Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier: 5HZuRM9l6eSj4MvCDxA15asSB2T/4UOt0npKp3OxL8U=
Subject key identifier: A5:D5:4B:87:79:74:5E:33:BB:3B:D0:60:D7:78:3E:7E:EA:2B:82:21
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial: 019938DE25F04A8F789A76B500066F67A086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number: 1681
Signing time: Thu 11 Sep 2025 13:01:46 +0000
Manifest this update: Thu 11 Sep 2025 13:01:46 +0000
Manifest next update: Fri 12 Sep 2025 13:01:46 +0000
Files and hashes: 1: 16VwzWVgNRyLCtAXch9PWfSWgeM.roa (hash: C203Vfz7VUs5MzzkDe6+jJ/0Hm3QJ8YvUWmNLcGjW6Q=)
2: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: eiFMkzWsquUNWlHlLOyCYa7pqkaHNoJDf99QwVnCv6I=)
3: si754UrpKqsViXC-aHyx2LtipFA.roa (hash: VCYyh8ACSkDGJLu/cfRmB43QT8YqJ4jUUodjDefcg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:de:25:f0:4a:8f:78:9a:76:b5:00:06:6f:67:a0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Validity
Not Before: Sep 11 13:01:46 2025 GMT
Not After : Sep 12 13:01:46 2025 GMT
Subject: CN=a5d54b8779745e33bb3bd060d7783e7eea2b8221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:46:d9:74:65:70:52:c3:f9:86:ea:67:69:ed:
7d:90:34:16:63:46:6c:13:e7:40:ba:ca:a9:64:d2:
67:85:a0:15:05:1a:76:e8:95:79:c1:f6:9e:df:4f:
c7:0b:b3:f5:c3:1c:0a:ae:f1:cc:19:76:fa:d3:15:
26:aa:28:d7:03:e7:7d:6f:d4:35:f0:dc:83:19:70:
0d:59:a0:53:ba:62:df:ea:67:09:fe:5d:c1:c3:15:
ed:ac:ca:58:3d:5b:2b:4a:14:fa:ce:3c:bb:65:0f:
44:30:31:e4:a3:07:52:d5:ea:7f:fd:04:00:15:91:
7b:e2:43:3f:1f:a0:20:e0:68:44:d0:48:dd:43:3b:
ae:59:70:b1:99:51:9d:0b:1d:2c:7f:64:93:66:e5:
98:2d:08:32:60:b6:24:19:81:0e:ca:93:cb:9d:31:
72:5d:af:38:79:21:b4:18:1a:8a:5b:21:73:1a:c2:
60:ab:78:9d:02:6d:dd:59:9c:97:ed:40:7b:b9:64:
67:90:5c:15:de:08:1f:a7:e3:b1:fa:4a:b3:dd:83:
e3:01:21:d5:35:0a:10:a9:0e:d0:81:50:a8:95:6d:
6d:79:5c:18:9d:19:f6:d2:06:0d:85:3d:cb:6f:66:
23:22:be:b3:6c:ca:35:be:b7:ae:eb:3c:36:ac:bf:
ad:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D5:4B:87:79:74:5E:33:BB:3B:D0:60:D7:78:3E:7E:EA:2B:82:21
X509v3 Authority Key Identifier:
keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8d:7a:0c:cd:20:af:fd:55:a3:a9:cc:e9:f9:14:e6:43:41:
10:31:d2:d8:e2:32:03:f1:23:68:ee:71:2d:d0:05:a6:62:56:
e0:da:37:3d:cf:ab:c1:37:ab:6d:6c:89:a1:7d:06:57:bd:c5:
b7:7f:48:ce:05:ce:c8:af:00:9e:8a:2e:39:8c:4c:00:cd:ac:
fb:9f:2b:ce:ab:8e:a4:2c:e4:dd:1f:fb:5b:92:7e:14:06:fa:
49:8d:0d:eb:69:0d:7d:fe:2b:f3:4f:0d:7e:b3:2c:6a:ff:3a:
a9:3b:d1:d6:97:e0:0c:32:56:38:57:20:fb:d4:8d:9a:a7:d0:
e5:8c:df:bc:8e:42:20:90:f0:41:e0:3f:0d:f7:b6:c0:01:17:
d7:a0:e3:50:64:87:cb:a9:2d:a8:a7:dd:74:04:78:04:7f:a5:
d9:eb:e4:05:d4:e7:ed:65:bf:a2:7a:29:6b:3b:d0:cf:41:b4:
1a:bb:ce:d3:04:1d:b8:df:b3:a3:60:8b:6c:ce:ac:4f:34:45:
9d:9a:d5:14:7f:7a:1c:86:b9:7c:12:aa:f0:2f:d2:3c:e8:4b:
80:65:59:4a:2b:aa:5e:6b:69:fa:f4:4d:a0:c3:72:19:10:fb:
76:10:2f:04:ad:8f:5e:8c:f3:da:26:ac:fa:89:88:70:23:f0:
78:23:e5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:17:58 2025 by rpki-client