Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: dBIHGrFEd89uM0dNTs+qgW7+FIAtw95SonRXTw7hbaw=
Subject key identifier: 02:6C:99:7B:D0:8F:0E:CC:6C:60:BA:3E:54:E0:8B:EA:D9:91:49:9E
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 019935377F99A65DE5E1885143C728B031A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 143A
Signing time: Wed 10 Sep 2025 20:00:53 +0000
Manifest this update: Wed 10 Sep 2025 20:00:53 +0000
Manifest next update: Thu 11 Sep 2025 20:00:53 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: 3o+8XyDH4ULNNNCBakM59bjr8gLJf8Xcmjla/dFb94c=)
2: XOdvLraV2qR3zq976W5c3J9zPFs.roa (hash: bgSJB/XwiNZRaO9bNHldSaleJhQexHKIWnqzJX66Ook=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:7f:99:a6:5d:e5:e1:88:51:43:c7:28:b0:31:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Sep 10 20:00:53 2025 GMT
Not After : Sep 11 20:00:53 2025 GMT
Subject: CN=026c997bd08f0ecc6c60ba3e54e08bead991499e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9e:96:83:a1:bb:7c:d8:fb:7c:12:79:7f:ef:
12:07:7d:62:74:77:ee:f6:ea:9f:ad:bd:40:c6:a3:
bf:9b:49:61:3d:e5:9c:89:2e:3e:70:82:d8:47:d0:
4d:ee:7f:29:70:e6:ba:c8:14:9a:fa:53:48:ae:5b:
47:34:6c:6d:6a:49:fd:ee:d3:18:8f:c9:1f:4c:ab:
ed:68:47:7d:26:17:7c:ae:77:5e:aa:2b:47:70:39:
06:8b:b3:18:5c:92:86:fd:15:d6:f7:d5:0e:61:dc:
55:66:ee:d2:fb:51:b3:05:24:54:29:4f:67:a1:dc:
e6:ee:d9:29:bc:f2:a2:a1:8d:bc:0b:e3:cb:25:1d:
c8:37:2a:f5:85:0e:1f:e5:6b:65:53:f5:9c:9f:fd:
4f:ca:20:01:3a:78:1a:95:af:e8:01:39:6a:7b:4c:
6a:48:9e:3c:cc:0d:5f:3a:31:73:be:16:f5:ed:ae:
33:2e:f2:2c:ab:72:f0:68:c4:a0:74:5f:3f:1a:16:
a0:88:9c:32:f7:05:a3:7c:b6:9e:f4:b1:a9:4d:df:
e3:77:18:be:69:f2:9a:22:19:82:23:83:00:5b:71:
cd:bb:d6:61:ac:4b:f1:86:6c:fc:63:39:ce:1f:c1:
db:1e:ed:b6:02:86:7b:e2:b5:02:fb:34:0b:1f:43:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6C:99:7B:D0:8F:0E:CC:6C:60:BA:3E:54:E0:8B:EA:D9:91:49:9E
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:61:e3:8c:5a:0f:c7:40:30:e0:cb:92:ac:e4:2f:f5:9c:94:
79:fb:40:48:dd:09:ac:42:aa:f7:72:83:4e:61:21:58:0f:e6:
ac:bf:ae:79:ce:07:bc:41:d5:81:72:0f:7e:8c:dd:80:f7:2e:
47:e5:cd:c4:24:99:e8:2d:cd:67:14:69:46:f1:9b:3d:ee:60:
01:49:ec:ca:39:91:d4:59:43:95:08:d8:30:b6:03:ed:b7:77:
1a:3f:80:61:93:9d:bd:20:7e:80:8d:ab:d0:23:5b:b2:e3:7c:
ff:e0:f5:49:78:e4:2e:ca:20:41:3d:cc:89:84:56:41:b0:eb:
cc:01:6d:bc:95:db:64:41:e6:b4:10:ec:f1:15:3c:15:e7:99:
d5:db:2e:93:9d:84:81:3c:88:9d:42:28:39:1b:c9:f4:63:62:
da:13:1c:f5:1e:ff:47:74:12:89:09:c8:73:80:36:41:d8:2f:
2e:3a:4b:d4:7a:c3:35:bc:50:45:21:07:73:36:d6:dd:da:3f:
9b:74:bb:e6:55:8b:f1:9a:08:31:84:93:50:1f:db:fb:28:75:
f8:74:3c:f3:26:d1:a7:1f:dd:71:44:52:b5:38:1d:0c:7b:4c:
d5:1b:43:85:ff:a3:2d:a0:65:9e:e9:c3:b6:14:17:0f:4d:c4:
1f:29:7a:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1N3+Zpl3l4YhRQ8cosDGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTkzZWI3ZDRiNWJhZmY3MjA2ODU1YjE0ZTBlZTU4NjEx
M2QwOWYwHhcNMjUwOTEwMjAwMDUzWhcNMjUwOTExMjAwMDUzWjAzMTEwLwYDVQQD
EygwMjZjOTk3YmQwOGYwZWNjNmM2MGJhM2U1NGUwOGJlYWQ5OTE0OTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6p6Wg6G7fNj7fBJ5f+8SB31idHfu
9uqfrb1AxqO/m0lhPeWciS4+cILYR9BN7n8pcOa6yBSa+lNIrltHNGxtakn97tMY
j8kfTKvtaEd9Jhd8rndeqitHcDkGi7MYXJKG/RXW99UOYdxVZu7S+1GzBSRUKU9n
odzm7tkpvPKioY28C+PLJR3INyr1hQ4f5WtlU/Wcn/1PyiABOngala/oATlqe0xq
SJ48zA1fOjFzvhb17a4zLvIsq3LwaMSgdF8/GhagiJwy9wWjfLae9LGpTd/jdxi+
afKaIhmCI4MAW3HNu9ZhrEvxhmz8YznOH8HbHu22AoZ74rUC+zQLH0PjcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJsmXvQjw7MbGC6PlTgi+rZkUmeMB8GA1UdIwQY
MBaAFD7pPrfUtbr/cgaFWxTg7lhhE9CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjct
OThkOTA0NjY5NGU3LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjctOThkOTA0NjY5NGU3
LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmHjjFoP
x0Aw4MuSrOQv9ZyUeftASN0JrEKq93KDTmEhWA/mrL+uec4HvEHVgXIPfozdgPcu
R+XNxCSZ6C3NZxRpRvGbPe5gAUnsyjmR1FlDlQjYMLYD7bd3Gj+AYZOdvSB+gI2r
0CNbsuN8/+D1SXjkLsogQT3MiYRWQbDrzAFtvJXbZEHmtBDs8RU8FeeZ1dsuk52E
gTyInUIoORvJ9GNi2hMc9R7/R3QSiQnIc4A2QdgvLjpL1HrDNbxQRSEHczbW3do/
m3S75lWL8ZoIMYSTUB/b+yh1+HQ88ybRpx/dcURStTgdDHtM1RtDhf+jLaBlnunD
thQXD03EHyl6qA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 03:43:15 2025 by rpki-client