
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
File: PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json)
Hash identifier: CrzJPT6il6oGJY2gu2ht6DGjtnk/SGFBV/df7ddJNYo=
Subject key identifier: 9F:B6:09:7E:F8:6D:8F:AB:DF:34:C8:B3:4F:25:12:0A:5F:66:F3:4E
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial: 0199FAD86C2B0DC27500E6D3DA46933A27D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
Manifest number: 05C3
Signing time: Sun 19 Oct 2025 05:01:51 +0000
Manifest this update: Sun 19 Oct 2025 05:01:51 +0000
Manifest next update: Mon 20 Oct 2025 05:01:51 +0000
Files and hashes: 1: JTpkIG2gAi87qZ4MaDyiSAhDmGs.roa (hash: pqYQEm9FQENA5hwqBQ6sbfRExLr5G9tm4QJ0ttI7KnA=)
2: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: xfz8yF1C+6Ubul2kL+Q+vmAZ6nCvnyMw/SCx5EhofEk=)
3: p62oDeoT4vvUHo4yGegZ6_TWKY0.roa (hash: JITepKVcCtsEzEyKS9PibwaqvpfOsAJXxc4iERP2W4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:6c:2b:0d:c2:75:00:e6:d3:da:46:93:3a:27:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Validity
Not Before: Oct 19 05:01:51 2025 GMT
Not After : Oct 20 05:01:51 2025 GMT
Subject: CN=9fb6097ef86d8fabdf34c8b34f25120a5f66f34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c1:52:23:a6:32:29:e1:8d:2e:49:7e:a7:37:
9c:76:a8:f0:8f:3c:f1:48:27:0a:90:2d:7f:33:79:
dc:6a:07:93:77:2c:c5:ab:22:6b:c5:9b:41:6e:ad:
54:15:6b:af:52:bc:56:22:85:98:6e:10:c3:af:d9:
2f:48:50:87:ce:65:86:3b:84:ca:a8:ba:6c:a7:33:
13:84:33:96:98:68:57:b3:4e:d8:6f:08:7c:76:cf:
24:2c:c4:ca:27:81:6a:1a:38:3d:6b:4f:35:81:f3:
59:c5:2c:7c:ae:94:ef:01:f1:be:1b:b3:73:d7:5d:
09:cc:e4:2a:c8:cc:e5:10:5c:0b:ac:89:7f:dc:98:
b8:1a:53:04:5b:ef:7e:c4:a4:d6:c6:16:36:29:e1:
aa:2b:4d:9f:1e:d9:b5:cf:78:39:56:02:a6:41:4d:
7d:49:04:07:da:be:78:e2:e2:00:c2:0f:36:08:5d:
c4:dd:3e:29:0d:df:9c:48:47:5a:af:72:cd:a8:f1:
66:7f:9b:47:c9:9c:db:28:a5:ec:36:54:3d:97:7d:
ef:4e:ce:88:ba:12:16:0a:f5:12:6a:e8:dc:fc:bf:
90:3e:97:8b:33:be:88:a4:ad:00:1e:b9:8e:7b:46:
0d:0c:a9:fc:5f:b8:22:07:92:bd:a8:4f:db:e1:c8:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B6:09:7E:F8:6D:8F:AB:DF:34:C8:B3:4F:25:12:0A:5F:66:F3:4E
X509v3 Authority Key Identifier:
keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:4c:b1:84:5c:fc:84:d9:86:ec:56:fd:e1:0c:b8:2e:79:40:
30:da:75:e3:e5:55:8a:30:fd:ae:d1:ef:64:0a:92:eb:7b:4e:
89:57:70:51:dd:a9:65:39:7c:f0:bf:5f:3d:66:da:82:16:cd:
b3:c5:72:0b:e8:68:0f:63:56:0d:f6:5b:ce:8d:6f:e4:79:22:
49:4f:39:81:26:d4:89:87:12:72:0d:e7:0b:6f:4c:b8:c6:c4:
2a:81:40:93:4c:d7:b3:76:2a:de:91:50:0d:8c:b5:d4:20:c0:
85:6b:6e:b2:a3:eb:71:46:f1:9e:03:da:f6:5f:28:01:98:07:
80:b1:b7:f0:d2:c7:de:31:09:3d:5a:d2:a9:85:b1:c5:5b:45:
74:f7:72:ff:cf:2a:37:93:77:30:b6:3f:3d:b3:07:08:8e:ab:
e3:af:08:60:68:02:53:27:d2:15:1d:f9:50:c4:d2:2f:f2:3c:
23:af:52:d4:28:9c:fb:17:90:d7:2d:48:6b:e6:cd:63:76:8b:
4b:76:55:01:a0:7b:2c:00:09:f2:66:a3:28:41:94:cf:d7:ed:
e8:14:c0:8f:cc:be:ed:4d:20:bf:f0:7c:0d:51:f6:97:2c:d8:
f9:b2:d1:1c:86:77:cb:23:71:e7:17:ef:39:a0:57:69:c2:b9:
f3:cb:09:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:55 2025 by rpki-client