Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
File: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft (raw, json)
Hash identifier: E/6NHgyc6u5b8lVtcfIQxATVoQb2Wfx3WsNGGUKVQQ8=
Subject key identifier: E2:F9:CC:0E:0D:5D:60:CB:F3:85:CD:48:93:83:22:D9:04:72:FC:3A
Authority key identifier: 3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
Certificate issuer: /CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Certificate serial: 019893A39A0FDA335AA6092EE54C8A146879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 11:00:29 +0000
Manifest this update: Sun 10 Aug 2025 11:00:29 +0000
Manifest next update: Mon 11 Aug 2025 11:00:29 +0000
Files and hashes: 1: 3Gi7K5otbF8YAPl6ViRUI8XiRNU.roa (hash: aFHAU+eeRwSzWLG9T2U4VKkPQW4ZT7Ys728VZHAX80s=)
2: PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl (hash: ySKBXWoLCon7enmgUePJumNA2Yk31pJnCYidbO/bsQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:9a:0f:da:33:5a:a6:09:2e:e5:4c:8a:14:68:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee5a1dd0cee874c06e1ea1f72827d97cbc67187
Validity
Not Before: Aug 10 11:00:29 2025 GMT
Not After : Aug 11 11:00:29 2025 GMT
Subject: CN=e2f9cc0e0d5d60cbf385cd48938322d90472fc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c7:dd:1b:dd:aa:6d:3a:10:b9:d1:22:c7:6d:
34:b1:63:92:f2:bb:5d:28:6c:d1:5c:90:73:65:61:
c0:4c:bd:1f:20:19:4f:b2:ba:b0:c7:99:0c:bb:5f:
42:df:83:14:b0:ad:2e:33:94:7c:32:42:09:56:7b:
22:b8:08:4b:02:fc:a2:69:50:c1:a5:1c:d6:c2:95:
1c:6c:6d:1c:72:04:54:11:50:ef:04:f0:1c:bf:75:
4f:51:f4:67:9a:12:51:8f:80:db:c5:88:9c:48:98:
8f:62:be:0f:cc:8f:ed:1f:75:f4:9d:7b:bd:8f:93:
fe:1f:29:78:8d:bc:21:a3:89:6a:e4:2e:9f:59:30:
17:cf:c7:33:5f:f6:75:ad:05:6a:85:7c:f6:98:a1:
ad:33:b4:af:e5:d7:e5:98:ba:cc:d6:6e:e6:57:63:
63:f7:b7:9d:dc:bd:46:61:89:e7:e1:4b:60:3b:38:
20:05:9e:39:58:b9:d6:7d:63:da:f7:00:8b:f3:01:
d6:08:cd:f0:d0:e0:f2:be:de:55:8c:c2:5b:cc:92:
a7:7e:6b:ba:a9:bf:53:c8:aa:0d:2d:d8:bf:9f:ea:
c7:37:64:6a:4b:c3:8e:73:97:90:ca:80:1a:2a:ab:
aa:6a:e3:93:bb:a7:16:c6:fc:af:66:63:a6:84:e3:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F9:CC:0E:0D:5D:60:CB:F3:85:CD:48:93:83:22:D9:04:72:FC:3A
X509v3 Authority Key Identifier:
keyid:3E:E5:A1:DD:0C:EE:87:4C:06:E1:EA:1F:72:82:7D:97:CB:C6:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/95ffd9-19d3-4517-8c47-c61661d1b71b/1/PuWh3Qzuh0wG4eofcoJ9l8vGcYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3c:21:07:3a:67:73:d5:25:4e:f2:9f:72:09:d7:fe:21:9d:
b4:68:7a:60:20:df:b8:0b:d2:cc:78:e1:ae:84:c5:4c:e0:5b:
fe:4e:88:24:1f:83:69:74:e8:d3:22:65:93:35:bf:01:68:db:
b2:26:9d:f5:63:82:55:c6:2b:b7:f0:2a:43:90:c1:c6:7a:78:
45:e1:96:13:aa:44:50:fa:cb:e0:49:d9:c5:49:ba:d7:1b:dd:
19:ad:bf:81:28:90:00:8e:71:07:fc:13:5f:69:14:ef:26:ae:
cf:c9:b5:00:9a:29:65:5b:35:9d:72:b1:4e:f1:d6:3b:d1:bd:
3f:ac:4c:fd:6f:68:9d:0a:72:47:44:9a:db:5f:13:bd:ba:84:
7c:94:57:72:44:13:10:fc:87:fb:91:2c:5d:83:ce:e0:f5:0e:
0c:5e:90:12:fa:bb:33:4e:af:8d:fb:f1:43:8f:1d:24:ed:cd:
4d:ad:77:5d:db:60:9e:d9:bb:46:62:86:71:61:cd:f5:fa:cc:
b6:a0:eb:bc:0f:f6:02:d9:05:5d:c6:73:3e:4a:fe:f0:3f:71:
36:56:25:9a:20:5d:5e:30:2c:e0:1c:f6:a5:cf:fb:fa:b0:61:
9a:7f:a8:07:d2:ce:7e:a9:45:63:41:1c:db:9d:2d:e8:3a:d7:
6a:f6:9e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:32 2025 by rpki-client