Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: F9bZ0+HpQBs0ZriV+llvSiULaWa+n1Kh7H5IN8fkH5o=
Subject key identifier: 3D:54:A7:45:94:23:71:AE:84:4B:10:6B:71:58:80:DD:32:BD:18:E8
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 019849668E58E996E7D37EE1EE499E32BAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 01:01:54 +0000
Manifest this update: Sun 27 Jul 2025 01:01:54 +0000
Manifest next update: Mon 28 Jul 2025 01:01:54 +0000
Files and hashes: 1: 16VwzWVgNRyLCtAXch9PWfSWgeM.roa (hash: C203Vfz7VUs5MzzkDe6+jJ/0Hm3QJ8YvUWmNLcGjW6Q=)
2: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: caxUANnHYRAGzOLZ7GlfGfS9UZYtiKWIOtZ/HFZoZJI=)
3: si754UrpKqsViXC-aHyx2LtipFA.roa (hash: VCYyh8ACSkDGJLu/cfRmB43QT8YqJ4jUUodjDefcg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:8e:58:e9:96:e7:d3:7e:e1:ee:49:9e:32:ba:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Jul 27 01:01:54 2025 GMT
Not After : Jul 28 01:01:54 2025 GMT
Subject: CN=3d54a745942371ae844b106b715880dd32bd18e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:f1:d3:f8:08:bb:37:87:82:33:fc:0e:82:
72:f0:e0:27:8d:c9:43:52:31:4e:71:54:e6:de:05:
a8:bd:e2:09:b7:55:98:62:e2:97:1a:95:18:82:b9:
9a:6c:69:42:30:60:8a:0b:5a:34:8d:e7:64:c2:ec:
80:29:1d:b7:87:bb:51:dc:75:b9:41:81:68:64:b7:
72:34:38:d1:8f:90:7e:d8:89:38:fc:cd:20:36:6b:
84:25:ff:de:96:4f:af:38:b8:ae:3b:b2:39:f1:4a:
07:df:67:e3:d2:14:0e:c6:3e:7d:b8:6d:87:9a:e2:
26:5e:81:6c:72:c0:2a:22:2a:f5:0c:e0:c5:bc:70:
73:3a:7a:12:ba:8f:92:53:81:fc:6a:6f:34:3c:b5:
ee:cc:e1:74:c2:b3:ee:bb:50:ae:2f:ad:b0:93:b8:
a0:4a:5a:e6:18:b6:56:da:72:d7:f1:1a:56:46:57:
99:ae:a2:45:38:f5:09:35:21:0e:3e:e6:39:58:73:
e7:0c:2c:a9:33:b8:98:09:80:a5:41:17:03:fe:f9:
9c:a0:96:5f:2a:6e:35:4a:0c:77:ff:39:1c:16:5e:
a4:90:42:2d:cd:8f:8d:81:97:eb:c9:d4:85:1f:4d:
34:ee:a3:90:b7:7c:be:aa:3b:82:12:03:31:c6:f3:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:54:A7:45:94:23:71:AE:84:4B:10:6B:71:58:80:DD:32:BD:18:E8
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b2:81:a6:5d:61:74:de:43:2a:05:4c:b5:5c:e2:cb:9d:6f:
e6:13:9f:7a:2c:8e:b4:40:65:de:87:9b:12:7e:1f:0a:88:ee:
66:54:48:94:63:a1:c4:01:10:5a:56:18:34:83:1a:bc:d4:96:
e0:8b:74:a9:25:26:f3:1c:af:ac:74:30:c2:e4:73:8d:ac:36:
e3:f9:d3:2c:d4:11:a7:fd:23:4f:f8:f9:8d:1b:1d:38:e2:da:
02:db:5c:be:24:77:6f:7b:72:5e:fe:44:f9:42:8c:78:0b:6b:
68:26:b6:2f:e1:40:43:5b:7c:98:c9:fa:5a:15:3a:74:1f:f6:
7c:32:37:b1:a0:40:0e:cd:d0:44:c6:5e:a3:cb:b7:18:2f:1e:
b8:9c:6b:d9:ca:dc:18:cf:98:f8:04:51:27:cb:d3:ac:eb:9c:
54:47:c2:4b:64:10:2d:f2:38:39:4e:22:4d:83:27:81:ca:35:
eb:0d:30:19:a0:2d:f3:02:57:50:24:cd:eb:b7:97:63:7b:62:
c8:a1:e9:a7:3e:44:36:5b:66:95:76:d4:2e:6d:4e:58:a3:0e:
8b:1c:99:11:31:e2:ab:cf:fd:37:c1:00:f0:dd:1f:69:94:21:
86:e4:23:0d:96:11:f8:7c:5f:6c:cd:f4:7f:54:d8:60:02:ae:
88:be:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:01 2025 by rpki-client