Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: nvi0kLng4X52ahaurZ6FA8UUCrqkjQxhKtovr8q3ubg=
Subject key identifier: 22:18:C2:10:8C:45:8F:42:C4:4F:2E:67:6B:75:2F:C1:A1:EF:84:52
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 0199221F073ADC655E95D11B88DC27E1F24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: EB
Signing time: Sun 07 Sep 2025 03:01:22 +0000
Manifest this update: Sun 07 Sep 2025 03:01:22 +0000
Manifest next update: Mon 08 Sep 2025 03:01:22 +0000
Files and hashes: 1: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: QwC706yrqg0NQ4wBhmwKBU1A3yn1NnFJ6Lr/zUeO1Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:07:3a:dc:65:5e:95:d1:1b:88:dc:27:e1:f2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: Sep 7 03:01:22 2025 GMT
Not After : Sep 8 03:01:22 2025 GMT
Subject: CN=2218c2108c458f42c44f2e676b752fc1a1ef8452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e9:dc:08:4c:5d:df:28:c7:a9:67:0b:42:4c:
a1:ee:16:d9:19:ea:92:c7:d2:41:93:41:c0:8d:fb:
73:20:5d:0a:46:56:c6:c4:bd:4d:8c:5a:aa:59:1d:
c3:74:c6:bf:f5:45:f2:b9:d3:d6:95:bf:8f:84:a9:
fa:5f:44:99:4c:ad:68:cd:4f:13:18:6a:f5:43:c7:
b4:b7:5f:8f:20:a6:e8:e6:41:9d:5e:65:1e:2d:66:
8d:59:9c:27:2e:6d:09:09:0e:5b:39:15:ba:58:f8:
13:15:ea:fd:f3:60:86:a8:48:16:3c:d0:70:92:47:
53:e4:3c:e2:7b:db:ca:24:1b:e0:b2:4d:22:3d:3a:
7f:a4:ec:98:54:48:f3:12:6d:2b:aa:e7:9f:4e:1b:
42:fb:8a:3d:d2:70:25:73:96:78:77:ef:ed:4b:e8:
51:4b:c6:33:c4:95:d7:da:e4:8e:eb:21:56:1f:90:
7a:eb:83:35:22:83:fe:5d:bd:88:41:a7:48:0d:13:
c7:2b:0f:1c:86:d4:20:9b:28:43:85:ac:c7:ef:e6:
28:9e:0a:69:be:0f:ae:c0:f1:a1:bf:03:47:43:a5:
ae:05:7d:0b:5a:cf:c0:7d:aa:24:2a:eb:62:d0:f8:
12:d9:ce:32:2d:92:d5:0e:e1:7b:8a:b8:c6:c9:a6:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:18:C2:10:8C:45:8F:42:C4:4F:2E:67:6B:75:2F:C1:A1:EF:84:52
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4c:88:27:db:30:30:1e:58:67:53:f1:ea:f1:6f:f1:8c:e3:
c9:d5:84:be:3e:4e:b4:96:a5:e8:b4:65:0a:72:a9:b6:2a:1f:
0f:e8:16:06:6b:ff:cf:7a:c1:b9:f3:da:59:89:6b:c3:94:28:
30:37:b1:06:72:e0:9c:8d:19:60:e3:2e:87:54:40:6f:59:b2:
1f:8f:06:5c:e3:28:fc:09:6e:45:9d:ee:dd:e0:ec:13:18:ec:
59:74:df:e2:51:ab:16:08:f0:96:e3:1b:ae:92:7a:36:df:3f:
7a:fe:5f:55:3b:03:46:24:fe:d3:da:82:12:40:82:01:dd:cb:
a9:2e:79:55:cc:24:db:31:e0:1f:d3:f3:66:a2:57:44:f4:7f:
ee:f8:02:a4:5a:b6:e8:bf:76:7c:a3:b9:fe:84:70:92:00:57:
97:d9:88:56:23:49:7a:6e:58:e0:46:55:ca:37:dc:57:54:a7:
a4:5a:ac:86:5b:da:20:cd:e3:ba:7c:61:7c:fc:84:d6:ca:ed:
74:38:e7:20:5f:d4:8f:1c:5b:26:8a:b1:f3:ea:9d:70:29:07:
b8:fd:22:ac:19:70:50:49:e7:f0:f6:e7:e8:3e:14:fe:2a:3d:
1c:47:be:59:7d:cb:19:f0:da:6f:d1:fc:5e:a7:90:04:30:91:
b7:db:c1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:04 2025 by rpki-client