Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: ocat+7XbRqUmS7jar4er99WK244s8y/84gl6le3o/7E=
Subject key identifier: 3D:3A:4E:28:A6:F9:1A:59:79:73:74:E4:55:C0:10:0A:71:37:FF:9B
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 01974C3209C1B4819980DF02159C638E6C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 1582
Signing time: Sat 07 Jun 2025 21:00:36 +0000
Manifest this update: Sat 07 Jun 2025 21:00:36 +0000
Manifest next update: Sun 08 Jun 2025 21:00:36 +0000
Files and hashes: 1: 16VwzWVgNRyLCtAXch9PWfSWgeM.roa (hash: C203Vfz7VUs5MzzkDe6+jJ/0Hm3QJ8YvUWmNLcGjW6Q=)
2: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: xv+tGivGqTPp5DcBe6molRF2ad50R1Mlcb3+43glcpQ=)
3: si754UrpKqsViXC-aHyx2LtipFA.roa (hash: VCYyh8ACSkDGJLu/cfRmB43QT8YqJ4jUUodjDefcg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:09:c1:b4:81:99:80:df:02:15:9c:63:8e:6c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Jun 7 21:00:36 2025 GMT
Not After : Jun 8 21:00:36 2025 GMT
Subject: CN=3d3a4e28a6f91a59797374e455c0100a7137ff9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:4a:08:27:db:a4:20:7b:3f:43:dc:19:bd:
6b:13:14:b2:f2:05:65:14:90:d8:19:46:b5:c5:58:
cb:98:b7:ca:0a:0c:e2:4a:16:cf:46:2a:79:0c:ff:
72:bc:0c:b1:14:cd:99:c1:78:3b:6c:ad:b2:55:20:
9c:d9:8d:d5:66:7b:29:91:16:ae:1e:f6:8b:71:4a:
7d:57:b6:9d:d6:40:88:7f:37:e7:46:49:7b:b7:7f:
69:9a:0a:67:78:14:a5:46:e9:fa:30:77:43:07:d7:
1a:44:c7:fa:53:3d:a9:83:c9:4a:42:a6:b4:5c:8f:
8d:40:47:a7:8f:95:f0:72:ab:88:99:1e:fd:8b:75:
4b:e1:b0:d7:22:fb:ae:f9:58:c3:4f:54:c1:56:73:
82:b7:36:94:4a:26:92:f2:95:8b:02:11:a1:d5:f8:
40:f3:67:09:d4:0e:f5:cf:42:72:cf:9b:a5:50:8e:
cd:3d:66:e3:4e:84:44:1d:fc:16:e5:39:69:86:ab:
24:43:29:73:7d:33:f7:66:42:0e:e6:70:b3:58:e3:
ee:d7:ab:97:af:dc:82:3a:27:64:50:fe:f7:b3:5e:
00:25:dc:71:98:0f:67:0c:0b:9c:ef:77:f2:6c:d8:
ff:10:0d:ce:cd:d6:f6:2f:a6:a6:f7:4f:68:a8:98:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3A:4E:28:A6:F9:1A:59:79:73:74:E4:55:C0:10:0A:71:37:FF:9B
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b4:5a:33:7b:a8:bd:5a:f4:1c:ab:08:c8:e8:31:4b:2d:8b:
73:6e:10:c2:2e:66:62:c1:e9:41:22:88:c2:2b:c2:f6:c7:14:
72:fe:ff:d9:9b:1c:38:fd:13:8c:9a:31:8a:b5:8f:d6:82:2c:
ae:b6:36:69:4b:21:6b:65:a8:4c:9c:62:a7:42:4d:6a:b9:a5:
ee:8f:6d:44:8e:80:81:e2:b4:a0:5d:27:fc:43:4e:29:bb:ec:
2e:e5:8f:0a:72:84:7b:56:30:6c:ec:b1:76:79:8f:6b:6e:f7:
9f:eb:23:93:56:7b:b2:69:25:33:13:3f:d3:5b:2b:95:ee:56:
cc:83:42:9e:ca:1d:53:51:42:71:ec:9c:ef:34:3c:90:57:6b:
8d:98:f2:54:56:33:a6:27:21:7c:15:97:cd:dd:1e:4e:24:e5:
23:32:38:80:7b:03:8f:20:60:e1:9f:78:1a:d6:f6:1f:70:86:
8f:40:e4:01:3e:dc:c2:70:19:b7:53:b3:d3:5b:c2:b3:3d:fa:
d5:a4:76:9f:42:58:b0:7b:3a:fe:d2:f3:07:5a:7f:fd:b8:cb:
ed:a6:ae:e7:a2:41:69:69:56:24:2c:4c:a4:6e:24:63:84:b0:
49:d8:70:c3:cf:a6:6f:a9:2b:c3:9e:e7:34:ed:b8:3d:13:64:
a3:8f:b7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:09:52 2025 by rpki-client