Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json)
Hash identifier: uN+htLzgV05NJJr7dOVD/fzvgqKuDeKu52yO+ow8fAQ=
Subject key identifier: 18:83:59:12:64:8B:EB:B9:10:15:9D:5F:48:C1:7C:7D:51:D5:C6:1E
Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88
Certificate serial: 019883555B411D8FD7CA82E6086C35C41B35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
Manifest number: 06A7
Signing time: Thu 07 Aug 2025 07:01:05 +0000
Manifest this update: Thu 07 Aug 2025 07:01:05 +0000
Manifest next update: Fri 08 Aug 2025 07:01:05 +0000
Files and hashes: 1: 846C_HHWsmfMuTteTAyqZtSs9uU.roa (hash: tRlhHsbjfBDjcdUQyF9uDZ6h5rAZGUSUYhMVpEGLRx8=)
2: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: zjVeyUKQIkuPjWchoyESkpkffFW28ZoWmfU7XTq1N4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:55:5b:41:1d:8f:d7:ca:82:e6:08:6c:35:c4:1b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88
Validity
Not Before: Aug 7 07:01:05 2025 GMT
Not After : Aug 8 07:01:05 2025 GMT
Subject: CN=18835912648bebb910159d5f48c17c7d51d5c61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:e3:58:dd:c7:56:10:f3:f2:84:c4:bd:3b:
ae:4d:a7:5a:87:10:19:8b:1f:74:84:8a:c3:8b:cc:
ac:2f:a0:70:d6:63:5f:52:f1:d4:da:b3:73:fb:f0:
0c:cb:65:87:2c:cb:aa:8b:a9:dc:1e:ee:e7:7d:10:
92:c8:85:ae:df:56:95:55:5f:1d:27:8a:14:72:8d:
b9:26:5b:15:c4:86:74:b3:5e:4e:3c:e4:b8:5c:9a:
21:46:c8:0f:e5:aa:d4:a3:69:9c:4a:91:75:8f:b0:
f4:b0:d6:3d:3e:73:28:8a:35:4a:c4:aa:6e:5e:96:
b2:56:cc:32:49:df:25:4a:2e:97:f2:25:2c:ac:78:
7b:18:48:d2:4e:1d:8b:0a:c5:1c:ae:94:0b:24:c8:
b8:9d:cd:ac:63:18:e2:ac:91:29:58:4e:3a:9b:87:
e0:26:04:fc:69:43:c7:50:3b:c0:43:ea:ab:30:6d:
d2:ef:f1:86:3f:e7:5d:90:c7:44:72:11:77:13:55:
94:c5:31:4d:dc:42:14:36:16:74:ac:24:e7:28:8b:
09:02:ad:1b:6d:62:7d:cc:58:f0:23:31:2b:d5:a0:
4a:68:a7:e8:0e:31:cf:36:cb:b2:f0:1a:85:5e:ec:
5f:84:c4:1d:e2:b7:e0:7a:e5:6c:2d:7d:ab:d3:9f:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:83:59:12:64:8B:EB:B9:10:15:9D:5F:48:C1:7C:7D:51:D5:C6:1E
X509v3 Authority Key Identifier:
keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:64:81:28:f9:a4:b2:56:7e:63:93:18:a2:5a:c8:36:2c:ce:
4d:cb:95:f5:0e:af:a5:33:51:6b:13:3e:99:74:17:17:3b:9e:
21:05:f1:e6:4c:c2:66:10:6f:c6:b7:92:ff:6b:3b:04:01:33:
17:fd:09:3c:37:00:05:c0:91:a9:72:56:cb:b6:70:ed:c7:85:
87:8d:10:48:e1:79:5b:8d:2a:38:d3:7f:f5:36:b4:e8:92:08:
a6:87:21:02:ce:aa:ab:38:96:4c:2b:3f:85:53:29:a1:b7:c9:
b3:df:58:04:ea:2a:b1:5e:59:7d:76:68:94:92:dc:fd:9c:07:
36:01:b9:8e:e3:d5:76:7b:8c:48:9c:b4:bb:79:e2:1b:97:46:
70:6a:f0:7e:ae:85:c0:cf:6f:03:7b:64:ab:d6:fc:16:7f:bf:
16:2f:c8:1c:ff:81:1c:28:8c:49:01:4d:90:ad:ab:36:97:68:
08:4e:d9:42:ac:33:b2:38:8e:ef:8f:1e:a5:f5:57:3f:37:83:
90:3a:a9:56:ea:a7:81:73:05:20:0d:9c:f9:8b:b7:23:e9:64:
72:5f:d8:f7:e8:cf:c4:37:40:89:7a:de:80:6a:01:34:e1:e0:
bf:10:19:e7:2d:33:9c:04:1b:af:08:c3:05:14:e3:d0:ff:f8:
38:5d:16:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:37:20 2025 by rpki-client