Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
File: PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json)
Hash identifier: jalovDUwhw9wOEVMGyszYUdQ3rK1oMyhYXZnLqpfiXI=
Subject key identifier: C1:EE:6A:FD:D6:71:1F:35:23:3E:EB:A9:B6:F9:85:C7:4B:A2:AB:AD
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial: 0197B77C71B114A9B845A8A2A5A59DD78689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
Manifest number: 0497
Signing time: Sat 28 Jun 2025 17:01:15 +0000
Manifest this update: Sat 28 Jun 2025 17:01:15 +0000
Manifest next update: Sun 29 Jun 2025 17:01:15 +0000
Files and hashes: 1: JTpkIG2gAi87qZ4MaDyiSAhDmGs.roa (hash: pqYQEm9FQENA5hwqBQ6sbfRExLr5G9tm4QJ0ttI7KnA=)
2: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: lYfRbVu1o4MWJQsJkucgZcs+0nVSIGkeaR6gz6FJVMA=)
3: p62oDeoT4vvUHo4yGegZ6_TWKY0.roa (hash: JITepKVcCtsEzEyKS9PibwaqvpfOsAJXxc4iERP2W4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:71:b1:14:a9:b8:45:a8:a2:a5:a5:9d:d7:86:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Validity
Not Before: Jun 28 17:01:15 2025 GMT
Not After : Jun 29 17:01:15 2025 GMT
Subject: CN=c1ee6afdd6711f35233eeba9b6f985c74ba2abad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f7:d1:37:f1:07:5b:d9:05:a1:a3:76:cf:6d:
12:81:59:29:67:d1:18:63:81:30:cc:fa:04:70:34:
40:3c:b3:2a:1d:32:eb:a1:3f:2f:f3:d4:2f:f3:9c:
6a:fb:54:65:4a:10:55:57:1a:95:8a:e5:f7:4c:12:
1f:e9:b4:fc:eb:0e:ea:80:e8:58:32:0d:3d:0b:2c:
7e:dd:2e:e3:08:28:37:0b:e2:75:9c:eb:49:cb:a9:
d0:15:3c:b4:e5:13:14:40:8e:d4:f8:cc:ae:b6:72:
f9:ba:6b:7d:0c:e2:d4:e1:6a:3e:46:be:32:7d:b8:
93:3b:3b:6e:9b:89:00:ed:b6:c6:22:00:af:df:49:
f3:33:16:39:e1:49:5a:bc:f4:a3:8b:a6:99:c5:5c:
4b:82:bd:4d:10:27:03:9f:7d:30:be:c2:bf:2e:d7:
95:38:39:d4:8b:5f:bc:a9:37:1d:f8:eb:0d:c3:31:
e2:91:99:70:7c:f7:82:69:e4:70:4b:6f:b3:88:13:
40:74:c2:3e:d6:9d:03:e9:d8:43:81:46:c0:ec:ef:
cc:07:e5:c3:96:8f:5a:39:23:87:20:6a:1b:b5:14:
14:ff:c4:49:04:0a:cf:98:9f:65:f2:2d:0c:91:35:
e5:a2:09:5f:59:13:b5:23:3b:80:1a:23:94:d9:56:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EE:6A:FD:D6:71:1F:35:23:3E:EB:A9:B6:F9:85:C7:4B:A2:AB:AD
X509v3 Authority Key Identifier:
keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:25:80:25:31:62:24:e6:4d:40:a6:39:78:b8:f0:b6:a8:94:
52:11:60:5d:fd:1b:c3:86:9d:5d:b1:6f:42:23:50:93:ae:0e:
b0:a5:65:9a:90:ce:2a:4c:84:bc:74:08:6b:d6:b6:48:dc:89:
f8:0f:04:f8:03:39:da:2b:ad:48:2d:d1:42:40:e0:a6:20:cb:
4c:87:99:d3:7e:5c:55:22:cf:8b:fe:cd:60:e0:4b:7a:da:de:
bb:35:84:1c:61:20:aa:c8:14:b7:3b:45:01:b2:b9:f7:3f:3b:
a3:81:47:a4:6a:42:7f:c1:a5:de:1c:be:24:78:97:d2:99:2c:
88:2d:07:69:93:f5:10:4c:29:27:05:54:0c:48:23:86:bb:55:
a9:c5:57:a6:00:d2:d1:71:94:ae:ec:39:5d:0c:03:dd:36:a0:
f0:d9:ce:28:f7:b2:cf:82:aa:31:88:53:a5:43:18:60:2b:df:
aa:c5:2a:34:53:17:40:1f:26:cc:a6:16:b6:02:ff:e5:ab:83:
de:04:9a:29:d3:52:e4:39:25:f6:24:7c:ea:9b:44:ac:57:6a:
53:93:8d:97:fe:ce:1c:e4:98:df:98:7e:fe:66:51:95:70:52:
ae:87:2c:85:dd:31:ea:16:c7:ba:e6:9a:61:1f:b8:dc:f4:94:
fd:f0:e3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:05:54 2025 by rpki-client