7e:db:67:d5:6e:98:74:b0:34:d6:d1:e2:
02:f4:dc:14:1a:36:33:a5:ab:c3:3c:b8:4f:21:04:
41:e6:06:cc:9c:a7:4c:c5:ab:d1:86:d4:07:e8:43:
b2:bc:a5:45:00:0c:27:c3:1a:49:86:87:ca:80:4a:
8c:27:37:ad:6c:dd:e0:71:4a:c1:c3:20:e2:9b:54:
b6:64:20:14:d1:8d:d3:8e:87:d7:e5:4d:c0:37:6f:
37:03:47:b1:4c:74:19:7f:94:fd:ef:7e:50:9f:3f:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5D:13:58:5E:56:08:41:A8:6E:0A:D5:F3:F8:A5:25:1B:38:D9:40
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:5d:8d:2e:ac:9c:2e:7d:12:a7:b6:8e:03:af:77:fc:3d:72:
d3:56:50:59:1e:11:f3:e2:97:0e:38:4e:c1:d1:32:f8:f0:ec:
9c:a7:5d:b0:f1:bb:62:9a:cf:6a:b7:65:5e:9a:4a:c4:61:8d:
04:8f:99:ac:0d:36:3b:99:ba:f1:de:d7:81:80:de:0d:f8:fb:
18:7a:95:53:e5:73:2f:4d:53:21:a7:27:94:a1:f2:0f:8d:23:
5f:14:f4:52:93:04:93:67:c3:fd:eb:bf:a2:44:5f:e2:0c:0c:
e9:9e:12:a9:85:62:d3:b5:a9:8d:f5:eb:b8:ef:38:ba:20:9b:
bd:70:30:09:77:ea:83:5d:71:61:04:c3:92:42:70:7e:f5:23:
e6:cb:cf:bb:62:94:98:f1:48:af:7c:94:ce:dc:5c:40:fd:c0:
85:7a:42:43:9f:50:c5:ce:22:af:49:11:80:b4:c3:82:1a:34:
b0:cc:01:07:00:8f:be:ef:50:54:24:5b:07:7c:12:15:c4:6c:
ce:2d:9d:07:e8:44:45:49:2b:c9:18:34:fb:a9:cd:41:d7:31:
c2:63:a2:ae:16:80:fc:cc:b9:8f:d7:d1:8e:e5:c7:6a:86:eb:
03:a1:6d:6a:68:27:d4:46:09:ae:20:68:bd:58:5d:72:a2:33:
72:f2:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:33:42 2025 by rpki-client