Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier: pvpvcCiLQesqs9jWSKxu+4mDszTWrH2+7kb9QFnOBjU=
Subject key identifier: 01:3C:52:6D:17:7D:A3:5D:85:92:5B:5C:72:EC:14:C2:22:2D:BD:DD
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 0197944B4EE92B149302B3E7EAC036CD86EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number: 1C
Signing time: Sat 21 Jun 2025 21:00:52 +0000
Manifest this update: Sat 21 Jun 2025 21:00:52 +0000
Manifest next update: Sun 22 Jun 2025 21:00:52 +0000
Files and hashes: 1: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: 6MkGY01Y/scnx5lnEJ0P5K54Z84nONCYR79Zn4Lm8rg=)
2: mTUK0_cMYs_FlNXkmrwcNZ-A9WU.roa (hash: vFAKDgKtbcMdQ9fcPL7goyOKxpH3iASXmuoUDIoP9TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Jun 2025 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:94:4b:4e:e9:2b:14:93:02:b3:e7:ea:c0:36:cd:86:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: Jun 21 21:00:52 2025 GMT
Not After : Jun 22 21:00:52 2025 GMT
Subject: CN=013c526d177da35d85925b5c72ec14c2222dbddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:31:64:e4:aa:e7:2b:f5:f7:da:e2:5f:dd:
b2:b1:42:01:93:ed:28:ac:77:5b:a8:f8:bc:10:c0:
ef:d3:b9:fa:29:d3:83:48:f0:6a:cb:79:91:8a:77:
f1:cc:c1:7e:b2:73:68:e9:84:12:93:e1:d6:45:cf:
c2:a3:b2:24:06:f2:19:45:88:78:39:55:1b:97:7c:
e8:14:4a:c0:60:8b:f9:35:9e:77:af:99:df:a1:2b:
99:cf:77:5a:ec:de:43:6a:3b:ae:b5:fc:3d:56:91:
6a:92:0a:e3:1b:c9:de:59:67:3e:b6:30:f8:c5:af:
7c:c8:98:a3:fc:de:99:29:57:a5:61:96:5f:f1:69:
6e:64:79:60:d1:02:5e:e7:c9:76:84:41:c1:49:c7:
0c:58:00:eb:02:6f:3f:e6:b8:2f:99:db:25:de:93:
97:73:e4:a4:05:ce:cd:95:4c:a7:3d:8d:2d:99:c2:
0c:1d:43:a7:3c:d8:51:da:71:54:02:94:d2:e4:30:
d2:49:4c:91:c0:ca:1c:cc:a2:3e:f6:ef:22:43:21:
ab:19:16:64:d3:df:a7:c8:b9:53:ef:61:22:3a:7e:
67:a2:6a:d4:e3:d5:8d:1f:f6:e4:60:08:5b:93:ef:
dc:f1:5c:8b:55:42:45:40:69:b7:31:60:4f:60:69:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3C:52:6D:17:7D:A3:5D:85:92:5B:5C:72:EC:14:C2:22:2D:BD:DD
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:7c:96:20:8f:50:f7:0b:a1:ec:0f:05:40:04:2a:b4:60:3e:
9c:0b:9e:5f:17:7c:fb:87:2e:b1:a4:57:00:2b:55:50:02:ac:
95:76:03:7f:f0:c7:0e:be:73:6c:1b:1f:bc:9b:52:a0:a3:0e:
2b:f5:25:b1:bb:00:23:5e:9f:d3:ef:21:13:c9:d1:51:76:be:
e8:8f:99:1e:e8:db:d7:f2:84:4e:f9:ec:98:95:99:9d:ea:ab:
1e:bd:18:f8:e7:9e:82:bc:9e:ee:a0:9f:6d:93:e4:f5:ca:e1:
c6:61:0c:0d:37:f5:49:54:a9:38:64:3e:40:bc:b5:fe:e0:7b:
90:f6:50:47:34:9c:57:a9:7d:71:de:87:68:c0:23:9b:aa:11:
73:3a:52:79:08:bd:15:a8:fc:0c:c5:f5:d7:d5:c3:aa:60:34:
72:d3:27:eb:e7:a1:73:da:ce:03:07:5d:10:69:fe:e7:4e:b4:
0c:55:99:30:bd:36:dc:22:d8:7f:57:88:cd:40:f9:b5:59:1d:
b2:39:d9:e8:00:23:3a:65:76:b9:fa:74:ec:63:57:0d:5c:e1:
4e:13:aa:a6:ce:53:3c:16:a3:75:6f:a3:2e:87:ad:05:ab:82:
29:f4:28:36:81:45:e2:1b:8e:cc:57:8c:10:84:aa:32:d5:72:
bc:e2:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 02:49:00 2025 by rpki-client