Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier: 95+zfg2WdnZ1OjHs38AljEYDQ4uG9NGpwhv5axPDyck=
Subject key identifier: 4E:5B:F3:7D:48:57:1B:0F:C9:B4:1B:21:44:1C:F7:60:C8:21:CF:C7
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial: 0198D65F7DA6FD714B6BC44050B4CAD02442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number: 06D2
Signing time: Sat 23 Aug 2025 10:00:38 +0000
Manifest this update: Sat 23 Aug 2025 10:00:38 +0000
Manifest next update: Sun 24 Aug 2025 10:00:38 +0000
Files and hashes: 1: 846C_HHWsmfMuTteTAyqZtSs9uU.roa (hash: tRlhHsbjfBDjcdUQyF9uDZ6h5rAZGUSUYhMVpEGLRx8=)
2: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: vY+hqadyyqyzjr+cZXJ0FkGhBeErsByNsZow2oG+9Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:7d:a6:fd:71:4b:6b:c4:40:50:b4:ca:d0:24:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
Validity
Not Before: Aug 23 10:00:38 2025 GMT
Not After : Aug 24 10:00:38 2025 GMT
Subject: CN=4e5bf37d48571b0fc9b41b21441cf760c821cfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b6:86:d3:22:42:c6:25:ed:9e:63:f0:ae:a8:
34:1e:e5:b1:3f:56:5c:d6:5c:df:30:86:43:31:0b:
5c:4e:93:da:f7:a0:9d:4d:54:9e:0d:72:4b:b4:6e:
22:be:2d:74:6a:be:22:37:5b:f1:68:35:29:c3:2f:
be:6b:8e:4c:d3:19:9a:d1:2c:ec:b4:76:97:43:4a:
eb:1f:99:88:06:a6:f5:4f:ee:c9:bb:75:d4:67:3b:
8e:62:d3:f8:e2:4f:06:24:52:d5:ac:40:05:94:89:
0e:ac:c5:c3:0b:9a:5f:d7:07:52:13:40:4d:db:5c:
03:6a:05:61:e7:79:1b:c2:af:c0:7c:bc:b1:ec:f1:
03:4f:9c:5b:b3:df:d1:7b:f8:d4:dd:88:d8:94:c0:
23:78:82:59:ad:7d:36:9f:57:3b:19:de:03:e1:f9:
38:37:24:58:c5:9c:a8:df:84:44:02:5a:86:67:98:
b0:4c:c7:1e:9e:70:7a:87:61:cf:fe:ca:d1:c7:e3:
98:e0:f9:c3:bf:3a:e7:cc:16:1d:46:e6:9c:8b:d9:
dd:c9:bb:29:4d:5d:a2:17:8f:2a:a8:c8:ed:19:36:
f3:2a:89:07:7e:86:d8:66:7b:6e:86:7b:eb:d4:b6:
86:df:41:97:a5:79:a0:4f:20:d0:28:54:18:b4:2d:
16:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5B:F3:7D:48:57:1B:0F:C9:B4:1B:21:44:1C:F7:60:C8:21:CF:C7
X509v3 Authority Key Identifier:
keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:77:63:4e:f9:a8:f0:92:5e:9b:9d:41:4b:64:3d:24:a3:00:
f5:68:3a:6e:cf:92:0d:5e:a3:0d:64:b3:cf:04:9b:d2:79:3d:
f3:f1:bd:a9:50:09:6e:7b:c6:84:45:76:0f:3d:ec:44:8e:d0:
de:03:f0:af:6e:63:49:86:16:d6:51:39:68:1d:39:84:bb:67:
6f:c5:ce:c6:94:69:10:cc:75:c3:03:7e:53:e7:a8:86:fd:63:
d7:9e:4a:92:6d:cf:33:0e:fb:62:aa:b5:d7:9a:46:9b:dc:fd:
24:9e:5e:f3:34:61:ce:a8:7e:0b:79:26:d0:b2:e4:52:32:aa:
38:d7:f5:e7:85:a4:7a:5d:36:70:22:18:97:76:20:b4:32:70:
1e:3c:f5:ec:d7:43:9e:0d:6e:95:51:cd:4a:28:5f:67:5e:0f:
df:b8:dd:67:8d:e5:48:8f:30:da:54:87:bd:1b:ca:16:aa:fd:
fe:ca:39:9e:dc:51:22:32:8e:20:7f:ac:f7:99:73:22:e1:58:
8f:ea:03:5f:5f:2d:48:b2:2c:07:26:d1:e2:85:75:c9:fd:0e:
2a:4f:40:9c:b6:05:d1:58:f9:4b:c7:50:4b:a6:84:30:54:81:
ac:ec:96:bd:22:3a:14:64:4e:96:b4:e1:d1:9c:fd:4d:c6:69:
16:b9:b5:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX32m/XFLa8RAULTK0CRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNDNjZjQwZjY5MWYxNGIzNWNhNjU3MDMyOTM0ODAyMDA1
Y2ZhODgwHhcNMjUwODIzMTAwMDM4WhcNMjUwODI0MTAwMDM4WjAzMTEwLwYDVQQD
Eyg0ZTViZjM3ZDQ4NTcxYjBmYzliNDFiMjE0NDFjZjc2MGM4MjFjZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LaG0yJCxiXtnmPwrqg0HuWxP1Zc
1lzfMIZDMQtcTpPa96CdTVSeDXJLtG4ivi10ar4iN1vxaDUpwy++a45M0xma0Szs
tHaXQ0rrH5mIBqb1T+7Ju3XUZzuOYtP44k8GJFLVrEAFlIkOrMXDC5pf1wdSE0BN
21wDagVh53kbwq/AfLyx7PEDT5xbs9/Re/jU3YjYlMAjeIJZrX02n1c7Gd4D4fk4
NyRYxZyo34REAlqGZ5iwTMcennB6h2HP/srRx+OY4PnDvzrnzBYdRuaci9ndybsp
TV2iF48qqMjtGTbzKokHfobYZntuhnvr1LaG30GXpXmgTyDQKFQYtC0WfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5b831IVxsPybQbIUQc92DIIc/HMB8GA1UdIwQY
MBaAFD1Dz0D2kfFLNcplcDKTSAIAXPqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2It
MDdmYjYxNzFmMThmLzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2ItMDdmYjYxNzFmMThm
LzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv3djTvmo
8JJem51BS2Q9JKMA9Wg6bs+SDV6jDWSzzwSb0nk98/G9qVAJbnvGhEV2Dz3sRI7Q
3gPwr25jSYYW1lE5aB05hLtnb8XOxpRpEMx1wwN+U+eohv1j155Kkm3PMw77Yqq1
15pGm9z9JJ5e8zRhzqh+C3km0LLkUjKqONf154Wkel02cCIYl3YgtDJwHjz17NdD
ng1ulVHNSihfZ14P37jdZ43lSI8w2lSHvRvKFqr9/so5ntxRIjKOIH+s95lzIuFY
j+oDX18tSLIsBybR4oV1yf0OKk9AnLYF0Vj5S8dQS6aEMFSBrOyWvSI6FGROlrTh
0Zz9TcZpFrm1DQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:21 2025 by rpki-client