Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: q+UJNudnhJgYeoxNYbxJSYWg1rhcLGo8BxE0fUoRVUo=
Subject key identifier: D3:45:B3:F5:0A:2D:86:EF:C8:47:00:78:07:E6:C0:14:BD:58:22:28
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 01976E50924D8309024832EB2D93FAC82C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 12:01:03 +0000
Manifest this update: Sat 14 Jun 2025 12:01:03 +0000
Manifest next update: Sun 15 Jun 2025 12:01:03 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: szPIhCoQuF2R6tT30XLUhXRUEfzGg8jQtQciEpyU9xs=)
2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=)
3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=)
4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:92:4d:83:09:02:48:32:eb:2d:93:fa:c8:2c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Jun 14 12:01:03 2025 GMT
Not After : Jun 15 12:01:03 2025 GMT
Subject: CN=d345b3f50a2d86efc847007807e6c014bd582228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:4f:55:40:af:1d:4b:a4:e4:8a:34:45:86:
5d:73:26:eb:95:e1:3f:4f:27:be:d1:b3:b3:eb:36:
57:f9:1e:a1:6c:81:81:74:1d:a6:1e:01:e8:d1:2c:
24:71:7e:38:d3:a5:6b:8c:64:9c:e9:7d:3a:c3:2f:
51:5a:48:9a:be:b6:38:36:99:5d:06:38:b0:85:58:
bf:29:7d:5f:4e:a1:fb:76:72:9e:3d:f9:c2:1f:ef:
82:11:24:ca:f8:2a:27:d4:6e:49:dd:ee:d6:66:42:
f3:d2:fd:72:bc:22:b3:ef:d2:c3:7f:87:21:88:dd:
15:48:1f:e2:72:8e:3f:2f:05:f0:da:e1:92:f4:8c:
cd:c0:67:10:52:15:9b:d4:1a:96:dd:aa:5f:4b:af:
f8:70:1e:c5:6f:78:0b:2f:d1:d2:7e:e9:da:17:b4:
aa:b1:7f:3d:cc:2a:d5:a7:3c:d4:f3:c9:15:31:ee:
fc:b8:a4:70:d8:cd:03:d4:75:c5:b2:cb:03:df:c4:
4a:81:23:9b:0c:cc:80:31:ac:55:95:71:3a:a4:61:
a6:04:e9:1b:28:52:48:41:31:1f:8a:2d:12:98:75:
13:08:1e:f1:c8:61:fc:ee:86:ac:57:99:da:ce:95:
df:b6:01:39:a2:77:c6:56:6f:4b:fe:53:d0:03:7e:
b7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:45:B3:F5:0A:2D:86:EF:C8:47:00:78:07:E6:C0:14:BD:58:22:28
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:73:01:9a:cc:04:83:47:18:e6:e2:c2:40:e1:ff:0c:19:8d:
1e:02:18:63:42:36:b5:72:c4:64:1c:e5:4f:95:87:75:9c:f5:
f7:df:f7:54:5e:f6:43:fb:17:45:27:f9:df:30:d1:58:48:25:
d4:2b:f0:34:a1:27:4c:20:ba:3b:88:b3:fd:31:ed:d6:b9:fa:
9a:86:30:6c:32:2b:1f:2c:0d:1f:71:c1:94:1d:1b:a4:5b:00:
cf:1b:ea:73:45:2c:a9:1c:48:23:b8:2e:c0:4c:a5:81:7f:6f:
83:07:96:9b:cf:f2:ab:5e:3c:74:84:33:49:46:d4:2c:2e:38:
ad:e0:c9:41:64:44:26:76:74:be:88:1d:54:b4:0b:e4:a1:cd:
43:a7:ad:43:3f:55:58:d4:b9:d3:f4:3e:29:b1:6c:b2:fa:27:
86:8f:5f:c4:7e:23:3e:06:e2:04:fa:37:52:56:f1:cf:7f:ba:
f7:ad:ff:6e:42:ee:1a:d1:5a:0a:28:1e:70:10:98:4d:94:d4:
7a:c0:a1:75:26:33:01:d3:5c:fc:91:25:8d:38:e6:3b:6a:b7:
32:c6:07:5f:c5:88:7c:d1:ba:0e:23:e7:60:24:a6:c6:a3:f7:
f8:57:7e:3c:24:6b:27:13:f1:c5:5b:25:cc:29:3b:bb:50:bc:
3d:81:9e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:52:50 2025 by rpki-client