Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
File: 29B3gCIiIDwWzo6v1Z8LCsHb58M.mft (raw, json)
Hash identifier: rnjoopInxqaId/ee4nhPWNnxwMNguNm8wKwocZInWQE=
Subject key identifier: 4D:EC:5E:2B:30:ED:72:94:4C:D3:38:F7:1B:E0:32:92:FC:87:0B:5A
Authority key identifier: DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
Certificate issuer: /CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Certificate serial: 01976F2C7930EC00791AA72D64FEA853CC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
Manifest number: 0E45
Signing time: Sat 14 Jun 2025 16:01:14 +0000
Manifest this update: Sat 14 Jun 2025 16:01:14 +0000
Manifest next update: Sun 15 Jun 2025 16:01:14 +0000
Files and hashes: 1: 29B3gCIiIDwWzo6v1Z8LCsHb58M.crl (hash: z+ZL89FxUDPGVWYoNJGV2tS44GQd2ObPBrkDmzKdXcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:79:30:ec:00:79:1a:a7:2d:64:fe:a8:53:cc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd077802222203c16ce8eafd59f0b0ac1dbe7c3
Validity
Not Before: Jun 14 16:01:14 2025 GMT
Not After : Jun 15 16:01:14 2025 GMT
Subject: CN=4dec5e2b30ed72944cd338f71be03292fc870b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:71:96:dd:03:6d:6f:36:91:70:15:4c:28:57:
c3:cd:0a:d3:34:16:a8:94:03:a3:55:87:cc:2c:b2:
2f:a8:23:57:2c:a2:f5:83:8f:91:c8:2c:2e:a0:45:
b4:4a:ef:72:c4:e9:3f:19:0b:0c:39:4a:18:2c:18:
36:c1:d8:fc:75:cd:34:f7:34:69:6d:c3:6e:24:cd:
86:e1:88:5b:14:96:dd:be:f2:b4:09:ee:58:d7:b8:
ee:6a:79:52:9d:bf:7a:36:ac:a0:26:17:74:b2:f9:
f1:59:b1:a1:f4:47:df:68:97:be:57:61:0d:e9:34:
ca:69:8c:40:25:aa:d4:1b:1e:e3:fb:11:0c:9f:2c:
53:21:2f:af:2f:93:19:b6:3d:b7:d4:bf:21:c4:92:
88:ad:14:bc:27:cf:d8:10:47:1c:62:a2:38:9b:63:
28:dd:35:69:23:98:91:1c:23:2f:31:fc:46:29:d9:
37:ad:19:ed:78:19:af:26:5a:46:56:5c:fa:e5:63:
ea:73:86:9e:c2:8b:f6:a4:37:52:a2:7b:5c:30:6b:
af:68:bc:a2:d2:b4:34:7f:47:fe:4c:1a:b3:87:f9:
5b:bd:b7:f2:f6:bb:86:48:20:eb:3f:d4:f2:84:39:
bf:33:98:5d:6f:2d:5a:10:96:02:ab:c7:f4:0a:32:
b3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EC:5E:2B:30:ED:72:94:4C:D3:38:F7:1B:E0:32:92:FC:87:0B:5A
X509v3 Authority Key Identifier:
keyid:DB:D0:77:80:22:22:20:3C:16:CE:8E:AF:D5:9F:0B:0A:C1:DB:E7:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29B3gCIiIDwWzo6v1Z8LCsHb58M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa094-efa5-4cf7-86b0-5dd94529eeea/1/29B3gCIiIDwWzo6v1Z8LCsHb58M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ae:5b:b5:ad:fe:20:e9:3d:49:90:3f:99:76:65:67:b7:5e:
03:ac:3e:1d:e8:a4:fb:ba:91:99:a2:5d:8c:05:5d:cd:4f:ad:
a5:e2:df:62:07:ee:21:47:95:b6:e8:d2:50:73:6c:52:31:7c:
ea:11:5b:1a:21:82:8e:a4:14:e1:c6:86:42:e7:38:63:ce:11:
c4:e0:84:3d:8d:7d:64:a0:98:5f:e3:90:b7:00:0d:bc:99:8a:
8c:c8:f1:2d:6e:b5:49:1f:52:d7:31:fd:08:e5:de:84:9d:f5:
7a:9b:09:fc:46:86:ab:2d:a6:f7:c0:48:72:11:44:e4:3f:43:
ff:eb:7d:0e:04:2c:13:10:29:49:13:5c:66:89:9c:91:63:c9:
73:af:f2:f0:e7:56:dc:f7:db:80:12:38:27:bf:fc:0a:88:0d:
11:58:a5:48:df:12:b5:7d:76:4b:3a:cc:a3:4a:59:83:c8:f9:
19:78:1f:93:2c:de:4b:55:b3:86:28:f1:9c:42:3b:1d:92:55:
74:ab:c5:ed:23:2e:e3:59:2d:9a:c6:7f:d0:48:c9:34:d8:1f:
db:0d:28:fd:6e:ef:5e:63:5b:d6:2e:52:53:5f:f2:88:55:4a:
a4:76:b7:ee:a5:29:3f:31:0f:02:1b:f8:32:2c:ad:38:b3:96:
5c:80:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:47:16 2025 by rpki-client