Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: sBzRlsk1slndRqcLTwQRGR7gXLoCaijX1P3h24T4fQM=
Subject key identifier: 3A:1B:EC:B0:71:E0:1B:7E:D3:64:15:22:E1:19:92:41:44:09:A8:9F
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 0197B6D7BD21C699DDD28FF70E3B3857BC8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 1374
Signing time: Sat 28 Jun 2025 14:01:21 +0000
Manifest this update: Sat 28 Jun 2025 14:01:21 +0000
Manifest next update: Sun 29 Jun 2025 14:01:21 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: o3I5aj497sXd26KAGnba5k5xn2gK4Gu7lzjKN4aKeJE=)
2: XOdvLraV2qR3zq976W5c3J9zPFs.roa (hash: bgSJB/XwiNZRaO9bNHldSaleJhQexHKIWnqzJX66Ook=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:bd:21:c6:99:dd:d2:8f:f7:0e:3b:38:57:bc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Jun 28 14:01:21 2025 GMT
Not After : Jun 29 14:01:21 2025 GMT
Subject: CN=3a1becb071e01b7ed3641522e11992414409a89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d0:7f:35:56:4e:c4:91:89:e3:ee:1a:93:00:
d8:83:ce:c9:a9:32:12:39:84:c5:84:31:30:d2:6d:
32:81:81:2c:35:92:35:de:3a:d2:de:6f:3a:94:80:
9c:7b:a4:92:b4:37:b6:8f:bc:66:4f:84:9a:b3:44:
91:1d:61:7a:e5:77:7d:70:ba:48:13:a9:b4:6b:9e:
b7:94:b5:09:dd:56:70:60:88:8a:af:6d:03:43:20:
2f:ec:97:0c:9a:e1:07:d8:1c:78:28:a0:f3:7a:60:
11:50:66:67:47:58:27:cc:f8:b8:dc:12:e5:ed:ef:
f9:1f:40:18:a6:3d:25:b8:6f:74:39:95:38:0e:4c:
10:cc:9c:f1:c1:c4:c0:24:b6:58:2f:32:01:0e:03:
bc:20:c1:d1:1c:69:4e:bb:00:77:2e:7a:c0:08:db:
95:6a:e1:91:62:6c:5a:28:35:7e:fd:a4:3f:74:77:
90:62:cb:7e:11:23:06:c2:62:7a:a8:65:d1:ed:67:
e5:a5:02:4e:4b:90:56:84:80:ea:72:17:ff:10:00:
df:fb:f3:40:31:56:d5:d5:43:c8:51:03:14:03:ab:
68:ad:aa:d4:5d:25:8a:eb:b5:a0:fd:6b:91:84:33:
a0:d9:67:40:45:47:b1:a8:59:eb:df:bb:0b:57:17:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1B:EC:B0:71:E0:1B:7E:D3:64:15:22:E1:19:92:41:44:09:A8:9F
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d3:da:80:da:88:dd:91:c3:a6:94:65:2e:78:91:ce:fb:22:
fa:6d:3a:56:29:bd:24:0a:22:30:67:c0:37:30:ea:61:30:eb:
15:0f:24:aa:2e:eb:66:5b:b1:3a:16:14:be:99:fd:00:96:0b:
7f:b9:76:48:5c:96:1f:fc:7c:f4:f9:1d:13:37:0e:0d:ee:fb:
58:83:f8:fa:d8:19:40:49:39:26:38:a7:c0:17:b8:6f:e7:a3:
1e:45:c4:3f:6e:16:13:00:42:24:3a:fb:82:75:41:66:58:12:
00:ac:a2:88:28:38:95:27:c2:73:ad:c7:23:03:e9:d2:0e:e4:
38:59:29:c9:4a:17:89:68:82:01:af:c2:99:ee:08:7d:ee:ff:
c3:10:da:72:bd:95:33:3e:89:5e:4b:7e:84:98:70:5a:42:67:
dc:6f:bf:00:34:de:53:60:44:d4:dd:57:ac:ed:ba:a2:3f:c5:
62:2c:7f:9a:58:10:f1:a1:77:38:f8:30:cd:1c:89:05:41:d4:
0e:6e:35:c7:e1:ee:9e:05:49:ad:c7:87:21:d6:07:f9:5c:e6:
b3:69:5b:f9:b3:26:7d:a1:a5:b4:27:39:e6:4e:1c:b0:1c:00:
bc:de:2e:94:73:79:6a:1e:68:2c:6a:28:5a:45:6f:e7:3b:04:
7e:ce:39:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:24:38 2025 by rpki-client