Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json)
Hash identifier: 36T5TcAkIVkx8GoOX7ljpkvqIQQ+1V2F5DI8iRQO070=
Subject key identifier: 9D:05:1E:0B:7C:FF:8C:86:76:99:99:89:5C:AE:79:16:F5:6A:22:57
Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Certificate serial: 0198D6986DF3C2A73BCE2C2FB5E189DA4B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
Manifest number: 1409
Signing time: Sat 23 Aug 2025 11:02:50 +0000
Manifest this update: Sat 23 Aug 2025 11:02:50 +0000
Manifest next update: Sun 24 Aug 2025 11:02:50 +0000
Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: lq4MyE8o90gXBSRhjcCjxC85W9eZAen5qlH+tuK2PwA=)
2: XOdvLraV2qR3zq976W5c3J9zPFs.roa (hash: bgSJB/XwiNZRaO9bNHldSaleJhQexHKIWnqzJX66Ook=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:6d:f3:c2:a7:3b:ce:2c:2f:b5:e1:89:da:4b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f
Validity
Not Before: Aug 23 11:02:50 2025 GMT
Not After : Aug 24 11:02:50 2025 GMT
Subject: CN=9d051e0b7cff8c86769999895cae7916f56a2257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:4b:ba:2a:80:c2:9f:27:ba:ac:62:a2:d3:
f1:80:b5:c9:39:14:96:8a:eb:c4:c4:0b:cb:75:1f:
c2:d6:dd:75:12:e2:c9:ef:3f:01:1d:7f:38:15:47:
18:ed:d3:73:a6:c5:bd:76:30:7e:ec:bc:fc:44:bb:
49:f6:f3:f0:13:aa:d4:56:d5:81:50:c3:17:06:d8:
83:c6:c8:0f:1a:3a:02:6a:2e:3a:af:7f:ed:bd:d9:
af:99:36:8b:ee:15:99:63:0b:2f:32:d8:d6:d4:88:
9c:5c:74:92:ee:d5:dd:5e:78:01:59:08:1e:fa:d7:
2f:5e:39:d4:9b:99:33:ea:2a:58:ca:d3:ae:82:9c:
3d:6b:e4:49:0a:39:d9:d3:52:02:60:46:d9:86:23:
b9:0b:c2:9f:89:6a:92:43:05:43:61:27:fb:69:1f:
4f:63:6f:4a:b6:f8:92:64:5c:19:e3:8f:87:2f:e2:
49:75:1f:cb:9e:dc:6c:3a:66:20:85:cb:c6:f8:d7:
58:75:a0:62:2c:74:39:e4:c4:3e:b0:89:e5:e3:1a:
16:7e:0b:51:e2:64:05:58:22:6b:8a:a8:50:06:90:
72:ee:45:fd:4a:81:a2:d4:53:1a:78:e2:9e:56:d4:
19:6a:12:73:f4:f9:e6:f0:8c:e9:2d:61:9a:56:df:
36:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:05:1E:0B:7C:FF:8C:86:76:99:99:89:5C:AE:79:16:F5:6A:22:57
X509v3 Authority Key Identifier:
keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:66:0c:89:f8:bd:03:b8:95:10:52:a1:39:03:b8:f8:e2:87:
2b:14:1e:b3:b1:53:99:56:a8:de:30:db:10:23:7d:22:97:de:
c4:ab:ac:15:0d:e5:1c:84:02:c4:0e:b8:4f:10:72:88:11:97:
bf:0d:56:11:9f:49:7f:fb:f0:61:38:08:b9:0a:09:f2:45:a0:
fc:56:85:08:11:33:23:3c:56:3d:5d:77:68:4a:5e:49:3f:2d:
a2:23:a1:9f:f8:84:17:de:71:ff:52:00:f4:f9:42:7d:9a:fb:
a6:6d:b6:44:1e:c8:74:1d:af:e6:60:39:37:dd:b9:30:fd:31:
1c:dc:99:17:57:69:34:02:78:5f:e6:53:da:b8:e5:a7:8d:0d:
d8:9d:bc:4d:ff:66:8c:44:64:eb:b3:fb:56:44:a6:da:8f:8b:
e5:d3:4c:4d:1a:2d:56:1f:a6:a8:59:81:a6:1b:35:62:25:20:
27:3c:19:c2:fd:4a:2c:1d:78:fa:b1:b9:30:1e:1e:aa:3f:0f:
ff:af:85:53:be:ad:c5:55:46:f4:33:72:9b:41:01:cc:dc:54:
d5:80:f0:b7:9d:55:8f:ef:2a:f1:e0:4d:a9:86:3c:b4:c8:bb:
65:75:cf:54:84:2c:57:55:bd:b3:4f:b1:28:85:c5:ac:7e:bc:
36:18:10:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmG3zwqc7ziwvteGJ2ksTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZTkzZWI3ZDRiNWJhZmY3MjA2ODU1YjE0ZTBlZTU4NjEx
M2QwOWYwHhcNMjUwODIzMTEwMjUwWhcNMjUwODI0MTEwMjUwWjAzMTEwLwYDVQQD
Eyg5ZDA1MWUwYjdjZmY4Yzg2NzY5OTk5ODk1Y2FlNzkxNmY1NmEyMjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ9LuiqAwp8nuqxiotPxgLXJORSW
iuvExAvLdR/C1t11EuLJ7z8BHX84FUcY7dNzpsW9djB+7Lz8RLtJ9vPwE6rUVtWB
UMMXBtiDxsgPGjoCai46r3/tvdmvmTaL7hWZYwsvMtjW1IicXHSS7tXdXngBWQge
+tcvXjnUm5kz6ipYytOugpw9a+RJCjnZ01ICYEbZhiO5C8KfiWqSQwVDYSf7aR9P
Y29KtviSZFwZ44+HL+JJdR/LntxsOmYghcvG+NdYdaBiLHQ55MQ+sInl4xoWfgtR
4mQFWCJriqhQBpBy7kX9SoGi1FMaeOKeVtQZahJz9Pnm8IzpLWGaVt82iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0FHgt8/4yGdpmZiVyueRb1aiJXMB8GA1UdIwQY
MBaAFD7pPrfUtbr/cgaFWxTg7lhhE9CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjct
OThkOTA0NjY5NGU3LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjctOThkOTA0NjY5NGU3
LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2YMifi9
A7iVEFKhOQO4+OKHKxQes7FTmVao3jDbECN9IpfexKusFQ3lHIQCxA64TxByiBGX
vw1WEZ9Jf/vwYTgIuQoJ8kWg/FaFCBEzIzxWPV13aEpeST8toiOhn/iEF95x/1IA
9PlCfZr7pm22RB7IdB2v5mA5N925MP0xHNyZF1dpNAJ4X+ZT2rjlp40N2J28Tf9m
jERk67P7VkSm2o+L5dNMTRotVh+mqFmBphs1YiUgJzwZwv1KLB14+rG5MB4eqj8P
/6+FU76txVVG9DNym0EBzNxU1YDwt51Vj+8q8eBNqYY8tMi7ZXXPVIQsV1W9s0+x
KIXFrH68NhgQFQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:42:38 2025 by rpki-client