Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
File: PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json)
Hash identifier: TSWlPz21YYns8cwOK7LSwRA9vDlmU4I+vGFwm9hRIhM=
Subject key identifier: D7:82:48:C8:87:48:D1:18:94:16:1C:D9:CA:2B:E8:97:DF:E5:B3:B2
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial: 0198D54EA379505CE8D863017B6693C5C075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
Manifest number: 052B
Signing time: Sat 23 Aug 2025 05:02:37 +0000
Manifest this update: Sat 23 Aug 2025 05:02:37 +0000
Manifest next update: Sun 24 Aug 2025 05:02:37 +0000
Files and hashes: 1: JTpkIG2gAi87qZ4MaDyiSAhDmGs.roa (hash: pqYQEm9FQENA5hwqBQ6sbfRExLr5G9tm4QJ0ttI7KnA=)
2: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: YxMFch1HViKjq9GzaZeZ6Sn8meTaQJxJsufGamkpWEY=)
3: p62oDeoT4vvUHo4yGegZ6_TWKY0.roa (hash: JITepKVcCtsEzEyKS9PibwaqvpfOsAJXxc4iERP2W4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a3:79:50:5c:e8:d8:63:01:7b:66:93:c5:c0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Validity
Not Before: Aug 23 05:02:37 2025 GMT
Not After : Aug 24 05:02:37 2025 GMT
Subject: CN=d78248c88748d11894161cd9ca2be897dfe5b3b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:1d:c9:16:9a:d5:7e:7c:65:40:58:24:d2:
62:ac:a7:32:01:3e:bf:37:3d:ea:09:63:29:1c:9b:
38:aa:1d:32:a8:54:70:65:a7:f6:6a:a0:5d:a9:2d:
ed:20:e0:73:21:bc:4e:e4:e8:ce:f7:84:20:df:ac:
6b:e9:37:54:aa:cd:78:6a:be:1d:09:15:35:cf:72:
d2:ae:f6:35:9f:1d:a4:02:bf:ba:83:e1:47:ae:3d:
f4:3c:86:af:5e:99:2b:0e:65:6d:a4:90:c2:d7:3e:
ea:08:19:14:13:f1:4d:84:f2:5c:24:88:b8:d6:74:
f6:29:a1:b0:a9:e1:5b:f0:9f:a0:2d:0a:38:83:3c:
bf:96:bd:29:1e:2b:37:a8:0e:63:77:c7:98:e2:4c:
1f:0e:b8:7b:43:3e:e4:0d:7b:9b:24:84:0f:c5:05:
b8:22:31:81:00:1b:4f:13:08:0b:0b:50:99:44:56:
f5:92:24:69:4c:e0:95:e3:78:cc:30:0e:4f:41:34:
80:5a:cc:8e:ca:e0:ae:eb:eb:ee:25:c4:6d:e1:ef:
4c:ad:92:b2:ac:63:13:b6:b9:2f:83:83:f5:ca:5a:
b0:b8:f3:e8:48:09:fd:aa:df:f2:bd:f1:f1:7d:a5:
c1:fe:9c:13:77:4c:50:0c:43:4f:b2:fe:04:6f:7f:
be:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:82:48:C8:87:48:D1:18:94:16:1C:D9:CA:2B:E8:97:DF:E5:B3:B2
X509v3 Authority Key Identifier:
keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:c5:61:35:58:f6:be:2b:90:55:f6:70:a8:87:8b:5f:82:82:
b4:08:85:3e:26:33:18:bd:e5:4c:dd:0a:6d:64:be:dc:58:99:
3c:45:46:08:c8:f3:99:ba:26:33:e5:e6:83:cf:3b:89:2b:39:
25:d4:ed:a9:d9:7d:de:3d:8b:38:6d:37:d7:83:1b:20:ae:0d:
ac:7d:65:9b:05:21:38:37:e3:22:3e:79:20:e5:46:63:68:84:
af:36:72:ae:3d:13:d2:37:45:b1:b8:d8:07:b9:d2:a3:f3:2d:
a3:32:3e:93:30:6e:8d:46:59:1d:08:79:a8:57:db:da:31:bc:
52:63:f5:86:35:78:b8:40:1d:71:6b:06:22:aa:4d:60:e1:b8:
d7:9a:f9:1a:2c:bc:90:2f:c1:8f:7e:25:8d:b2:f3:20:c6:96:
67:55:2a:02:75:f8:c0:22:77:e1:cf:74:cc:6d:5b:09:81:0f:
b5:40:2c:4c:d4:81:1f:0f:69:16:e2:54:ea:06:b8:f5:47:56:
e0:ba:5a:40:72:00:16:56:89:5d:08:dd:e3:95:e1:bf:4a:67:
bf:21:5e:ff:f7:bf:f6:93:02:9b:2c:dd:c8:7b:ff:48:83:1e:
77:e7:97:98:aa:65:3f:e7:79:66:22:fe:cc:98:04:69:66:3f:
4b:10:57:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:33 2025 by rpki-client