Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: 3T4HEohhUTua9lz9ttggyRSTdbOOk6RdJmFkyFYxUkM=
Subject key identifier: C9:D8:D5:A6:5A:BA:35:CD:B9:95:DF:0A:06:45:DC:65:5B:6B:62:1E
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 019769299B6E48BC3CF4769299E9ED3E06B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 12:00:23 +0000
Manifest this update: Fri 13 Jun 2025 12:00:23 +0000
Manifest next update: Sat 14 Jun 2025 12:00:23 +0000
Files and hashes: 1: 16VwzWVgNRyLCtAXch9PWfSWgeM.roa (hash: C203Vfz7VUs5MzzkDe6+jJ/0Hm3QJ8YvUWmNLcGjW6Q=)
2: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: zAnK9ba9plZNkArTzj9/+ovsZPYhGZJVGubcNqnHaRs=)
3: si754UrpKqsViXC-aHyx2LtipFA.roa (hash: VCYyh8ACSkDGJLu/cfRmB43QT8YqJ4jUUodjDefcg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:9b:6e:48:bc:3c:f4:76:92:99:e9:ed:3e:06:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Jun 13 12:00:23 2025 GMT
Not After : Jun 14 12:00:23 2025 GMT
Subject: CN=c9d8d5a65aba35cdb995df0a0645dc655b6b621e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:d9:3c:62:78:d3:97:d4:60:e7:e9:06:90:
7c:49:b1:82:c5:24:65:8b:61:17:fd:07:e3:36:bd:
b7:b3:27:20:fb:be:c8:8b:92:4b:cc:20:26:c5:ac:
b4:b8:76:d9:e9:e4:5f:04:14:c3:58:a4:b1:d5:51:
f7:25:d1:98:49:c2:8a:da:f9:a8:7e:24:35:99:82:
6a:a9:9d:8a:91:f8:9b:b4:be:0c:bd:f0:06:2e:73:
bc:09:c4:e6:22:1a:af:cf:b3:52:36:a7:fa:8f:73:
45:c8:d9:1a:df:a2:37:b8:82:83:c7:f9:fe:fc:53:
df:db:eb:82:b6:13:ab:04:9f:4f:eb:68:3d:4d:ab:
97:5d:8f:e7:41:b5:e3:9a:f6:39:fc:e1:45:2e:00:
a8:b2:d8:a1:af:1e:a6:15:25:40:1e:3a:84:9b:e4:
8f:0a:7c:34:2c:bf:38:ff:1b:75:60:99:74:d6:75:
e5:25:98:77:c3:c8:d4:04:e8:06:59:68:af:1f:af:
80:9b:99:04:cf:e0:77:4d:55:b1:80:e0:ec:b5:4f:
db:ba:7c:34:d2:19:97:58:46:c0:d6:6a:a1:13:d6:
b4:e9:2c:ab:fe:b5:8b:4b:68:9c:61:a2:2c:a3:0f:
f1:aa:5d:e8:8c:58:70:78:64:e3:1c:c6:49:37:b6:
91:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D8:D5:A6:5A:BA:35:CD:B9:95:DF:0A:06:45:DC:65:5B:6B:62:1E
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:af:6e:2c:0d:8e:36:93:50:57:45:46:2d:47:1f:ba:04:86:
28:c0:47:ca:f8:29:08:e9:4f:a4:a2:f3:b8:e6:44:d5:84:7a:
1a:84:ba:de:e5:3d:34:1a:59:28:6c:21:79:ab:e4:44:8e:f0:
82:91:4a:4b:8a:7a:95:d6:12:5b:9e:f5:d9:a2:16:8e:aa:cf:
52:1c:4a:99:6c:6b:eb:a2:b8:97:4e:39:a2:48:d1:8f:83:00:
b9:60:fb:0a:89:a8:92:3c:3a:91:25:35:61:e6:e4:a9:4c:fe:
f6:58:de:97:6c:1a:d8:2e:32:d4:e1:61:03:d9:f4:1b:ce:82:
06:1a:5e:22:23:84:80:a4:a5:51:49:63:33:c5:2d:e9:b7:99:
7a:12:40:cf:fc:3d:31:d2:70:76:1a:4f:d2:ec:a1:2d:5b:e6:
6f:6b:86:5f:0f:cc:26:9c:59:05:f2:de:fc:15:90:82:fb:82:
e1:50:d0:2c:10:a9:b4:95:3b:a7:cf:07:41:23:38:19:b2:30:
0e:cc:45:c2:64:b9:7b:24:58:e0:25:ab:e7:d2:3f:0b:51:a5:
cf:d0:9f:fb:e7:ef:17:b2:81:0e:fc:e6:eb:b5:f8:d5:b7:f8:
b3:4e:4f:9b:dd:df:47:28:52:98:ce:01:ea:95:83:0b:a3:8f:
2f:dc:39:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:19 2025 by rpki-client