Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: IAIRqBkB2MerLZ7ZZr7/gcT70VPubI9rODJAmSzzVMs=
Subject key identifier: 4E:3D:B4:7D:41:C3:DB:63:6F:4A:06:CA:BA:F0:B1:6A:C3:A7:30:DF
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 01975DCAA1885F365882F22D9299986D5D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 12C3
Signing time: Wed 11 Jun 2025 07:00:50 +0000
Manifest this update: Wed 11 Jun 2025 07:00:50 +0000
Manifest next update: Thu 12 Jun 2025 07:00:50 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: ajODUHLTMIWIDOCiWgPWVqG3qWRQ7z9aSRQqI9/ndfE=)
2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:a1:88:5f:36:58:82:f2:2d:92:99:98:6d:5d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Jun 11 07:00:50 2025 GMT
Not After : Jun 12 07:00:50 2025 GMT
Subject: CN=4e3db47d41c3db636f4a06cabaf0b16ac3a730df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2d:9a:99:3c:6b:04:6d:5f:36:70:5d:9d:b4:
71:49:b4:a2:a2:5a:9e:23:54:cf:76:ec:46:23:0e:
43:e5:dd:7a:59:af:54:82:81:31:7a:59:bb:b1:96:
d9:0e:a1:0a:47:0c:7c:30:61:67:79:05:32:d1:2e:
d4:38:9a:7e:c7:19:5e:0d:c8:03:3d:3b:77:ba:64:
a1:26:2e:b2:60:31:03:28:88:ae:4a:2d:b6:5b:37:
86:f6:ee:a0:ae:e3:29:3b:57:3b:6f:d2:04:72:99:
40:40:55:2e:72:e2:b6:f9:f1:57:68:c7:ab:62:1d:
35:53:b8:0e:98:73:8a:66:5d:30:2b:2a:f9:d5:06:
50:c0:04:b5:7e:fb:e6:9f:17:52:34:c6:46:79:67:
8f:96:74:a5:e4:6f:c6:77:bf:06:61:ad:d9:ba:05:
bd:f1:43:34:9c:c7:e5:d6:bc:4b:c4:0f:26:a8:a9:
ca:0f:ea:a8:24:f4:61:13:03:3f:09:ea:be:8d:5b:
e1:6c:3a:ce:4d:23:18:1a:02:9c:1e:c7:ce:fd:c7:
1f:d1:56:1b:61:ca:6c:b1:e6:d6:90:99:42:4e:8f:
02:8f:b3:ae:cf:c1:03:61:a0:ca:9e:43:b7:b0:e0:
98:3c:bd:e8:19:19:07:04:44:21:75:62:de:d2:dc:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3D:B4:7D:41:C3:DB:63:6F:4A:06:CA:BA:F0:B1:6A:C3:A7:30:DF
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:36:30:01:67:1b:7a:58:89:97:1e:f8:e2:cc:d1:98:a9:4f:
cf:37:a3:2e:84:c2:c5:d4:b8:bc:dc:43:b6:6e:d0:cf:9d:37:
ed:59:b2:1b:99:87:6a:10:53:a4:bb:f3:ce:8a:97:47:dc:34:
7e:b6:52:58:17:f3:f9:ff:ff:c1:6a:eb:1d:ad:a5:46:65:dd:
26:d1:2a:fe:5a:4d:87:1f:da:65:88:da:c0:63:04:16:c4:99:
4f:17:a8:de:f6:67:94:74:41:98:df:68:58:c1:16:e5:60:2e:
ba:11:25:29:a9:73:d8:e4:78:50:21:56:1d:75:c7:7e:74:0b:
f8:7f:4e:ff:37:64:7e:b5:c2:26:7c:33:ac:4f:67:2b:9f:d4:
36:c7:f8:95:d7:ff:3f:cf:9b:b2:7a:4c:50:4d:2d:f6:68:2f:
3c:2e:f0:ae:3a:8a:48:c9:2c:07:ac:e1:bb:13:da:f0:03:8b:
66:f5:1d:0f:79:50:4f:ee:e4:ca:44:25:2e:fd:cd:48:b3:84:
5e:a8:bd:4a:25:8a:85:7f:bc:c4:df:0e:e6:4a:1a:67:35:f9:
78:53:95:83:e7:fc:c2:38:aa:6f:0d:01:12:d5:3c:26:0f:da:
68:d0:64:e9:6d:ea:76:2c:a7:d1:57:9b:b2:5c:86:ff:50:f0:
ac:f5:64:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:16:33 2025 by rpki-client