Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: Y9VeWr7iS9jQiatjEXiiWpZhKQibooHyiEn555SO104=
Subject key identifier: 5A:A5:4C:B9:9F:F1:B2:55:2A:79:7E:A4:CE:6C:F0:DC:F5:C6:D0:5F
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 3C0998661D7295137DA7BD6C22DF4475181D3C44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 0499
Signing time: Sat 14 Jun 2025 08:24:21 +0000
Manifest this update: Sat 14 Jun 2025 08:19:21 +0000
Manifest next update: Sun 15 Jun 2025 11:56:21 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: ByIwR5ETENt1KlSXXxzFmqrD1iLeNVPinXhRkOkM3xg=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:09:98:66:1d:72:95:13:7d:a7:bd:6c:22:df:44:75:18:1d:3c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Jun 14 08:19:21 2025 GMT
Not After : Jun 15 11:56:21 2025 GMT
Subject: CN=5AA54CB99FF1B2552A797EA4CE6CF0DCF5C6D05F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:cc:40:c0:61:cf:df:bc:a0:df:cb:fb:d7:
54:fb:a7:5b:ed:fd:ca:7c:2c:98:55:51:81:d8:08:
e1:70:43:b4:98:6c:fe:a1:94:a5:0a:93:6f:d8:42:
da:f7:23:9a:10:59:31:02:ba:cc:cf:ab:cb:50:22:
e6:77:bd:a8:79:18:66:4a:c4:0f:02:33:d9:67:75:
cc:a9:8e:4f:96:a3:7f:70:dd:a7:c7:c9:a7:ed:51:
a4:9a:53:83:37:68:c9:e4:c9:77:a0:ff:54:1f:8d:
1a:09:95:f3:9f:cc:fc:39:3b:c6:b9:4f:4a:8a:54:
fa:bb:a1:6d:ab:73:72:27:4b:cb:24:8a:fd:f6:b9:
12:c6:41:85:33:bc:ed:d5:24:15:65:c1:75:31:62:
b0:19:d0:a6:43:9e:2b:48:5e:38:80:75:f8:86:a4:
f1:b8:a6:16:95:4c:e7:7a:17:1d:8e:81:e9:43:9f:
5e:6b:75:20:45:8d:9c:e3:ee:e7:13:ba:5f:d7:0f:
36:e5:b3:e0:ee:51:d6:58:37:f6:82:05:5a:42:7f:
f0:ad:b9:75:2b:11:c7:7f:11:73:83:5a:df:d3:b8:
4c:f5:f9:8c:b3:7b:d2:6e:4f:e9:8b:af:81:d4:11:
6d:62:b6:25:b4:10:8c:df:12:2a:10:23:00:2e:9a:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A5:4C:B9:9F:F1:B2:55:2A:79:7E:A4:CE:6C:F0:DC:F5:C6:D0:5F
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:be:92:7a:ee:7d:80:13:d1:cf:b1:24:e4:9a:eb:d6:92:7d:
49:cf:e5:35:6d:c7:75:8d:ad:37:17:37:7c:cd:7f:b8:34:d5:
00:d2:dd:41:f6:24:87:9f:10:23:06:fb:30:6c:88:0e:cb:d7:
fb:25:24:2d:83:e5:34:13:37:95:10:72:ae:d1:a3:f1:14:22:
41:9c:dc:09:7c:44:62:1d:4a:65:ef:da:a9:9b:90:a4:eb:02:
36:84:09:1e:5c:84:79:18:b7:14:4c:60:bf:b5:c0:67:57:13:
45:63:ab:fc:d9:f9:d7:9c:9e:af:35:98:3e:2a:3f:cb:05:8b:
34:95:00:e4:ab:3f:7a:9f:56:db:92:a9:fb:a4:e7:62:4d:cc:
c5:9e:ff:8c:ce:ff:bd:2a:63:29:27:7e:2d:ad:99:d4:49:7e:
51:d7:37:f3:4d:de:df:61:a7:5e:7c:de:30:88:20:f9:a9:99:
cc:fb:e7:a3:fb:a6:a6:1d:31:7b:55:26:e1:e5:05:96:f4:0b:
11:74:47:48:08:74:b3:fa:e5:93:29:92:52:e0:79:90:09:7f:
b3:8b:02:a3:56:48:da:45:d7:ac:39:c6:2a:43:12:14:74:64:
d9:b0:e6:0f:dc:41:9c:97:6d:5d:85:f0:c7:70:01:a1:ac:ff:
fc:0a:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:03 2025 by rpki-client