Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: B6OrvZDuP0K3M6AHTRb5ZZKtgEjclguoZj3w6krsylE=
Subject key identifier: CB:5F:3D:4E:B6:05:54:AC:6B:A2:BB:D3:CF:0A:11:6C:2D:01:25:59
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 019A4EF4ED0F0D69C1CA80F73CCFC081C032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 1449
Signing time: Tue 04 Nov 2025 13:01:05 +0000
Manifest this update: Tue 04 Nov 2025 13:01:05 +0000
Manifest next update: Wed 05 Nov 2025 13:01:05 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: pAMJxEF1dP8V1QhsMFeajeBo4HYMcVfaB7gi5GJxYJk=)
2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ed:0f:0d:69:c1:ca:80:f7:3c:cf:c0:81:c0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Nov 4 13:01:05 2025 GMT
Not After : Nov 5 13:01:05 2025 GMT
Subject: CN=cb5f3d4eb60554ac6ba2bbd3cf0a116c2d012559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:46:4c:f0:71:b3:3a:81:ee:84:41:fc:ba:
a5:91:f7:d9:dd:c5:0f:58:f8:3b:60:9c:87:a8:5a:
32:88:c0:cc:6e:cb:e1:34:a4:fc:c8:38:ef:d3:c4:
5e:98:3b:34:27:99:c6:7d:d2:75:1c:ae:1c:53:38:
a5:45:ec:dd:b0:33:c8:9f:50:97:2c:6f:d5:d3:3a:
9f:bb:85:81:f9:ea:f6:a0:3f:d2:90:4b:84:09:0e:
39:5c:9f:30:d1:44:eb:c9:77:1c:33:b4:66:9f:c8:
6e:93:73:5d:c3:b6:07:49:5e:4c:49:f8:75:5a:fe:
eb:3a:29:02:9e:e6:26:80:cd:ad:b1:63:92:42:9b:
15:d4:d6:6a:be:15:09:8f:ca:8d:10:da:52:72:2a:
ca:d4:13:80:85:71:d3:59:3f:d7:e5:58:ef:9f:fa:
78:60:03:f5:f4:66:86:98:f7:a9:a6:eb:cf:ec:33:
ea:34:bc:a7:6c:6d:dc:55:c1:92:9c:c8:55:99:cf:
56:28:e6:f5:31:8c:26:b3:2e:a8:ea:55:9c:98:54:
3e:59:b8:04:74:5a:91:d6:09:b0:93:df:2a:c2:5f:
a1:0b:a0:8e:2f:98:0f:51:b7:70:53:17:80:61:09:
94:82:60:1b:7d:7f:89:f2:bb:9b:b0:98:06:44:53:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5F:3D:4E:B6:05:54:AC:6B:A2:BB:D3:CF:0A:11:6C:2D:01:25:59
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fb:1c:d7:84:08:2f:a6:98:28:1f:5d:c6:02:4f:b3:73:8f:
aa:b4:4a:36:ac:b1:a7:00:a4:3f:86:b7:93:c3:6e:8e:8a:2a:
4f:11:b3:31:b8:bc:03:d1:90:39:ee:e6:b3:61:1f:84:61:6f:
08:6f:fc:89:bb:08:bd:d6:34:94:aa:b9:28:27:d9:b4:cb:a7:
a3:b1:8c:dd:42:b2:10:66:37:97:1a:bf:70:28:db:f2:93:f1:
6b:e7:25:b4:b6:a7:73:25:9a:f4:cd:24:35:3b:8f:a7:e8:ae:
59:c8:0a:1a:de:24:43:81:10:c0:76:34:27:64:af:32:3b:3a:
2a:fa:20:61:30:85:bb:8e:e2:4c:6e:46:62:1f:f6:17:f9:05:
f8:ed:c3:0a:02:16:cb:c9:78:db:ab:da:ea:d1:9d:21:65:7a:
50:36:5b:26:46:37:10:55:26:e6:12:b4:87:ea:81:5b:75:34:
26:fa:8d:a1:13:37:52:0f:f0:ae:9a:60:0d:a7:59:42:4a:54:
d2:e1:ee:63:57:73:b5:82:40:2b:ee:e9:0b:2d:71:bd:92:f0:
7b:a2:1f:4d:eb:c1:00:99:9a:85:61:ca:0f:56:30:63:08:26:
b6:2a:fd:b0:d8:cb:33:9e:3d:12:0e:8d:97:d9:64:2b:5a:14:
2d:73:1c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:48 2025 by rpki-client