Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: swXhKYqYNIhz7ShTi9sckpUR4js9+f1IOBs7a0TyNHo=
Subject key identifier: 61:A3:D9:04:A3:C1:55:81:A2:5C:E4:76:16:BC:07:A6:EE:A4:34:71
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 01974AB1C00CAB9F75AF0D3C48AD0625526D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 133C
Signing time: Sat 07 Jun 2025 14:00:52 +0000
Manifest this update: Sat 07 Jun 2025 14:00:52 +0000
Manifest next update: Sun 08 Jun 2025 14:00:52 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: sj+LWMyJtUprJWj5rY7oZ5qqH6WnxeZXFlQZSigfvPI=)
2: XOdvLraV2qR3zq976W5c3J9zPFs.roa (hash: bgSJB/XwiNZRaO9bNHldSaleJhQexHKIWnqzJX66Ook=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:c0:0c:ab:9f:75:af:0d:3c:48:ad:06:25:52:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Jun 7 14:00:52 2025 GMT
Not After : Jun 8 14:00:52 2025 GMT
Subject: CN=61a3d904a3c15581a25ce47616bc07a6eea43471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:38:f4:2e:e4:7f:a5:a1:f1:c7:ac:5d:16:
5e:fb:8c:ad:d5:71:f0:86:ce:38:90:d3:ee:fa:78:
ce:10:50:a0:59:e2:2c:ea:30:d7:e6:10:3a:f6:32:
e2:90:77:27:11:cb:a1:89:48:e5:eb:ce:1d:6e:04:
0d:79:74:b0:61:95:81:cc:a5:5c:28:df:9a:f8:39:
f6:69:a4:47:db:98:3e:12:19:1e:0f:02:4b:22:94:
91:6d:89:58:1e:73:ac:34:ad:1b:44:9b:ff:27:40:
6b:98:78:e8:74:c4:35:ca:c7:83:d9:af:5c:f5:7b:
e0:a0:3c:a7:4a:06:8e:ba:56:63:a3:f7:1a:40:55:
8f:34:a6:5c:f1:87:a7:a0:ee:09:54:ae:b5:8c:be:
2b:8f:d0:72:1a:eb:a1:fe:43:e1:f0:75:34:53:59:
e8:10:3c:e0:9e:f0:21:3c:d3:96:bc:aa:a4:fa:8e:
78:45:81:21:5c:ef:f6:c6:15:d5:1f:f0:30:2b:43:
72:14:ef:0c:89:72:da:c7:f0:3c:56:5c:28:f4:01:
2b:f7:c5:4c:d5:b8:28:de:f6:e9:c8:eb:ec:28:49:
e2:6d:88:bc:9e:51:96:bc:77:f9:5f:98:36:57:7e:
d7:03:51:78:a1:1e:17:81:f0:12:c4:e7:51:e3:a6:
c8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A3:D9:04:A3:C1:55:81:A2:5C:E4:76:16:BC:07:A6:EE:A4:34:71
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c6:9a:80:bf:a1:23:37:84:0b:cc:cc:08:b8:90:1c:5c:63:
51:b4:80:a4:38:b5:1c:d6:0f:17:10:5b:aa:b2:92:bb:b3:f5:
64:d4:c3:20:99:80:21:b6:f3:e8:e4:d8:9a:15:6a:63:52:27:
c4:f9:97:48:66:4f:f9:dc:37:a5:73:e9:1e:7c:fa:cf:88:63:
70:80:2f:e8:0a:7d:43:50:12:12:00:fe:ae:b9:1b:61:6f:a8:
04:71:18:49:37:33:d3:d0:f0:cc:0d:77:f2:57:c5:ab:ed:4c:
c0:70:86:59:ae:ad:45:ad:6b:61:3d:c2:c4:38:8c:35:4f:6d:
4a:ca:d2:4e:60:10:73:e3:e0:a2:00:95:10:e7:bd:bc:0d:b6:
b8:50:9e:94:95:e7:0d:03:15:ca:31:ad:66:38:b6:fe:3b:6b:
2d:e8:e9:3d:38:dc:63:7c:cf:db:c2:50:19:f1:59:41:59:13:
dd:a4:82:f0:75:51:af:e6:a6:71:75:be:84:eb:72:10:c7:b7:
b7:14:2d:2c:ab:5d:cd:ff:ec:dd:a0:07:d8:36:d5:7b:b6:9c:
7b:54:6c:02:92:ed:c2:be:aa:9d:0b:9d:3b:03:3b:2a:20:21:
d6:c3:ba:9c:36:58:66:4c:23:9b:6f:f3:54:d6:10:b5:61:90:
5b:86:89:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKscAMq591rw08SK0GJVJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTkzZWI3ZDRiNWJhZmY3MjA2ODU1YjE0ZTBlZTU4NjEx
M2QwOWYwHhcNMjUwNjA3MTQwMDUyWhcNMjUwNjA4MTQwMDUyWjAzMTEwLwYDVQQD
Eyg2MWEzZDkwNGEzYzE1NTgxYTI1Y2U0NzYxNmJjMDdhNmVlYTQzNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtQ49C7kf6Wh8cesXRZe+4yt1XHw
hs44kNPu+njOEFCgWeIs6jDX5hA69jLikHcnEcuhiUjl684dbgQNeXSwYZWBzKVc
KN+a+Dn2aaRH25g+EhkeDwJLIpSRbYlYHnOsNK0bRJv/J0BrmHjodMQ1yseD2a9c
9XvgoDynSgaOulZjo/caQFWPNKZc8YenoO4JVK61jL4rj9ByGuuh/kPh8HU0U1no
EDzgnvAhPNOWvKqk+o54RYEhXO/2xhXVH/AwK0NyFO8MiXLax/A8Vlwo9AEr98VM
1bgo3vbpyOvsKEnibYi8nlGWvHf5X5g2V37XA1F4oR4XgfASxOdR46bIMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGGj2QSjwVWBolzkdha8B6bupDRxMB8GA1UdIwQY
MBaAFD7pPrfUtbr/cgaFWxTg7lhhE9CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjct
OThkOTA0NjY5NGU3LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjctOThkOTA0NjY5NGU3
LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcaagL+h
IzeEC8zMCLiQHFxjUbSApDi1HNYPFxBbqrKSu7P1ZNTDIJmAIbbz6OTYmhVqY1In
xPmXSGZP+dw3pXPpHnz6z4hjcIAv6Ap9Q1ASEgD+rrkbYW+oBHEYSTcz09DwzA13
8lfFq+1MwHCGWa6tRa1rYT3CxDiMNU9tSsrSTmAQc+PgogCVEOe9vA22uFCelJXn
DQMVyjGtZji2/jtrLejpPTjcY3zP28JQGfFZQVkT3aSC8HVRr+amcXW+hOtyEMe3
txQtLKtdzf/s3aAH2DbVe7ace1RsApLtwr6qnQudOwM7KiAh1sO6nDZYZkwjm2/z
VNYQtWGQW4aJ9Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:36 2025 by rpki-client