Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
File: PuzIGOGpxqhRe81paldEKNbRekQ.mft (raw, json)
Hash identifier: dNGUKF6nDT7k2bAadOodXcz3m5DnOlYZyTFYaJ5Kmjs=
Subject key identifier: E2:88:0D:FC:9D:29:AC:4A:FF:68:D2:BE:93:CB:21:4C:2C:1B:E2:56
Authority key identifier: 3E:EC:C8:18:E1:A9:C6:A8:51:7B:CD:69:6A:57:44:28:D6:D1:7A:44
Certificate issuer: /CN=3eecc818e1a9c6a8517bcd696a574428d6d17a44
Certificate serial: 0198D4A822CBB85EAD421C7FC6A4CF7A0BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
Manifest number: 04F8
Signing time: Sat 23 Aug 2025 02:00:45 +0000
Manifest this update: Sat 23 Aug 2025 02:00:45 +0000
Manifest next update: Sun 24 Aug 2025 02:00:45 +0000
Files and hashes: 1: PuzIGOGpxqhRe81paldEKNbRekQ.crl (hash: aT0v4n3FsdOzDLD/JCWCJ1DYctKSkd8JrVA2g4LHTqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:22:cb:b8:5e:ad:42:1c:7f:c6:a4:cf:7a:0b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eecc818e1a9c6a8517bcd696a574428d6d17a44
Validity
Not Before: Aug 23 02:00:45 2025 GMT
Not After : Aug 24 02:00:45 2025 GMT
Subject: CN=e2880dfc9d29ac4aff68d2be93cb214c2c1be256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:15:0f:73:a0:af:c9:07:b8:57:85:ee:4a:ce:
50:be:e4:ad:d8:d8:6d:f1:cc:a6:f7:f8:46:6a:9e:
86:77:f1:9d:88:c4:4d:2b:72:25:f1:92:71:66:b8:
b5:ae:b6:27:85:ca:36:88:00:f6:46:f7:fb:6a:d7:
98:88:0f:b2:dc:79:9a:c7:ac:65:4f:27:94:d7:1a:
c1:a4:1e:ae:94:e3:f4:4b:87:0a:41:2d:f7:d7:64:
f0:73:7b:e4:e3:13:db:82:02:da:ec:8c:2b:64:fa:
a4:4b:d5:07:b0:68:0d:79:1f:8c:3e:cb:51:0a:3d:
9f:b9:92:25:7e:02:21:f8:58:bf:ee:2e:46:b7:b0:
18:2c:69:e4:19:93:08:0d:dc:46:b7:6c:d0:20:64:
82:5a:b0:52:7b:a7:11:0d:95:26:96:80:eb:b4:a8:
ca:17:1d:dd:1f:a2:f0:8d:73:b1:cd:69:9b:49:cd:
ed:aa:c9:09:07:34:62:bf:19:3e:31:c6:92:9f:d8:
5f:c4:fc:29:98:4a:81:a5:5d:f2:fc:37:13:5e:b9:
5c:18:45:01:0a:b7:92:c6:d6:d1:35:dd:47:3c:cd:
ef:81:62:c2:b9:65:08:c9:3d:9e:c2:57:bb:0a:b9:
c1:f7:70:37:12:33:aa:03:80:c9:7d:6e:58:8d:31:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:88:0D:FC:9D:29:AC:4A:FF:68:D2:BE:93:CB:21:4C:2C:1B:E2:56
X509v3 Authority Key Identifier:
keyid:3E:EC:C8:18:E1:A9:C6:A8:51:7B:CD:69:6A:57:44:28:D6:D1:7A:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuzIGOGpxqhRe81paldEKNbRekQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/28860d-3c90-449f-a43e-8d3d50480d9d/1/PuzIGOGpxqhRe81paldEKNbRekQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2b:25:ca:f9:33:4f:0d:fe:34:26:0b:d0:6f:fb:e4:7e:70:
3b:ee:f6:8a:22:be:af:3b:64:89:f4:d6:40:e3:f0:17:6f:5c:
a9:f4:ed:44:13:d2:ac:07:73:95:1e:e7:e8:f9:98:c8:12:64:
b9:ba:a0:32:d5:1f:56:28:16:d4:c2:b5:5f:3c:09:a0:fd:9d:
0c:d4:97:4c:19:4b:47:ec:92:df:53:5d:e6:a1:d8:6b:fc:21:
d4:80:78:d8:c5:c5:6b:1f:09:77:9f:c1:60:89:a9:07:43:8e:
ae:38:40:7e:61:11:0b:40:50:61:6b:e2:54:a9:a5:38:e0:88:
19:67:53:77:52:cf:10:56:fe:a6:c6:71:ae:62:9f:1f:b1:3d:
c1:0a:1b:34:93:13:39:94:8a:a4:8d:ac:62:8a:5d:72:1c:e2:
6b:85:16:4d:4a:f9:47:06:b4:86:4f:5a:eb:3c:58:18:00:38:
ce:4d:ca:3e:5e:ec:59:9d:b0:9d:47:cf:93:03:28:7c:3d:5c:
fe:77:15:31:60:f7:ae:45:e9:7e:1e:0f:20:e0:04:9a:04:b4:
16:3c:38:13:01:f9:65:db:88:88:19:cb:2f:8c:f5:bf:61:83:
29:28:e3:a5:d9:56:c7:11:df:0a:cd:ad:60:30:fa:08:15:e5:
bf:f9:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:33 2025 by rpki-client