Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
File: PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft (raw, json)
Hash identifier: 28fhYzvMtfGhP1A+jYyBvhGiler6MXOCAINOb2ZZdvo=
Subject key identifier: DE:67:0E:35:CE:7A:74:6D:FE:E6:FB:EB:D2:F2:C0:F6:8C:0E:AA:2E
Authority key identifier: 3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
Certificate issuer: /CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Certificate serial: 0198B02E10483AE1BAAFE8B22C6658F5C145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
Manifest number: AF
Signing time: Sat 16 Aug 2025 00:01:05 +0000
Manifest this update: Sat 16 Aug 2025 00:01:05 +0000
Manifest next update: Sun 17 Aug 2025 00:01:05 +0000
Files and hashes: 1: PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl (hash: QPWWh7sH3ccG/bn4vo8cxBMu8O0I/ODjO2y9viNOMu0=)
2: mTUK0_cMYs_FlNXkmrwcNZ-A9WU.roa (hash: vFAKDgKtbcMdQ9fcPL7goyOKxpH3iASXmuoUDIoP9TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Aug 2025 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:b0:2e:10:48:3a:e1:ba:af:e8:b2:2c:66:58:f5:c1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ee0214c609c6cd67803ac7c736ef8da517ca59d
Validity
Not Before: Aug 16 00:01:05 2025 GMT
Not After : Aug 17 00:01:05 2025 GMT
Subject: CN=de670e35ce7a746dfee6fbebd2f2c0f68c0eaa2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a1:0a:cf:2d:ef:aa:e8:fc:19:9d:5f:e4:8f:
3c:3e:c0:26:e3:2c:93:22:89:ff:59:72:29:fe:3b:
45:f1:61:7a:9b:9b:06:4e:1e:b3:3b:32:e5:5d:91:
9b:f8:87:ad:b1:71:25:46:97:f3:48:69:7d:f8:a0:
2b:08:c3:3e:6c:d2:d9:7d:1f:48:7c:06:cf:df:34:
f9:0a:70:65:da:88:37:60:d2:2d:02:10:db:65:50:
d5:b8:0e:cc:18:bc:86:74:e1:4f:1d:ff:37:55:f1:
a3:33:a4:0d:6c:4e:46:62:46:26:55:c4:69:54:8a:
be:39:ba:10:af:e7:25:71:a2:26:15:c6:93:e2:db:
9f:9d:26:9e:53:ea:ca:c3:ef:e1:a1:79:6d:55:8e:
20:b3:01:f7:12:bd:50:b3:8a:c9:56:6d:77:8c:53:
97:4b:18:b7:29:3a:28:88:0a:e4:4d:10:b5:0f:e4:
47:f4:d0:85:a9:41:e9:13:19:75:a6:fa:76:cc:56:
94:c7:d3:3b:74:37:77:67:8d:1b:de:1e:dc:79:85:
b3:58:ef:81:8c:05:b9:69:f8:c0:30:6f:56:9e:ec:
be:aa:b9:1f:cc:b2:c9:6e:5b:b0:9f:57:00:87:90:
90:42:7a:66:72:a2:98:86:d6:a3:0e:b7:db:ff:46:
7b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:67:0E:35:CE:7A:74:6D:FE:E6:FB:EB:D2:F2:C0:F6:8C:0E:AA:2E
X509v3 Authority Key Identifier:
keyid:3E:E0:21:4C:60:9C:6C:D6:78:03:AC:7C:73:6E:F8:DA:51:7C:A5:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PuAhTGCcbNZ4A6x8c2742lF8pZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2e6ee3-8158-458e-a0ac-ae81edc6fbd7/1/PuAhTGCcbNZ4A6x8c2742lF8pZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e7:50:f1:38:92:aa:46:b4:22:12:a0:6f:89:36:fd:1a:71:
61:7c:93:f2:0c:eb:74:f4:86:f9:98:66:fa:b3:d4:78:9e:3c:
e4:2c:63:66:c4:32:4e:26:56:16:17:aa:31:a6:00:26:6d:8a:
f7:a9:b6:e5:2c:30:f4:6d:59:f3:9f:33:25:a6:04:4e:27:41:
7b:cd:5c:a5:14:08:38:49:1e:21:be:45:89:15:5b:e8:67:fb:
09:86:dc:c4:a9:ff:f5:6e:ef:df:07:e4:7f:3d:8e:5f:95:e0:
f8:f6:fc:4c:f7:35:59:8d:28:fe:1b:98:4e:a0:b8:ba:32:bb:
e5:0d:75:c4:5a:d9:4f:90:87:50:b6:84:38:89:26:2c:ca:b0:
2b:48:39:09:96:01:7d:50:34:30:9f:1a:a9:50:62:07:6b:a6:
66:62:27:e2:80:fd:bc:99:c1:d0:b0:9c:5b:4f:9c:12:5a:fb:
19:80:7d:58:a3:f5:9a:ad:99:d1:f9:3d:75:fa:10:9c:e7:fe:
1e:da:d7:21:52:98:bf:dc:f3:74:14:76:c6:01:f9:25:a0:79:
00:5d:16:1a:02:0a:cf:82:c1:21:73:2d:e6:5d:3b:3d:82:c8:
9d:88:51:51:63:c6:50:20:78:b7:97:e6:a7:d5:c7:56:73:ae:
26:cd:90:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 16 02:29:21 2025 by rpki-client