Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: KYQo74ktW9PZWboX1xNoKJzfSfg/Hkgl/KIJPG/KDuo=
Subject key identifier: A5:C1:72:06:96:F9:8E:12:9C:F6:7E:8F:B6:66:60:D5:EE:5C:C0:57
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 01976B4F8BB74618175B3DFE571856304F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 12CA
Signing time: Fri 13 Jun 2025 22:01:04 +0000
Manifest this update: Fri 13 Jun 2025 22:01:04 +0000
Manifest next update: Sat 14 Jun 2025 22:01:04 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: uvs1iD2eZGQSnb9vCIb4qt2cXQmh5QmB+fr8D/dzFqw=)
2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:4f:8b:b7:46:18:17:5b:3d:fe:57:18:56:30:4f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Jun 13 22:01:04 2025 GMT
Not After : Jun 14 22:01:04 2025 GMT
Subject: CN=a5c1720696f98e129cf67e8fb66660d5ee5cc057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:b5:a1:8e:d0:bd:8c:63:59:aa:f5:37:fb:
2d:96:15:25:e1:63:db:15:d8:2e:82:65:86:16:06:
c3:74:a8:eb:39:d7:6a:cc:c2:85:fe:68:f4:d5:f8:
e9:36:5e:75:10:f0:25:be:f1:f3:e7:eb:81:f5:32:
58:f5:df:3b:63:bd:77:85:db:03:94:d9:3b:46:cb:
73:15:33:b3:d9:d1:1c:7d:ad:17:ec:56:72:fd:43:
72:99:ea:db:70:e7:f9:64:9c:23:bf:2b:36:a1:55:
f1:45:8b:3e:f8:ab:cb:8b:f0:0e:88:89:20:97:81:
9d:f2:73:83:f9:20:1a:03:80:6d:c5:64:a1:c5:c0:
b8:35:0b:93:f2:a0:03:d6:03:e2:ec:00:f8:66:6c:
66:05:df:b4:23:39:90:a5:71:06:7f:57:e3:27:f1:
10:77:27:77:d8:17:91:f2:11:d4:dd:d8:fc:5f:43:
7f:87:2c:70:ca:52:fa:0d:6e:34:bc:37:70:a7:3c:
b8:d2:e3:a1:8d:1e:b1:f4:90:2f:50:95:78:cc:8a:
7e:d9:2e:89:0e:c6:a3:50:f1:13:9b:cc:a2:79:89:
1a:08:b0:2c:6c:a9:e9:45:62:b2:86:1a:72:04:83:
58:e4:31:0d:af:d2:06:4b:06:db:59:ea:a4:d5:e5:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:72:06:96:F9:8E:12:9C:F6:7E:8F:B6:66:60:D5:EE:5C:C0:57
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ca:4a:7d:47:d6:cb:47:1d:7e:ca:32:22:ac:44:1b:35:bc:
8a:77:e7:82:e3:aa:d1:a9:e7:b8:24:17:ba:45:91:7c:64:30:
72:75:fc:85:32:9e:3f:17:4c:ec:50:7d:d4:77:b6:fd:3c:67:
c7:a3:e9:8b:3a:02:15:62:0e:54:4c:41:32:64:b5:ce:b3:52:
1f:54:97:78:97:39:78:14:73:c5:f7:58:7a:fe:e6:a2:53:95:
c2:27:34:d5:c6:23:0a:16:74:18:fb:91:18:60:41:10:40:bb:
bd:cf:76:5f:cb:69:b0:77:e3:8d:f7:f1:70:7a:79:44:07:7e:
ac:41:0f:d3:4a:a5:a7:42:04:75:be:b6:24:8f:b6:35:0e:fd:
7d:0a:b8:c0:11:56:45:f4:42:de:e1:8e:e6:25:34:48:7c:82:
85:4f:69:2c:f5:5c:6d:3c:fb:a5:0a:b5:d6:44:89:16:5e:b6:
2a:65:9d:6b:f0:44:45:e7:27:7a:4f:1b:51:e2:e8:8c:b6:bc:
b7:f5:ef:db:1a:2f:dd:84:95:7e:39:e0:e7:25:be:f4:95:db:
19:65:4a:77:f6:06:23:fb:55:10:a9:3f:38:a8:a9:b4:18:03:
ca:96:96:df:1e:dc:60:70:b9:71:f9:ed:55:21:83:62:7f:c4:
54:cc:20:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:37:40 2025 by rpki-client