Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: xQZwp3yH2Y+qRMDoRgIY6kd0RuHqtOsXwkprKrSBJyI=
Subject key identifier: 1F:65:CA:FD:E3:B7:81:59:EB:79:08:60:78:0F:0D:0A:72:63:F8:C6
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 0199C4FB7CBD7E3AF31B3C1E7C01A4B1EB4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 16CA
Signing time: Wed 08 Oct 2025 18:00:39 +0000
Manifest this update: Wed 08 Oct 2025 18:00:39 +0000
Manifest next update: Thu 09 Oct 2025 18:00:39 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: 9agttj9HwBPLYmB9TGyN2r6NZ2HwY1akDcTZzJo93p0=)
2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=)
3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=)
4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fb:7c:bd:7e:3a:f3:1b:3c:1e:7c:01:a4:b1:eb:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Oct 8 18:00:39 2025 GMT
Not After : Oct 9 18:00:39 2025 GMT
Subject: CN=1f65cafde3b78159eb790860780f0d0a7263f8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:3f:d1:b2:e6:9c:bf:79:01:28:e9:24:55:
19:fd:23:3b:7b:fb:0d:83:67:7b:a4:66:15:da:59:
e3:8e:10:91:f0:c0:4f:42:99:56:ca:33:34:cf:7d:
c8:5a:2a:63:c6:bf:f7:0d:a3:7e:b2:76:ec:da:ca:
17:3b:53:f2:64:d6:9f:91:9d:88:7e:a4:33:96:88:
a1:29:49:fe:80:07:a7:55:b4:79:0f:54:7e:5d:c7:
82:33:b7:63:c1:8b:c0:7e:a8:c3:35:cf:da:fb:98:
51:fa:07:c7:29:58:b9:38:ce:61:db:02:a0:97:8d:
00:7e:2a:18:09:5c:14:40:50:8d:60:be:7e:51:e3:
76:a6:4c:ab:3a:46:bd:bb:41:00:d6:79:c1:fb:ad:
d3:ea:72:57:09:c3:df:81:9d:53:b2:ed:d2:92:dc:
d5:3e:03:9b:33:36:62:1a:03:f8:e1:1f:f7:e8:07:
77:f8:1d:f0:f2:63:c9:fb:34:c4:82:87:34:a6:e0:
c3:39:d6:97:f9:a4:32:68:5d:e6:3e:d3:a9:64:f8:
46:98:e5:67:2c:b7:68:90:c9:56:f1:14:1d:41:64:
cb:9c:99:e3:3b:8f:b5:4a:f1:33:07:d0:c3:fc:04:
07:e6:bc:c7:13:96:5a:9c:e2:ce:bd:1f:67:99:6f:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:65:CA:FD:E3:B7:81:59:EB:79:08:60:78:0F:0D:0A:72:63:F8:C6
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:08:f1:6c:1a:1b:4d:1d:6d:df:61:46:24:cd:55:d5:c0:95:
b6:76:00:f2:e5:d4:8d:aa:08:65:02:24:4e:44:b2:19:e4:96:
47:78:17:d1:27:f1:54:db:be:0a:8c:6c:2f:79:af:3c:28:87:
62:cc:5f:73:cb:90:38:0c:f2:43:6e:28:4f:e7:b1:a8:3c:40:
12:8a:84:9e:21:cc:f6:21:3b:2a:5e:6d:c7:1c:15:33:52:d3:
75:a8:05:a5:ac:a2:d8:05:7b:49:ef:ba:ec:50:5e:cf:43:89:
89:65:59:10:b9:d2:25:2d:27:3b:f1:df:54:9b:55:11:a0:45:
9a:7e:cb:42:d1:d3:41:05:91:39:d5:d1:95:8d:50:f7:6b:b1:
d6:3c:d8:b3:8a:e3:10:84:7a:fa:5b:51:41:c3:cb:22:10:d9:
b7:f8:d1:25:f4:32:8e:29:a9:bd:de:b8:d2:02:a1:ce:e9:19:
ea:37:89:e4:65:c0:99:55:b5:41:6d:fa:df:95:2e:5d:05:5b:
ea:d5:a9:60:10:0d:36:49:17:c8:5e:78:15:cf:a1:99:8d:9d:
7e:fd:ce:42:7f:30:b1:f5:ed:8d:67:22:6d:30:06:a7:62:b5:
2d:4f:07:ee:3e:6d:7a:7f:f9:75:1b:ea:43:ef:f8:59:0c:dd:
60:aa:3e:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnE+3y9fjrzGzwefAGksetLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDdmYzUwNTQ4Mjg3ZGVhZWE3Y2U5MjA5OWU0N2EwNGE3
MGQ0NTEwHhcNMjUxMDA4MTgwMDM5WhcNMjUxMDA5MTgwMDM5WjAzMTEwLwYDVQQD
EygxZjY1Y2FmZGUzYjc4MTU5ZWI3OTA4NjA3ODBmMGQwYTcyNjNmOGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPs/0bLmnL95ASjpJFUZ/SM7e/sN
g2d7pGYV2lnjjhCR8MBPQplWyjM0z33IWipjxr/3DaN+snbs2soXO1PyZNafkZ2I
fqQzloihKUn+gAenVbR5D1R+XceCM7djwYvAfqjDNc/a+5hR+gfHKVi5OM5h2wKg
l40AfioYCVwUQFCNYL5+UeN2pkyrOka9u0EA1nnB+63T6nJXCcPfgZ1Tsu3SktzV
PgObMzZiGgP44R/36Ad3+B3w8mPJ+zTEgoc0puDDOdaX+aQyaF3mPtOpZPhGmOVn
LLdokMlW8RQdQWTLnJnjO4+1SvEzB9DD/AQH5rzHE5ZanOLOvR9nmW+4FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9lyv3jt4FZ63kIYHgPDQpyY/jGMB8GA1UdIwQY
MBaAFNvX/FBUgoferqfOkgmeR6BKcNRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEt
ZjI1NjA0YzRiZTgyLzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEtZjI1NjA0YzRiZTgy
LzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgjxbBob
TR1t32FGJM1V1cCVtnYA8uXUjaoIZQIkTkSyGeSWR3gX0SfxVNu+CoxsL3mvPCiH
Ysxfc8uQOAzyQ24oT+exqDxAEoqEniHM9iE7Kl5txxwVM1LTdagFpayi2AV7Se+6
7FBez0OJiWVZELnSJS0nO/HfVJtVEaBFmn7LQtHTQQWROdXRlY1Q92ux1jzYs4rj
EIR6+ltRQcPLIhDZt/jRJfQyjimpvd640gKhzukZ6jeJ5GXAmVW1QW3635UuXQVb
6tWpYBANNkkXyF54Fc+hmY2dfv3OQn8wsfXtjWcibTAGp2K1LU8H7j5ten/5dRvq
Q+/4WQzdYKo+cA==
-----END CERTIFICATE-----
Generated at Thu Oct 9 01:25:29 2025 by rpki-client