Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: K4a5ME2KkalAFJfelnwJzPNWghENbzFogjxBPgpo0bs=
Subject key identifier: CA:2B:90:51:4C:1F:D5:3E:EC:57:D9:6A:94:F3:D5:30:C9:C1:42:D7
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 58DBDF2B5A796F241F9759E8410C64177CCBE273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 0456
Signing time: Sun 27 Apr 2025 04:51:25 +0000
Manifest this update: Sun 27 Apr 2025 04:46:25 +0000
Manifest next update: Mon 28 Apr 2025 08:24:25 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: ERqsKLFlevOzDMOS5b6WSwx1qLmUEz4g9ZsBKOihWsw=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:db:df:2b:5a:79:6f:24:1f:97:59:e8:41:0c:64:17:7c:cb:e2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Apr 27 04:46:25 2025 GMT
Not After : Apr 28 08:24:25 2025 GMT
Subject: CN=CA2B90514C1FD53EEC57D96A94F3D530C9C142D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:84:57:a0:45:36:03:83:af:35:ba:19:76:52:
63:f6:80:86:cc:1d:b4:f9:b4:0a:f1:b2:fe:bf:44:
53:07:71:cc:aa:8c:f4:99:3b:ee:35:ef:d3:bc:58:
fe:9f:27:08:df:a9:bc:28:f1:e9:73:37:90:69:67:
7d:0a:d2:26:0f:85:44:f4:3c:8c:68:33:c8:e7:fc:
5b:ad:f7:ab:6a:44:1d:dc:79:48:38:d9:3c:f6:0f:
7b:92:e7:0d:52:3f:33:d7:d1:59:a6:ff:bf:f0:d2:
3f:00:23:54:e2:e7:3d:b6:ba:b4:b3:17:5a:4a:7d:
67:ae:f5:d1:37:1b:dc:93:9e:08:cb:4b:5f:3b:3d:
58:88:03:60:f9:ec:89:80:40:14:84:d4:67:af:78:
f3:53:35:7f:50:77:4a:77:74:61:ac:b1:e2:29:05:
0e:50:e2:98:d0:36:6d:1a:8a:d5:ef:cb:07:a3:16:
e3:76:c7:43:83:88:10:dd:d9:e9:38:5b:86:ef:88:
19:0b:a1:7d:93:31:6a:0f:1c:62:47:fe:63:a6:17:
97:f3:de:1d:55:55:54:03:0b:60:95:88:21:bd:dc:
1e:d1:96:60:0c:8d:f4:47:0c:6b:dd:ea:58:4e:11:
01:a2:eb:28:ae:0c:e4:54:9f:b2:6a:3a:d3:ab:57:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2B:90:51:4C:1F:D5:3E:EC:57:D9:6A:94:F3:D5:30:C9:C1:42:D7
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:9d:f9:81:c2:eb:64:65:11:80:10:2c:c1:91:ed:29:ae:1c:
62:0e:e8:0e:77:06:b8:a7:07:10:b8:86:bd:5d:88:98:6f:83:
2c:f4:af:fb:38:b4:1c:7e:9d:a4:3a:ba:59:e3:8b:46:d1:d8:
af:25:9f:1c:f7:5a:c0:79:54:e0:97:8c:5f:1b:cb:33:11:c1:
6d:6b:98:42:82:5e:dd:d8:18:c5:0f:77:f3:cc:f7:29:5f:1e:
c1:f7:65:b5:9d:22:8e:33:e4:39:1a:c5:9d:e8:03:9e:e7:57:
dc:ff:bf:c6:b8:df:98:f3:8e:e9:9d:a1:6e:ea:b0:4f:6f:0e:
10:b3:29:dd:0a:ca:39:f1:eb:f1:97:e8:5b:73:08:91:41:58:
f2:01:25:07:66:48:4c:18:77:ad:62:47:38:04:c8:6e:4a:80:
5a:19:d3:a0:e8:4d:21:5d:b0:e9:12:11:19:ad:f0:7c:1a:95:
2e:8a:c4:6e:18:cc:e2:97:91:1a:bd:a7:3e:3f:d5:f1:3c:03:
9b:ea:a2:af:b0:04:52:7b:b1:fa:38:27:f5:8d:35:2e:2a:12:
1b:d4:44:60:26:fc:bb:eb:28:8f:f5:b5:56:e2:9c:98:cd:b1:
56:e9:a2:38:87:9c:e5:ce:e2:63:11:f9:cb:e4:b9:9d:c6:cd:
ac:e0:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:54:29 2025 by rpki-client