Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: bIU9NDqQ2sS0ko3D/VGKhsQUCSPjCjID6sRzKk/BEqA=
Subject key identifier: 53:97:22:2B:CB:65:62:70:73:36:BD:87:0A:63:43:E8:8E:26:65:CE
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 0198C6110871D0F6089B69ADA080135B1045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 1646
Signing time: Wed 20 Aug 2025 06:01:01 +0000
Manifest this update: Wed 20 Aug 2025 06:01:01 +0000
Manifest next update: Thu 21 Aug 2025 06:01:01 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: ytYoiSRY9l2TF4LPyhC78FXOK4VuaE5uH3JfF7l954k=)
2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=)
3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=)
4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:11:08:71:d0:f6:08:9b:69:ad:a0:80:13:5b:10:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Aug 20 06:01:01 2025 GMT
Not After : Aug 21 06:01:01 2025 GMT
Subject: CN=5397222bcb6562707336bd870a6343e88e2665ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:cb:ab:35:f3:0d:43:8b:b2:bb:23:88:4e:
5f:05:ea:3f:de:40:a0:e7:8a:6b:6d:cc:ed:2b:b7:
24:dc:1c:04:7f:0b:c9:c3:2b:97:ba:96:75:85:bb:
6a:f7:0d:d7:3a:6c:97:9c:3c:27:2e:34:9a:0d:f8:
2a:87:10:71:ee:bb:bf:5e:a3:98:cc:ab:f9:13:a1:
95:17:f0:75:61:0d:01:3b:7d:86:c7:90:9a:ae:c6:
05:4e:c2:bb:d5:7d:57:35:a3:91:a9:dd:fe:aa:a8:
1c:7b:61:aa:12:91:cf:a8:a3:79:93:a4:62:64:b6:
44:0a:70:96:39:ed:28:af:0d:b5:f7:d6:19:e0:c5:
f3:89:94:76:98:b5:07:41:94:11:18:06:df:bf:7e:
68:e6:eb:f9:f2:17:be:97:1e:01:8c:fa:2c:11:f1:
91:3f:eb:f1:67:22:51:6e:ce:e5:74:21:5a:e2:4a:
c3:27:80:bb:33:9d:de:3e:bc:f0:75:59:ed:32:95:
56:64:82:3a:ec:81:23:55:c8:98:f4:e4:b6:ed:9b:
2f:89:76:6f:67:b9:7d:f7:6c:6c:a2:81:44:40:05:
c8:ef:a1:70:33:35:96:25:38:17:88:ab:0f:91:5f:
58:92:65:73:8e:bf:cd:a9:47:c0:2b:d5:d6:c2:ce:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:97:22:2B:CB:65:62:70:73:36:BD:87:0A:63:43:E8:8E:26:65:CE
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f6:7d:80:b8:64:26:6d:ef:c0:57:78:bb:3c:01:0f:cf:99:
ca:a1:78:42:64:59:47:3c:c4:84:20:30:10:01:ed:bd:61:74:
f0:20:1a:b1:df:c5:a1:9f:27:ef:dd:8d:cd:b3:0d:9c:01:f6:
89:c0:d9:c3:ef:62:43:b7:e6:15:97:e8:1f:5f:85:e4:50:28:
83:f5:80:a4:0d:64:8b:e4:bb:b8:16:8d:77:f5:16:64:99:31:
b9:3a:5d:07:ff:1b:86:b5:b0:52:76:d8:d1:7c:39:fe:af:84:
aa:93:4e:f4:2d:65:13:ba:a4:6a:f4:50:0a:57:29:b6:df:fd:
31:14:cd:ca:7f:39:b9:b9:79:c8:3b:93:e1:61:ea:ee:55:6f:
b0:f2:f2:57:bd:44:bd:71:d2:05:9d:13:b7:45:c9:d9:3e:d0:
d2:e5:7c:bb:13:12:b5:e8:ed:93:ca:89:3d:9a:a1:67:0d:d5:
18:32:1b:51:18:2a:c3:08:63:49:ab:98:56:54:0a:42:9e:26:
e8:d4:0f:b2:45:d4:92:4a:cd:91:51:74:f9:22:aa:4a:56:2c:
89:77:00:d3:d9:c3:4c:bb:29:fa:7a:51:15:8d:83:d3:fd:e0:
26:9a:91:c9:f0:d2:a2:fc:61:eb:89:9a:32:ac:9e:a1:36:af:
43:48:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:13:22 2025 by rpki-client