Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: 9iy0sA4yV+CFWWsitdipnpep2HBO/aCzOMNE52UspBc=
Subject key identifier: A9:66:81:05:37:27:24:F5:66:54:8A:82:E9:07:82:54:B9:92:55:02
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 0197CA5DEF08FDC027BBB4B628DD1295FA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: 39
Signing time: Wed 02 Jul 2025 09:00:42 +0000
Manifest this update: Wed 02 Jul 2025 09:00:42 +0000
Manifest next update: Thu 03 Jul 2025 09:00:42 +0000
Files and hashes: 1: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: hvReFp+7mqZx5BSPitkxRCgusHOUCubm0gk1WQavcRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5d:ef:08:fd:c0:27:bb:b4:b6:28:dd:12:95:fa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: Jul 2 09:00:42 2025 GMT
Not After : Jul 3 09:00:42 2025 GMT
Subject: CN=a9668105372724f566548a82e9078254b9925502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:79:6c:8c:86:d1:6a:11:ae:3f:0c:5c:15:
89:f7:9b:b3:34:92:9d:80:73:e8:0a:fc:76:27:6a:
af:63:43:32:9b:6c:5b:6b:4d:15:bb:5c:69:c1:5e:
e7:78:42:68:26:b2:92:c4:da:29:45:db:85:35:21:
a8:40:35:c9:3d:ce:54:d5:3a:2c:96:ce:b7:c2:1f:
9a:8f:1f:23:a5:32:fe:59:c5:b6:c1:52:b4:ae:fd:
88:cf:98:3c:89:cb:f6:13:e0:95:97:6d:27:ca:c0:
81:2b:2d:8e:ea:67:d4:37:03:4c:b2:33:6e:1b:70:
01:9e:50:b1:eb:25:63:f8:c6:b2:14:4a:f5:92:91:
29:8a:bd:70:18:c6:48:29:8a:a6:a9:0d:9d:61:b5:
f0:e8:92:cf:4e:14:0a:93:9c:b2:00:f7:62:5d:28:
80:11:17:19:69:9f:7a:a8:bc:9d:ca:cb:36:fa:cf:
4e:f0:a9:91:69:41:c5:c6:cc:7f:74:c7:99:d6:97:
b8:05:a2:82:13:9d:c1:53:ea:9e:16:8a:19:de:2c:
ae:9a:c8:c7:5d:ad:b3:ce:4e:99:49:f1:77:3f:88:
63:30:e1:23:d5:d0:86:59:81:6f:2b:42:c2:93:22:
20:cc:09:90:37:0e:48:86:9b:f0:e8:90:10:ef:8f:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:66:81:05:37:27:24:F5:66:54:8A:82:E9:07:82:54:B9:92:55:02
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1f:e2:fa:d9:61:28:0a:9f:48:24:43:5b:b2:b0:49:9b:2c:
a7:7c:45:dd:0c:01:6e:a8:a0:26:5d:1c:cf:51:b6:a0:d5:56:
3f:a9:fd:3b:bc:d2:f8:6c:42:8e:bb:98:95:e3:c0:31:3a:b3:
5e:b4:f5:b5:e6:8b:63:eb:3a:5d:15:6a:ed:f6:cf:88:76:9b:
78:34:04:32:c5:40:f7:4e:a8:8f:4a:94:30:08:3e:15:c6:fd:
d4:c9:ed:e8:bb:de:32:eb:b8:3b:79:70:12:b6:9c:f5:f4:bf:
4b:fc:91:e2:65:07:01:2a:1e:3b:1d:8d:d7:84:fa:c1:56:c7:
54:78:c7:0a:4f:d5:3b:c3:e5:d2:95:d0:27:6f:21:80:20:09:
9c:de:c3:37:ba:6f:7f:b0:84:9c:c8:8a:90:19:b5:26:bb:a1:
50:26:fc:fd:02:ae:b5:eb:86:bd:ae:c2:b3:57:31:6c:6a:e4:
f7:e0:42:fd:47:02:3c:6b:58:7f:2e:2d:b4:1c:89:57:39:9e:
04:ba:56:40:63:08:c7:dc:f5:53:ca:03:14:b1:c1:11:4a:4f:
c9:de:db:df:f2:07:b3:72:4d:0a:ad:eb:85:75:a0:58:05:ae:
75:bb:50:d4:83:41:d4:14:37:47:b0:19:f4:bb:08:54:bb:92:
9a:a8:80:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:34:50 2025 by rpki-client