Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
File: PuzIGOGpxqhRe81paldEKNbRekQ.mft (raw, json)
Hash identifier: v4CCjxX06smT/AK8jITZzOuJV/Lm3WVc0pHyPkuIpx4=
Subject key identifier: F9:85:D1:D0:EA:99:6D:70:12:2B:C1:3F:1F:D1:33:09:B4:49:10:8D
Authority key identifier: 3E:EC:C8:18:E1:A9:C6:A8:51:7B:CD:69:6A:57:44:28:D6:D1:7A:44
Certificate issuer: /CN=3eecc818e1a9c6a8517bcd696a574428d6d17a44
Certificate serial: 0197B6D7884ED4797349891B7C0C2B64A0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
Manifest number: 0464
Signing time: Sat 28 Jun 2025 14:01:07 +0000
Manifest this update: Sat 28 Jun 2025 14:01:07 +0000
Manifest next update: Sun 29 Jun 2025 14:01:07 +0000
Files and hashes: 1: PuzIGOGpxqhRe81paldEKNbRekQ.crl (hash: uFpHTROUYWH5zBZjCvBH8hnMHiu4K5sHBsiZdARBIuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:88:4e:d4:79:73:49:89:1b:7c:0c:2b:64:a0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eecc818e1a9c6a8517bcd696a574428d6d17a44
Validity
Not Before: Jun 28 14:01:07 2025 GMT
Not After : Jun 29 14:01:07 2025 GMT
Subject: CN=f985d1d0ea996d70122bc13f1fd13309b449108d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:81:92:36:af:77:0b:cd:86:8d:23:94:f3:
e7:ba:cc:a0:7c:f9:28:a5:a4:47:7d:e9:a0:b9:fd:
01:93:19:69:58:eb:3e:9e:ff:4e:05:4e:70:54:94:
eb:ee:19:f2:e7:c0:96:9d:ff:8d:0a:50:c1:69:41:
ec:27:92:4d:02:ce:e8:7f:6b:a8:a4:38:d3:53:a7:
5a:2e:45:13:d6:21:31:ff:0d:d1:76:e9:ba:b7:49:
49:05:12:17:f2:3e:7b:7b:d6:d5:1e:3f:19:75:aa:
bf:26:99:8d:f5:39:da:cb:e6:b3:a5:93:1c:a1:30:
9f:1b:6c:3e:43:2e:7f:e2:72:8a:bc:52:5e:71:78:
95:43:fe:4b:0b:3f:de:40:16:0a:61:16:b5:80:7e:
20:4e:de:78:d2:d7:94:c2:9f:49:7f:2b:ec:a7:48:
c7:75:b1:63:ea:c6:ff:e1:d4:f1:c0:29:f3:9b:9e:
e6:1d:c1:5a:c5:c8:02:04:9f:77:33:c9:dc:92:a9:
b8:86:ab:ba:56:aa:77:35:e3:0b:97:2f:8c:5e:8d:
74:be:bc:18:43:48:7d:0e:1c:50:f3:1c:fb:6d:aa:
96:71:0f:61:97:76:5c:e0:27:7f:b7:1f:d0:78:b1:
91:ca:cc:0e:c9:e2:63:1d:d3:b4:7e:45:09:8a:91:
2d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:85:D1:D0:EA:99:6D:70:12:2B:C1:3F:1F:D1:33:09:B4:49:10:8D
X509v3 Authority Key Identifier:
keyid:3E:EC:C8:18:E1:A9:C6:A8:51:7B:CD:69:6A:57:44:28:D6:D1:7A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1a:62:28:e3:e8:78:81:f6:1a:44:f7:fd:ce:6e:4d:8e:53:
32:bc:fd:9b:e0:ef:57:bf:f3:b8:f6:30:0a:b5:2c:23:94:f5:
d3:6d:f7:0f:30:6a:d2:97:48:10:6a:f9:2d:c6:94:bb:34:9b:
b3:5c:7b:1d:e6:d6:87:e9:23:ff:b5:50:fb:5e:9f:f6:6b:ec:
80:0b:f1:f2:d9:64:2b:fc:bd:48:b1:52:87:2e:d0:5d:22:bd:
dd:25:5a:b9:1b:ad:3f:59:e6:ea:54:fe:a4:aa:ea:cb:be:38:
e1:2d:0c:dd:45:e2:90:00:82:0e:29:58:75:58:58:77:73:07:
59:5a:16:91:c2:3d:78:04:bc:81:59:e0:e1:ef:2b:4e:ae:0e:
8c:9a:03:56:27:6c:a1:da:60:39:75:b0:49:e3:fb:90:f8:93:
32:53:f1:ae:b7:6e:d8:6f:3d:62:0d:8f:43:ad:13:e5:06:f8:
1b:5c:4c:bd:86:c7:5b:7a:53:a5:18:f7:21:83:d3:78:ea:a4:
73:d6:54:0b:a4:5a:53:86:6b:38:5d:9c:4e:33:18:e3:2b:9b:
64:22:fb:47:30:49:7c:67:a9:11:84:cb:0a:36:3a:3e:03:8a:
27:30:2e:7d:97:ed:42:30:e7:75:ac:f2:4d:3b:3c:a9:5d:d3:
fc:06:df:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:18 2025 by rpki-client