Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: LqdY4lAwcmyazJpoPCFGVkzi1W3HsxmEsmI+R4dlMj8=
Subject key identifier: D5:89:5E:D1:75:43:B6:B5:F0:02:F9:31:01:AF:F2:DA:00:C1:E4:21
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 74CD6C0BEDE2BD5849B5ADA9E1B365EE6A7857D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 0562
Signing time: Tue 04 Nov 2025 03:47:33 +0000
Manifest this update: Tue 04 Nov 2025 03:42:33 +0000
Manifest next update: Wed 05 Nov 2025 03:47:33 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: lwJxLNmFBmZ8Lxqm5lG1ladJr4NDUJUj1xNbMRO+eYc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 03:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:cd:6c:0b:ed:e2:bd:58:49:b5:ad:a9:e1:b3:65:ee:6a:78:57:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Nov 4 03:42:33 2025 GMT
Not After : Nov 5 03:47:33 2025 GMT
Subject: CN=D5895ED17543B6B5F002F93101AFF2DA00C1E421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:93:86:87:cd:6f:c1:c2:71:c1:6a:79:97:66:
63:8a:ce:ab:a4:80:3d:d6:09:8c:8f:0e:17:24:35:
e0:c3:94:87:db:52:df:43:34:23:35:13:e2:10:ad:
8d:cb:b3:f4:2e:7d:1b:06:3d:2b:e8:0e:14:c9:45:
c1:ad:a9:54:58:9f:12:75:d4:9d:34:07:4a:a9:fe:
90:de:f8:de:ee:b6:de:9a:1e:d6:a7:d8:09:02:62:
c8:3c:be:d0:47:77:5e:12:74:4a:5a:53:30:74:b8:
ec:45:af:88:ea:83:5f:01:6b:16:88:02:53:08:49:
d7:e0:97:a3:3c:87:00:24:14:a0:c6:82:35:62:1b:
ec:5a:4b:d9:d1:5b:9c:b9:a5:28:a8:7a:82:5e:1a:
a7:c8:f4:c4:b1:d4:46:5d:a8:3a:a5:d5:43:ea:6b:
01:44:1c:20:44:09:24:03:13:09:da:fb:4c:2b:c9:
e3:93:c4:89:f6:8b:af:b3:60:8e:38:97:c1:39:54:
eb:48:19:a3:cf:f0:82:95:c1:39:16:30:1c:1d:44:
b0:a6:f7:31:3d:b3:b3:d0:05:38:ee:2b:09:9c:0e:
50:73:97:b4:93:25:5e:ca:36:84:26:6c:ba:07:e9:
5b:e8:0d:6b:5b:7a:18:6e:e1:ca:b1:c9:7f:f1:b6:
65:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:89:5E:D1:75:43:B6:B5:F0:02:F9:31:01:AF:F2:DA:00:C1:E4:21
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f0:c8:45:c6:0d:81:3d:e7:67:a6:9a:13:50:7a:e2:f7:81:
36:64:36:57:af:34:07:6c:44:fe:59:f0:20:7a:8a:24:11:81:
88:9e:23:9d:82:dd:b0:b7:fc:90:91:77:f2:c1:8b:40:8b:c0:
29:5d:4c:88:30:3c:27:0e:22:01:24:b6:95:70:eb:c1:3c:8b:
eb:55:71:93:5d:1b:ed:87:28:cb:cf:40:0c:01:81:bf:96:0f:
b8:18:bc:70:44:f4:55:16:82:0c:ba:aa:6d:78:23:dc:6e:86:
6e:be:41:5e:e0:6e:56:af:5a:53:27:70:a5:59:6e:0d:74:21:
0f:64:76:cf:1e:f2:3b:57:9a:36:85:5c:0c:82:54:ea:2b:be:
bd:98:c0:9e:2f:7f:ee:1e:97:8b:6f:3c:0a:6f:88:73:ed:e7:
e6:bb:35:e2:0d:87:fa:9b:ef:e5:0d:b2:e9:f9:2c:96:4a:ed:
4f:6e:24:71:d2:a4:da:cc:47:fd:a6:a6:5b:5f:2b:6d:11:d7:
69:49:5c:5e:b9:c5:f8:76:ed:70:36:c4:33:1c:85:b1:f7:1f:
a7:ce:46:d0:53:f2:e5:e8:08:d5:28:7b:fa:71:a0:f7:d1:23:
02:7f:80:b6:ce:09:2e:16:8f:0e:f6:d8:eb:1f:df:53:cb:4a:
9d:0c:19:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:20:27 2025 by rpki-client