Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
File: PuzIGOGpxqhRe81paldEKNbRekQ.mft (raw, json)
Hash identifier: /45wEnw052N3YPzH1R/MAmCUd6lSeAqTDi/mph+v0sg=
Subject key identifier: 18:38:C7:C4:17:9F:DB:0B:12:B5:BE:6E:23:8D:F9:29:01:94:A0:B1
Authority key identifier: 3E:EC:C8:18:E1:A9:C6:A8:51:7B:CD:69:6A:57:44:28:D6:D1:7A:44
Certificate issuer: /CN=3eecc818e1a9c6a8517bcd696a574428d6d17a44
Certificate serial: 0199FE0FC853FAE693E716C37B5117050F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
Manifest number: 0592
Signing time: Sun 19 Oct 2025 20:01:11 +0000
Manifest this update: Sun 19 Oct 2025 20:01:11 +0000
Manifest next update: Mon 20 Oct 2025 20:01:11 +0000
Files and hashes: 1: PuzIGOGpxqhRe81paldEKNbRekQ.crl (hash: mYVTMfAIrl+dQDpk0Sb3i9n/Xht5dluywxUoSR3x6Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:c8:53:fa:e6:93:e7:16:c3:7b:51:17:05:0f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eecc818e1a9c6a8517bcd696a574428d6d17a44
Validity
Not Before: Oct 19 20:01:11 2025 GMT
Not After : Oct 20 20:01:11 2025 GMT
Subject: CN=1838c7c4179fdb0b12b5be6e238df9290194a0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:61:ab:63:35:bc:15:3d:dd:d9:b9:13:b9:fe:
95:cc:f9:75:d9:4c:a7:7e:50:67:e9:98:77:15:af:
3e:04:e2:8c:f2:f0:97:6f:7a:9e:e8:2d:c7:c8:9d:
ac:2e:35:83:29:44:51:66:8f:51:e1:a7:4f:65:f3:
1c:d0:54:67:33:ab:b8:3f:1b:fb:ae:3e:e7:5e:43:
ed:9b:ba:0e:2d:3f:4a:85:f8:f7:57:13:11:88:e1:
4f:99:cb:81:2e:a3:b8:58:f6:e2:33:30:f7:83:e9:
4d:23:67:ff:e2:96:6c:cc:66:86:fb:d8:9c:77:77:
57:55:8c:cc:a0:4b:25:cc:c9:c4:4c:03:c4:fa:4c:
02:98:4c:e0:04:21:c6:fc:5f:4b:c6:81:c0:0e:c7:
26:6c:9c:30:b6:cb:50:f4:4d:b7:6b:97:c9:21:55:
80:43:b1:b2:d9:42:d8:98:dd:b2:15:bc:7d:97:a4:
0a:ef:53:6b:c5:88:cb:d8:e9:36:7a:88:a0:26:18:
d5:b2:29:bd:93:d2:d4:f5:90:9b:93:bf:7b:bc:c0:
90:49:f2:31:ef:8b:c0:4b:07:a6:1a:9a:28:f4:7b:
32:1b:c2:54:5a:4e:5e:98:e3:70:32:18:5a:41:84:
37:94:47:aa:92:8c:08:6f:a1:03:78:11:42:49:2f:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:38:C7:C4:17:9F:DB:0B:12:B5:BE:6E:23:8D:F9:29:01:94:A0:B1
X509v3 Authority Key Identifier:
keyid:3E:EC:C8:18:E1:A9:C6:A8:51:7B:CD:69:6A:57:44:28:D6:D1:7A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a7:03:cb:d8:3b:b0:98:74:8d:89:6c:35:de:a9:ab:21:c2:
c1:65:1d:bc:5f:f9:2a:1a:fa:f5:05:8f:72:e9:f6:8f:4e:1c:
06:89:66:a4:8b:50:f8:4b:e4:be:aa:59:de:4e:cc:a9:0a:5e:
a4:0e:c9:2a:72:d6:7c:08:35:69:00:62:27:57:81:0f:a0:ac:
b3:36:41:ed:ce:7e:d2:17:e0:d1:2a:21:7d:74:6f:30:14:1e:
74:b3:cd:dc:9b:50:9d:ff:e8:bd:83:84:8b:5f:95:63:25:62:
d1:4d:1e:16:e0:a6:c7:68:cf:e1:39:ca:56:04:09:a3:a1:07:
26:55:10:b6:98:57:f9:cf:10:59:81:6f:ed:2e:fe:a7:85:48:
da:82:92:44:3b:8e:28:26:7a:d2:68:d2:26:ce:f7:fd:aa:1b:
4f:c2:39:3d:30:e4:80:29:d4:77:cb:b1:d7:14:6e:65:0e:c7:
9f:25:41:c0:20:ea:36:a9:06:b7:01:f0:73:21:01:8b:72:4e:
a8:05:e3:88:76:2f:6f:af:d8:f4:c0:eb:63:f0:14:cc:8f:d8:
cf:9f:e8:85:a2:5d:0a:82:65:fe:b3:ce:4b:f9:7d:64:07:c4:
89:7c:27:ab:c4:1b:74:71:02:1d:45:4f:29:52:4b:c6:c1:0c:
5a:a5:e9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:50 2025 by rpki-client