
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: YzTeI0MK2r/OutIMHZIvGamRLDwfRwS/CI8op2s5CI4=
Subject key identifier: 90:6C:C7:E8:0B:2F:E0:06:99:29:D7:21:A8:B6:B1:E3:CB:3D:12:F6
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 01987ABFBDA5DB06F203C3A48E7EB75552EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 161F
Signing time: Tue 05 Aug 2025 15:00:42 +0000
Manifest this update: Tue 05 Aug 2025 15:00:42 +0000
Manifest next update: Wed 06 Aug 2025 15:00:42 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: 8AQVmeG1tBCcWwGWa418PcwrjVq45W9ZIVnNYpBLwsI=)
2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=)
3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=)
4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:bf:bd:a5:db:06:f2:03:c3:a4:8e:7e:b7:55:52:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Aug 5 15:00:42 2025 GMT
Not After : Aug 6 15:00:42 2025 GMT
Subject: CN=906cc7e80b2fe0069929d721a8b6b1e3cb3d12f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:c1:d1:22:d2:b6:d5:96:2e:fc:e2:8c:48:
1d:96:1b:cd:f7:ff:7b:1d:60:73:e5:81:d5:29:a4:
a4:6b:df:6f:56:12:11:b6:4a:58:dc:16:19:4f:f0:
af:19:7f:49:83:0d:b9:95:64:46:5b:b3:a8:5a:db:
cc:b7:e4:8c:de:08:4b:7b:36:60:87:28:fa:f4:e1:
e0:3b:82:e4:af:83:78:0d:f6:b8:cd:c8:65:82:b1:
45:12:6b:66:a1:43:27:ae:47:fb:a4:d7:79:ed:8a:
8e:b4:e7:17:7c:d1:b4:7a:fd:de:99:77:40:de:1f:
9a:83:f6:ef:c2:03:ae:f3:7a:68:b0:f2:79:c2:9f:
56:92:de:ce:0a:47:2e:1d:39:3e:ab:d0:cc:8d:38:
41:44:7a:6b:47:5f:5a:8a:b6:79:9a:f6:a1:d9:d9:
55:7e:fa:22:a3:ba:0c:2b:f8:de:17:41:6a:25:ee:
a4:3a:64:76:59:ab:cb:7e:79:14:b0:37:53:63:42:
04:08:e9:52:f6:59:bf:83:6b:86:a5:db:03:08:4f:
83:af:32:39:26:47:ad:fe:82:56:74:e8:af:44:06:
cc:7c:56:05:9a:0d:3e:e2:8b:02:8c:4a:db:7e:12:
05:e7:2a:9f:25:0b:2e:94:90:54:40:ba:e0:b9:7c:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6C:C7:E8:0B:2F:E0:06:99:29:D7:21:A8:B6:B1:E3:CB:3D:12:F6
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b4:aa:0c:23:6b:35:17:fe:33:fc:be:8a:6c:0d:ff:1f:1a:
8d:dc:bb:8c:fd:4a:b4:a2:58:84:d9:96:60:79:1b:5b:14:78:
7c:15:29:f9:96:93:c0:f5:50:e4:70:fc:17:2b:97:83:4e:0f:
dc:e3:04:aa:24:fd:5b:48:f2:40:72:e0:b9:39:0e:d9:ca:ff:
30:f0:a3:e0:c2:87:7d:2b:e8:c4:b9:e6:cb:76:70:a8:5d:8d:
62:a7:78:46:d5:5e:7e:a6:d1:ce:26:4b:23:e1:c7:c5:a2:66:
e8:42:b0:d6:8e:71:75:26:f1:50:f7:51:2a:5b:4f:fc:a0:b9:
1d:ff:9d:29:27:d4:36:28:e3:02:98:ea:59:b4:25:2b:32:7b:
9a:e6:90:51:d9:0d:0b:8f:1f:6b:65:67:b1:fe:ff:44:b1:0c:
78:c9:65:50:76:23:1e:0a:aa:73:4b:60:53:f8:55:c5:08:5c:
a5:11:e6:48:80:b7:73:53:73:2f:5d:5a:e4:c9:63:56:f6:db:
f7:a6:6a:16:8c:1e:7c:40:4a:2e:f7:84:18:12:c2:0c:de:bd:
6a:44:6f:6d:2a:97:62:7b:2c:44:a3:7a:3c:5d:c4:42:46:02:
52:a5:89:26:87:33:c0:dc:76:e1:e8:3e:6f:98:d4:38:7e:78:
23:d3:24:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:20:49 2025 by rpki-client