Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
File: PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json)
Hash identifier: 35KxwVlfGwNZi6sGZdTuPjuYvmBnodVSGMvfvfRGvtg=
Subject key identifier: D8:5B:B3:80:18:4B:8C:B3:B8:8B:3D:1B:D6:75:90:87:F5:30:87:38
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Certificate issuer: /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial: 019872CF446594C1001F78077EDF4771BF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
Manifest number: 04F8
Signing time: Mon 04 Aug 2025 02:00:42 +0000
Manifest this update: Mon 04 Aug 2025 02:00:42 +0000
Manifest next update: Tue 05 Aug 2025 02:00:42 +0000
Files and hashes: 1: JTpkIG2gAi87qZ4MaDyiSAhDmGs.roa (hash: pqYQEm9FQENA5hwqBQ6sbfRExLr5G9tm4QJ0ttI7KnA=)
2: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: X32ch0UipEBoKQV1ywrO54PmgusVWt4PbtBGdhaipxw=)
3: p62oDeoT4vvUHo4yGegZ6_TWKY0.roa (hash: JITepKVcCtsEzEyKS9PibwaqvpfOsAJXxc4iERP2W4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:44:65:94:c1:00:1f:78:07:7e:df:47:71:bf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Validity
Not Before: Aug 4 02:00:42 2025 GMT
Not After : Aug 5 02:00:42 2025 GMT
Subject: CN=d85bb380184b8cb3b88b3d1bd6759087f5308738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:ac:99:7d:31:0b:40:36:72:a1:b6:94:ec:
ce:35:a4:61:7c:23:39:6b:ba:58:cc:96:5c:81:80:
d5:a0:44:c7:88:c9:16:a6:76:d2:10:10:db:5f:75:
43:43:63:37:20:dd:08:0a:09:9b:83:10:58:a2:db:
02:99:46:19:d7:ab:f5:00:d1:f3:7e:c1:4c:20:41:
47:a0:f2:91:8a:2e:a2:26:a4:90:1d:88:b7:a8:20:
0c:49:e2:35:a4:72:57:8f:10:9b:c1:b4:41:d9:8d:
2a:73:60:d9:91:b1:0e:87:9f:e5:eb:9b:6e:cf:e5:
46:94:6d:1b:f5:b4:dc:4a:83:c5:06:74:04:2a:65:
60:00:66:d8:d7:60:6c:fc:0a:ae:85:b9:30:4c:7c:
16:a9:e6:bd:46:0d:82:d2:1d:9a:fe:ae:59:ac:3f:
49:89:0f:25:fe:6d:40:9d:26:14:ee:c8:c8:9f:de:
dc:f5:ae:ca:4c:40:aa:77:9c:14:5b:61:a0:2d:b7:
15:1d:1a:f9:40:40:45:ea:b6:fc:41:c0:4d:1f:48:
a3:45:ae:db:3b:4f:72:f1:ec:d2:ed:47:38:8a:d5:
59:8f:19:d5:0c:17:b4:c4:82:ab:01:fb:43:45:5d:
6f:c3:95:3c:62:69:e3:39:02:2d:54:9e:f0:91:67:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:5B:B3:80:18:4B:8C:B3:B8:8B:3D:1B:D6:75:90:87:F5:30:87:38
X509v3 Authority Key Identifier:
keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8e:17:97:a2:0f:a3:41:75:85:96:08:3f:ea:f2:62:6a:9b:
82:54:fe:87:9b:07:7c:ac:42:83:f7:ae:7e:a2:c0:d7:bb:46:
61:01:6e:9b:39:79:2a:ff:a3:15:f3:92:d0:54:f2:2c:25:11:
ff:44:53:4d:70:6d:83:36:73:81:d7:7e:d7:e2:f4:a1:54:5b:
39:4d:0f:ff:9b:af:68:0d:78:f8:9f:cb:04:87:91:4c:38:74:
95:30:9e:fb:02:a6:35:27:c0:de:32:b9:d8:fc:0a:7d:49:71:
c3:d2:81:ff:d0:21:91:53:aa:39:06:81:45:37:02:95:cd:c9:
fe:c1:e6:c9:50:30:6c:36:4b:ed:66:9d:08:d7:ad:82:0f:de:
7c:d8:50:65:86:78:30:9b:aa:bf:b1:55:82:d0:5f:90:e9:b4:
bb:cc:50:0e:56:57:79:5c:3c:8a:a7:ce:ab:16:9f:86:57:83:
d1:2b:6a:ea:5e:af:bd:0f:16:65:80:d5:91:e2:d4:5d:5d:8b:
05:1a:8a:41:12:62:89:7c:ee:72:39:3d:a7:d4:4d:bd:cf:24:
25:ab:33:a5:ff:0a:a7:13:5c:50:b1:5e:0c:49:12:69:bb:fe:
98:ba:f4:ec:e1:a3:c6:d3:8a:71:b2:d8:5e:df:27:98:20:1f:
68:b0:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:05 2025 by rpki-client