Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: w0MVbcqLk2zcAbshhFa4YwUPcYQpbIME0YJaWP2FzFQ=
Subject key identifier: BC:1F:04:9B:5D:E3:01:37:F8:BA:A6:93:4B:7A:EF:BD:A5:6D:3E:4E
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 01987DF86DF78F6498A71F1DB4B4D2468958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: 96
Signing time: Wed 06 Aug 2025 06:01:29 +0000
Manifest this update: Wed 06 Aug 2025 06:01:29 +0000
Manifest next update: Thu 07 Aug 2025 06:01:29 +0000
Files and hashes: 1: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: 10CtEg5Cts4sy/mwi43+TURnUzMkIM59rWOyZ4h6s4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:6d:f7:8f:64:98:a7:1f:1d:b4:b4:d2:46:89:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: Aug 6 06:01:29 2025 GMT
Not After : Aug 7 06:01:29 2025 GMT
Subject: CN=bc1f049b5de30137f8baa6934b7aefbda56d3e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:b2:86:2f:07:6a:43:cd:1d:79:29:99:6e:
b2:69:33:81:db:d3:98:13:7f:7f:f4:50:cd:4a:e6:
9a:63:f7:cc:db:d2:9f:f6:1a:bf:ff:b9:0b:e3:20:
53:a2:4b:3b:92:7a:52:a2:54:33:c1:14:7c:85:73:
04:9f:8a:0d:25:a8:57:38:fd:78:07:08:bd:77:81:
b2:a1:a7:a4:6c:e1:23:55:f7:3b:13:5c:40:ec:b8:
f9:52:07:d4:89:60:e4:21:e2:71:f9:1d:0e:8e:e3:
ac:0a:e9:0a:de:52:cb:e4:c6:d2:1e:c6:19:da:84:
1c:36:04:8b:f2:cf:de:c0:4a:09:c7:6e:8b:44:04:
86:af:b9:27:2c:a0:e1:25:87:51:97:e6:09:b2:59:
d9:7d:ab:f0:09:a0:7d:d3:dc:4a:bd:8a:e5:5f:4c:
9f:76:90:c7:95:4b:35:30:85:8c:9e:c5:93:40:54:
ff:5f:70:89:b3:b6:61:80:35:9d:f0:71:31:37:d7:
b3:3e:bf:94:1c:59:d3:da:ca:59:7b:e7:a6:5d:a1:
0a:0a:f1:22:3f:16:bf:2c:e5:16:56:40:99:b7:ee:
43:d9:b0:dd:d8:c2:2c:4f:d4:e7:0f:5d:45:7b:79:
44:a0:55:ac:3d:bd:23:1c:51:6a:8b:96:3d:87:16:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1F:04:9B:5D:E3:01:37:F8:BA:A6:93:4B:7A:EF:BD:A5:6D:3E:4E
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1a:0c:07:a7:81:1c:8f:c6:a1:00:ee:05:7a:60:48:fa:85:
b7:6c:6b:c1:66:64:90:b5:d7:a4:9b:7b:78:d6:83:f4:e2:e3:
b9:00:c7:d7:8e:4d:a4:3f:7d:cd:27:b7:c3:f5:d3:2a:d5:19:
14:91:18:a9:47:e1:9a:7c:37:72:8d:e3:4f:7e:4f:be:84:8e:
6a:7e:eb:db:35:84:1d:2f:c6:2e:5f:83:bf:8c:ad:f4:04:da:
6e:78:27:5f:cd:a8:d5:f7:55:eb:6b:b9:7a:02:10:2b:b2:b7:
55:89:e4:05:d2:43:00:b3:cb:0f:68:08:d8:58:74:09:0c:02:
0f:7e:49:30:e5:f5:39:74:a8:74:cd:0e:d3:7b:d0:2c:4c:fe:
fd:d0:68:7e:d9:06:f2:d3:69:71:01:63:fe:89:8b:04:74:2a:
96:ee:45:c3:3a:30:67:95:95:87:63:af:64:1f:47:20:bf:6d:
58:04:d1:c4:51:84:43:cf:ff:56:83:64:88:c6:fa:34:fb:11:
14:3b:8c:72:d6:ba:9e:4b:a8:e1:1f:5d:77:72:f3:ee:37:10:
21:fa:5c:6b:5f:41:9c:c2:db:d1:3a:d2:37:d2:35:8e:4b:1d:
ff:5e:f5:f9:e7:a3:f0:02:e3:1f:0e:50:84:bf:ac:64:f0:3d:
e6:08:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:02:47 2025 by rpki-client