Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier: P/4c0NIVZcmvJ23NhdImgeMjC638HfQJnBsOZT88IW0=
Subject key identifier: 08:43:83:5C:82:74:2E:C2:5E:8A:D8:CF:AF:14:CC:F3:6E:8D:CE:2C
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 0197B8FD746CD1E69C0D37834776E029E69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number: 2F
Signing time: Sun 29 Jun 2025 00:01:47 +0000
Manifest this update: Sun 29 Jun 2025 00:01:47 +0000
Manifest next update: Mon 30 Jun 2025 00:01:47 +0000
Files and hashes: 1: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: 7FPfo4AYE+H4AXcCvjkzHQ3Yv8H2FIdKXBi6GgqPSLY=)
2: mTUK0_cMYs_FlNXkmrwcNZ-A9WU.roa (hash: vFAKDgKtbcMdQ9fcPL7goyOKxpH3iASXmuoUDIoP9TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:74:6c:d1:e6:9c:0d:37:83:47:76:e0:29:e6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: Jun 29 00:01:47 2025 GMT
Not After : Jun 30 00:01:47 2025 GMT
Subject: CN=0843835c82742ec25e8ad8cfaf14ccf36e8dce2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:96:9e:89:c6:95:f2:e8:c7:b8:bf:18:03:db:
a4:3a:8d:13:dd:a6:6d:d1:d4:eb:57:c5:ed:01:1b:
52:9c:a0:8e:7d:34:53:24:5c:62:fc:08:b9:9f:d8:
92:31:bf:6f:cf:eb:8d:fc:0f:14:c5:27:e6:73:99:
25:7a:f5:ab:3e:94:74:25:24:1f:c1:6f:10:82:f4:
a9:35:35:f2:c2:bd:12:30:91:41:ec:d1:56:0d:61:
3c:2e:00:e6:d4:77:d9:a7:2c:df:42:58:61:c3:aa:
63:27:99:88:0c:5d:ff:8c:27:ca:80:a6:3c:40:2c:
66:a4:8b:9c:49:ee:a8:2f:5b:e0:ad:5e:16:7c:a9:
2a:04:19:0e:42:84:ad:df:c8:7c:7d:10:89:a8:59:
67:84:d1:2f:fe:77:c0:d5:f9:b9:a8:ee:53:15:89:
a4:8b:46:96:81:4f:06:f0:6a:75:00:bd:81:23:1f:
cd:cd:0f:a5:8a:0f:57:72:33:20:0b:bc:e0:6f:1b:
56:a5:42:69:33:6d:21:ca:1e:4c:57:88:75:03:c6:
fa:8d:18:6f:d6:50:13:8a:56:c0:52:66:b7:d1:dd:
59:7e:01:a7:cd:cd:5b:12:d8:fe:41:a0:ef:91:c4:
d3:1c:d8:d3:c4:a4:88:36:4f:b9:45:ed:86:ba:54:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:43:83:5C:82:74:2E:C2:5E:8A:D8:CF:AF:14:CC:F3:6E:8D:CE:2C
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:63:92:1c:13:cf:64:92:c5:dc:21:e5:d1:40:28:75:53:09:
df:2c:43:cc:e0:2d:a9:30:25:f0:10:b9:7b:10:0c:fb:49:e9:
28:eb:71:1a:20:89:0d:dd:5c:0a:2b:e2:06:7a:1f:0b:5f:e8:
ee:3a:cc:4f:18:9c:ba:b2:87:58:cc:30:7f:c7:50:03:4e:6a:
5a:b2:10:42:e6:07:b7:04:0c:c9:e2:57:54:36:d1:cc:43:eb:
eb:50:e4:4e:13:32:ec:27:4d:0c:eb:72:8a:c1:8b:3e:a9:47:
43:ff:3c:9b:12:36:30:0b:85:f6:65:52:0b:11:cf:ed:70:c4:
f1:6d:e5:c2:09:cc:78:0e:85:9b:70:69:a9:a2:17:97:65:11:
92:79:ff:c2:4b:40:7b:e6:39:0b:5f:f5:c9:b4:b0:02:cc:72:
f5:65:51:79:66:54:f8:b4:d1:2a:af:cc:fa:cb:22:a2:c1:45:
60:71:31:e6:87:e9:e2:fb:d2:cd:6f:f2:72:d1:a6:b6:1c:95:
72:7c:ce:e2:8a:45:4f:a3:05:04:f9:1d:e7:9d:bc:e3:0c:bb:
47:8a:35:43:15:ae:a6:0c:f6:fa:44:3f:7d:a8:19:cb:44:6c:
fb:ba:46:42:0e:ae:cc:69:6a:f6:43:9c:3a:76:4a:02:62:32:
c5:6f:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:05:06 2025 by rpki-client