Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: NsquWYlzcjqf2xoZCT4R8z1qL9pZCenCQCQUKazxo/E=
Subject key identifier: 1F:A1:2F:AD:60:0B:C0:9A:9A:71:47:25:41:E0:05:57:DE:8B:FD:91
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 0197499F32958BC27873BE362C9E13E8E531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 09:00:59 +0000
Manifest this update: Sat 07 Jun 2025 09:00:59 +0000
Manifest next update: Sun 08 Jun 2025 09:00:59 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: 44sJypqpIJo9HYP1YRBkn/1ftYzxW+uoBBdY+rylb2A=)
2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=)
3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=)
4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:32:95:8b:c2:78:73:be:36:2c:9e:13:e8:e5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Jun 7 09:00:59 2025 GMT
Not After : Jun 8 09:00:59 2025 GMT
Subject: CN=1fa12fad600bc09a9a71472541e00557de8bfd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:21:25:12:80:1b:6c:4e:55:80:f9:36:36:
4c:42:4c:b7:fd:66:de:2a:f8:d5:cb:2d:20:e4:6e:
6f:51:2b:42:6c:db:7f:e6:58:8a:94:30:69:0f:36:
c3:48:4a:51:2b:b5:df:19:81:53:9e:05:9d:66:a2:
e1:0c:93:76:cd:a1:6f:fa:83:34:e2:d4:62:59:65:
b6:f9:a9:5e:04:01:31:c5:68:6c:7d:72:dd:88:a5:
df:40:c5:b6:15:4d:cd:dd:3d:ba:40:00:be:57:ed:
93:42:28:e3:83:8e:44:87:b8:c7:54:17:e8:d8:ca:
a7:4b:37:5d:73:a8:d5:74:e3:15:36:9d:ea:4b:e5:
70:a9:e3:ab:f9:f3:37:6c:6d:f9:2e:0d:d4:de:37:
1d:6a:36:82:04:28:d2:10:29:85:fb:7c:ff:cc:fc:
4d:5d:56:8e:40:9d:8c:32:43:f2:26:59:8f:cc:c1:
f1:4b:bb:4f:c3:46:76:f6:16:b4:b8:c6:36:40:e5:
93:60:16:91:26:32:be:84:99:02:8d:16:01:4e:fc:
0c:35:d9:a5:ae:cd:1f:98:42:36:68:47:79:92:cd:
70:47:b4:09:77:2f:fe:12:96:37:06:bc:63:39:55:
3a:2d:91:ec:1b:69:eb:e0:d1:08:bd:31:4a:df:2b:
99:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A1:2F:AD:60:0B:C0:9A:9A:71:47:25:41:E0:05:57:DE:8B:FD:91
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4b:82:82:8e:7b:80:ee:49:b2:1e:af:ba:25:d7:d2:df:34:
24:1c:10:86:af:44:2a:e9:87:d1:cd:6c:fa:da:53:cf:91:74:
a4:ca:b0:aa:c5:d4:f7:9e:68:70:94:75:cb:fd:06:93:e4:a3:
2f:23:b5:d8:9d:47:9e:03:e4:7a:da:3e:3b:d9:9a:ff:01:99:
92:04:e5:b5:e8:71:23:5c:af:3e:76:d3:a9:57:75:43:14:f9:
fd:b6:63:d9:6f:f7:8c:01:ac:2b:cc:bb:03:ce:cb:1d:e9:56:
b1:e2:ad:95:c3:cb:b7:11:a1:b6:c0:59:85:df:73:63:f9:94:
87:86:e8:c3:90:aa:48:ed:eb:2b:7e:06:0e:32:38:57:f9:4b:
ae:e7:9d:6b:a8:00:f8:ef:19:9b:c8:c6:d3:35:fe:92:26:72:
78:bd:d2:45:8e:1c:64:dd:50:ea:4e:b3:e6:c2:e5:24:01:ae:
43:71:fd:e0:57:38:6a:c6:98:15:93:75:66:cf:89:97:b4:b4:
f2:c1:ab:98:7d:3a:41:96:72:65:7a:74:f1:dc:f3:d8:6b:51:
c5:63:b2:e4:2a:08:63:39:a0:c0:4f:de:ec:fb:0e:0f:52:f3:
df:0e:d5:c8:c0:76:8f:d1:92:69:72:38:da:75:42:41:77:c5:
a0:2c:df:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:50:53 2025 by rpki-client