Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: 9P6OC0PZ3dcP6nw4kWypx9vKjohLAj/PGEL18DITehM=
Subject key identifier: 31:C4:FA:85:15:8C:7B:AC:C1:53:05:BB:B4:39:38:1F:F9:71:B4:5C
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 4FA056CEFB98B0D3EA85D49C70E37E1CC7986040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 04E9
Signing time: Fri 08 Aug 2025 07:30:36 +0000
Manifest this update: Fri 08 Aug 2025 07:25:36 +0000
Manifest next update: Sat 09 Aug 2025 09:41:36 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: pmvAEGFBTtqweXflpPYJWKaM0b6T6snNxfzSYlXkAVM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 09:41:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a0:56:ce:fb:98:b0:d3:ea:85:d4:9c:70:e3:7e:1c:c7:98:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Aug 8 07:25:36 2025 GMT
Not After : Aug 9 09:41:36 2025 GMT
Subject: CN=31C4FA85158C7BACC15305BBB439381FF971B45C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:d3:72:05:14:a8:4e:a3:36:77:b0:56:a4:
c2:2a:d6:4a:15:9d:47:58:64:05:ad:6e:bd:e9:c1:
d8:a4:e1:4e:c2:d4:0b:90:9b:7a:5d:d3:89:16:37:
50:78:fa:16:27:66:26:e6:57:fe:54:4d:08:36:87:
08:d5:2b:69:fb:ea:42:78:9a:8a:bd:de:aa:76:0c:
c6:87:bf:f9:19:7a:f6:82:ef:6a:45:38:a5:51:8b:
c4:dd:33:c1:67:03:74:6f:10:e9:42:44:db:ab:f2:
07:fa:99:4e:83:ad:fd:77:87:1d:fb:bb:3d:27:bb:
94:2a:3c:3f:4c:8e:2b:95:5e:40:0d:94:60:cd:6e:
28:20:a7:55:c9:f3:f6:df:33:3f:a6:73:1e:1d:c9:
a3:dd:ba:a8:0b:b8:8d:7c:ad:99:3e:97:fe:ad:28:
13:df:7d:b7:48:34:64:e4:09:6a:4a:c4:cf:6d:43:
6a:a6:9b:c6:a7:15:79:f5:5a:f6:f8:dd:06:ab:78:
0e:ae:7f:83:cb:73:02:fd:84:b7:52:77:d0:3c:a5:
c3:43:9b:d4:0c:c9:1f:9c:6a:31:63:24:31:f1:5f:
c3:40:ea:e2:ca:d8:5c:de:af:7f:88:09:87:c2:8c:
ed:3e:eb:4a:e2:64:7d:25:f1:c3:19:04:f1:a1:c4:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C4:FA:85:15:8C:7B:AC:C1:53:05:BB:B4:39:38:1F:F9:71:B4:5C
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:4a:68:c7:e6:1d:42:6a:b1:58:f9:04:ee:77:1e:22:73:12:
65:72:30:85:58:ca:8d:47:0d:ac:92:84:9d:ec:d3:56:fc:d1:
65:36:22:72:ff:71:87:35:bc:48:35:3f:f8:de:79:35:26:86:
10:d6:8b:d6:dc:ea:61:b6:99:57:b9:5f:85:38:f0:4f:dc:1e:
39:18:e2:00:45:59:de:55:d0:6b:6b:4e:fb:46:25:16:b1:aa:
3b:75:21:ba:38:cc:6f:fa:db:99:dd:53:84:ae:7c:eb:1a:1e:
db:14:b1:04:93:97:5e:ce:3e:8d:45:3b:55:25:9a:3d:31:49:
78:d1:a7:f9:7b:16:9e:47:3f:81:35:1b:ec:b4:45:a1:72:1d:
05:13:7f:f8:b2:d3:e0:f0:6e:9a:4a:86:dd:ce:f8:de:ca:2a:
02:2b:7e:09:89:a0:8b:8f:4b:03:76:5e:f9:b4:96:d9:9e:0b:
5f:77:5f:95:6c:27:89:08:ec:2b:0a:3a:a6:37:43:9f:08:01:
c0:b2:ea:54:ca:88:fc:f0:f2:1e:e2:79:a6:e8:c7:37:5f:ae:
f0:b3:2f:07:74:88:77:b5:14:a4:16:ef:b7:9b:47:28:56:2c:
8c:d8:18:40:e5:3d:50:62:93:a1:c2:f4:a6:ee:d9:65:ef:07:
60:fa:96:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:57 2025 by rpki-client