Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: jtacCBgEhrMtTHrDxRh83uPNosnhEk1kRpIjzbN6gM0=
Subject key identifier: 5B:55:5B:8A:DE:FB:D0:2A:51:91:80:D6:5A:17:82:40:C2:31:E1:79
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 0197808E40404A1E174784849D91716EAF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 12D5
Signing time: Wed 18 Jun 2025 01:01:35 +0000
Manifest this update: Wed 18 Jun 2025 01:01:35 +0000
Manifest next update: Thu 19 Jun 2025 01:01:35 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: jxBTI03RYRExtpNlpuoVFJTW6vAFPb0SH4UJxsYHpz0=)
2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:8e:40:40:4a:1e:17:47:84:84:9d:91:71:6e:af:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Jun 18 01:01:35 2025 GMT
Not After : Jun 19 01:01:35 2025 GMT
Subject: CN=5b555b8adefbd02a519180d65a178240c231e179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:52:e1:a4:e7:4a:02:52:4e:b8:cf:02:0d:
46:0d:1f:75:16:b3:1e:bb:99:f5:04:6e:cb:66:14:
76:90:06:ef:f0:ff:49:63:4a:cf:fa:5f:10:5b:ee:
82:80:ae:34:80:b5:e4:c5:d4:e0:55:44:96:89:c8:
5c:03:a5:19:88:cb:1e:55:c4:0e:ef:ae:79:49:f1:
92:d9:08:cd:38:a7:8c:f6:df:9f:f0:da:b8:f0:60:
e8:99:6b:66:60:8a:9d:31:93:1a:5c:e4:5a:4a:23:
0f:5b:03:39:74:50:d4:f2:47:f5:7c:93:f5:21:0a:
90:25:6a:70:f4:8a:aa:72:28:8b:6c:5c:1d:21:75:
8e:6d:6d:c9:1c:7d:dd:2a:ee:fb:41:e8:8d:9c:05:
e6:db:41:d5:bc:3e:e0:9d:39:2a:c5:28:ec:e4:68:
6c:ba:b6:50:ae:03:48:10:cf:28:85:c2:10:83:78:
2f:5f:e2:f3:75:10:68:af:38:a0:ea:cc:c1:fa:e0:
e2:93:bc:b2:4f:40:dd:c0:ef:2e:33:fc:9d:0d:7c:
61:67:f4:fb:e7:76:d8:9d:1e:a6:eb:dc:22:1b:79:
0b:51:0a:dc:13:3b:9f:fd:8d:a8:e6:d4:b0:27:15:
7b:5b:25:e7:a9:06:eb:40:5e:14:6c:6c:fc:db:72:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:55:5B:8A:DE:FB:D0:2A:51:91:80:D6:5A:17:82:40:C2:31:E1:79
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:a7:1d:57:31:70:20:af:d6:7e:bf:d7:de:a8:e9:13:72:
61:4f:03:22:6f:5d:e2:54:6d:2f:88:87:1e:9e:26:8f:78:b3:
2c:cb:67:80:bf:11:1d:95:52:9e:f2:78:bc:9a:6e:01:2f:df:
56:dd:aa:b3:e9:39:33:e6:bf:bd:97:94:58:17:f5:61:7c:84:
4f:3d:e2:3c:31:d8:5c:b0:0c:c1:d9:46:e9:82:9a:e2:27:05:
e7:cd:6d:d4:89:bf:89:d6:6d:6d:42:f0:b1:58:df:7d:35:2a:
1f:63:7f:80:c0:2e:28:d6:a1:3f:14:f7:54:80:49:29:fd:13:
0c:48:e3:8a:ed:5b:00:66:91:a4:87:d4:b0:04:d9:02:4f:a3:
e0:69:f9:6f:2d:80:0c:94:c4:e1:4c:5f:bf:42:93:16:60:b9:
d0:57:e8:03:4a:08:17:b6:f9:e7:05:d1:c5:18:1b:09:a2:66:
81:42:77:8a:d4:a4:3f:07:b8:67:d4:ad:05:c0:1b:c3:59:3c:
b4:19:27:a6:29:e6:8c:e1:71:0c:c8:97:29:f1:7b:3a:62:fb:
57:b7:0e:22:70:59:56:f8:33:d5:71:00:2e:6a:cd:bc:3d:68:
76:68:0e:83:af:83:cb:d7:8f:dc:8f:95:e5:b9:09:ba:7c:43:
2c:16:c3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:08:02 2025 by rpki-client