Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: fGVgpiyUf8bQH2EMMPU8Xsl08YjHrqfoSQ1dBNpjmgw=
Subject key identifier: A7:F0:16:04:11:4B:BA:02:B2:F9:AB:44:6B:37:EF:3B:47:79:C8:83
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 0199FC2152CEBA45A63CF59EB42553FDB0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 14A1
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: usNi+KcfR5ByA5njNwI/ivpEWtl2UYgpvFVvF3UJ/nI=)
2: XOdvLraV2qR3zq976W5c3J9zPFs.roa (hash: bgSJB/XwiNZRaO9bNHldSaleJhQexHKIWnqzJX66Ook=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:52:ce:ba:45:a6:3c:f5:9e:b4:25:53:fd:b0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=a7f01604114bba02b2f9ab446b37ef3b4779c883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:3d:76:d3:95:6e:66:e4:3f:7b:b0:e1:e1:
01:d4:bd:c2:26:14:44:42:93:32:ef:e1:8f:7c:3e:
36:ec:40:26:c3:31:b0:da:2f:39:bb:da:16:1e:89:
f8:1d:7f:d5:bf:a8:a6:0b:06:4c:eb:cb:83:90:5c:
b8:cd:f3:98:ef:0a:43:7a:8b:56:c5:55:3d:86:75:
0c:b0:8a:c3:13:4f:06:73:65:11:fa:4b:7a:d5:30:
f5:7f:d3:03:b1:c9:a9:8e:80:e5:69:b5:0f:17:a3:
7f:35:53:aa:a2:9c:20:54:ea:c9:31:7e:92:96:ee:
63:e2:e4:5d:7e:18:fe:91:e3:b6:4d:5a:b4:3e:86:
43:95:ba:21:61:4f:cb:4a:e5:7a:be:64:ca:fe:4f:
be:0a:5f:8d:08:6e:fc:0d:8a:38:a4:50:51:3b:c0:
91:d4:36:22:51:82:81:4c:25:34:ab:e7:62:89:27:
89:e3:5f:b8:e8:72:53:d3:f6:7f:1b:43:7c:ce:31:
1f:78:29:f9:4c:76:ed:92:b6:e8:3b:06:bf:a3:9d:
80:9e:2e:fd:4c:b3:33:09:e6:36:b1:ce:7b:0e:b8:
de:2c:f0:01:63:f9:c4:2f:3e:f1:34:15:b1:26:45:
03:22:4f:2d:e8:48:20:a4:9a:82:3e:80:a9:3d:66:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F0:16:04:11:4B:BA:02:B2:F9:AB:44:6B:37:EF:3B:47:79:C8:83
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ee:66:01:89:ab:ae:2d:b7:34:78:2c:cb:6f:c5:c1:d0:67:
7f:f9:14:66:ef:2a:2d:10:fc:81:ba:98:b0:32:98:d3:9f:9b:
23:6a:04:47:ef:a7:24:8e:77:71:b3:f6:91:f6:89:c9:60:82:
a1:92:13:05:62:03:02:3b:5f:91:a4:d3:df:9d:e6:c0:48:ac:
c4:68:cb:6a:62:f7:28:1a:7f:84:07:63:23:a8:21:5a:65:a5:
31:8b:d3:3a:0c:f1:05:14:28:f8:86:d7:27:bc:ec:09:19:17:
af:4d:ff:c2:70:ba:23:55:d0:70:5e:76:2f:8d:24:c7:b4:21:
ba:d8:28:91:25:c8:30:de:14:64:50:a8:d8:82:5f:b5:b3:5e:
8f:19:f0:6e:4c:56:4e:63:e9:67:da:33:5c:54:f5:7d:45:ed:
d0:10:5d:ba:73:49:8c:d5:92:8e:fe:95:ac:51:bc:b0:69:76:
ef:49:94:b3:f4:81:f6:04:67:eb:c4:61:0f:9a:49:72:ad:6c:
e4:7e:7a:1c:a2:1d:44:f8:a3:41:cf:b9:5d:77:5d:f7:af:20:
70:1d:be:e7:ef:34:68:41:6c:86:67:59:e8:fe:6c:8b:f3:9e:
f9:f8:92:f0:ae:73:f4:dd:d3:90:e2:97:89:4f:a0:8b:06:33:
95:35:6f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:09 2025 by rpki-client