Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier: QV6J+Ph77R/XrwwKDTBO7Ig+XcBvybtyfIZzN4KxNMw=
Subject key identifier: 8B:FA:10:68:EA:DD:69:A3:8E:1C:3D:72:E4:6E:38:41:E7:CF:44:A7
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 0199FC58CB1DD942C5859CF281FB84BC5D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number: 015B
Signing time: Sun 19 Oct 2025 12:01:41 +0000
Manifest this update: Sun 19 Oct 2025 12:01:41 +0000
Manifest next update: Mon 20 Oct 2025 12:01:41 +0000
Files and hashes: 1: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: 0XGAUm1c0vAOpNfDtBJKmzNh92Rw/Fgnl05OKD43diU=)
2: mTUK0_cMYs_FlNXkmrwcNZ-A9WU.roa (hash: vFAKDgKtbcMdQ9fcPL7goyOKxpH3iASXmuoUDIoP9TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cb:1d:d9:42:c5:85:9c:f2:81:fb:84:bc:5d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: Oct 19 12:01:41 2025 GMT
Not After : Oct 20 12:01:41 2025 GMT
Subject: CN=8bfa1068eadd69a38e1c3d72e46e3841e7cf44a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:08:bd:2a:ff:8d:f4:ab:21:58:5b:9a:cf:
7a:f2:39:df:01:7c:7a:2b:79:97:92:69:f8:ea:3c:
a3:86:3c:29:57:18:5a:c3:8e:a5:ce:63:b3:9b:37:
5e:7f:21:2d:8a:49:c1:1b:69:f0:9c:b8:a8:2a:d2:
af:91:a8:d4:3a:0f:41:fb:c3:bc:07:aa:d6:b2:71:
25:bc:7e:db:b7:4e:b3:6c:be:62:47:d2:a9:bf:27:
53:37:1c:fa:51:13:ac:da:5c:00:35:b6:aa:99:de:
a5:b2:81:25:67:4a:b9:26:57:07:eb:86:44:b0:0f:
6e:d4:26:68:78:63:f1:e5:88:a1:1a:50:de:ef:0a:
37:e1:f0:7f:c9:6d:e1:6e:48:a6:f0:d2:62:86:05:
e0:fa:00:53:50:4e:38:c9:cd:99:cc:2c:42:ea:bb:
b1:3e:ce:48:54:1b:04:14:25:5e:e8:35:37:8b:e2:
75:0c:45:1c:32:21:7d:d9:a8:cb:94:46:8c:66:03:
ea:34:37:a1:8f:25:ed:86:91:c9:82:f0:33:30:fe:
cb:bc:01:73:c2:ee:f2:bb:b7:68:0e:0e:0f:75:3c:
84:e0:07:62:52:4c:db:b4:40:48:14:ad:51:d8:8c:
1a:da:37:f3:c0:4b:2f:ba:9c:51:76:4a:71:e9:de:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FA:10:68:EA:DD:69:A3:8E:1C:3D:72:E4:6E:38:41:E7:CF:44:A7
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fe:28:02:e4:b6:50:b0:ce:a2:9f:bd:cf:15:6a:1f:8b:47:
a6:72:74:d3:38:17:1c:ba:56:94:40:4e:41:13:a6:94:1e:a3:
0c:ea:6b:5e:3e:59:7e:61:29:c8:21:6e:58:86:04:50:15:7d:
2b:d4:9f:73:7a:d9:95:45:b4:22:fc:9b:2d:7c:d1:32:6b:63:
a6:b2:d7:cd:7e:8b:f9:d5:5b:39:4e:a2:ee:ed:95:68:74:0f:
49:e2:3f:dc:a1:05:55:31:65:c7:58:f7:c8:2b:8e:59:d0:f2:
f5:59:cb:12:c6:3f:7b:7c:d2:16:47:11:86:d8:24:05:b3:b0:
a7:60:8f:b4:8d:3d:89:f9:4f:99:a8:1d:67:d0:0d:74:fb:77:
e5:ea:79:07:68:9a:62:db:d4:4e:92:c0:3e:44:b4:b5:79:90:
17:2c:e6:3c:2f:5f:05:76:e3:1c:1c:b5:56:c2:4b:64:bd:56:
46:2a:5c:a5:8c:34:ba:7d:3f:dc:cb:28:80:b6:f7:30:53:1a:
88:a5:46:8d:70:4f:86:e7:2d:2d:0a:72:c1:0a:4a:39:cb:a6:
43:13:65:7d:3f:c2:66:89:e2:31:85:f9:ad:d8:02:dc:94:09:
6b:bf:e5:90:f3:5a:72:8d:40:fd:b7:cf:d7:24:30:7c:be:3e:
f8:b8:87:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:58 2025 by rpki-client