Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: VMUKg3xl/rqbyWsAABKQeSTXDQ5OMz6Ykbrne0h8sXU=
Subject key identifier: A3:87:08:C1:1C:FB:C2:D3:A4:08:A3:EB:A9:A9:2A:2A:6F:82:DC:BB
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 019754232687713EA6BA94B4B69CD982C3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 12BE
Signing time: Mon 09 Jun 2025 10:01:19 +0000
Manifest this update: Mon 09 Jun 2025 10:01:19 +0000
Manifest next update: Tue 10 Jun 2025 10:01:19 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: kUUmoXo0H8eBxY9EoZXZGh0eS5IDPaPvCevOos1OX68=)
2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:26:87:71:3e:a6:ba:94:b4:b6:9c:d9:82:c3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Jun 9 10:01:19 2025 GMT
Not After : Jun 10 10:01:19 2025 GMT
Subject: CN=a38708c11cfbc2d3a408a3eba9a92a2a6f82dcbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6a:52:8c:3b:20:99:0e:ba:25:39:8d:23:16:
c0:d9:be:0c:1b:be:a3:ea:58:3f:6e:96:43:ec:31:
8b:29:46:8c:14:b1:38:5d:10:41:6a:66:0f:a0:e9:
d6:e6:16:11:98:00:94:b1:c8:c1:db:59:9d:b1:ac:
06:0a:f4:06:ce:aa:05:90:73:c4:0c:ec:16:7d:db:
3c:27:25:11:1d:71:f6:25:6c:ff:6b:db:fd:6f:96:
b6:fe:72:30:aa:4b:d0:4c:f7:95:f6:b5:f4:7d:7e:
38:8c:ff:bf:74:4b:26:0f:56:46:52:19:a9:14:e5:
53:39:1d:fb:8a:4c:51:c0:a8:0b:cb:60:e1:27:78:
96:47:de:17:3e:f1:a6:92:f7:d2:47:e7:28:5f:39:
2b:67:be:03:ae:ea:9d:83:9e:77:40:35:8b:d6:b0:
7d:29:7b:ad:db:7a:87:51:91:48:45:22:8a:cd:6c:
88:c3:03:63:8e:6d:b1:21:3f:a5:a8:b5:17:35:c8:
75:16:3c:d8:23:1f:4e:aa:48:82:5a:b0:c5:9a:f8:
67:ce:a3:e5:e5:70:32:80:81:1b:db:ad:e0:dc:aa:
40:5a:90:97:c1:86:b0:0e:f7:e1:86:a2:91:30:96:
04:a4:d9:6b:e1:d7:5c:ad:98:c3:2c:ac:41:4c:8e:
3d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:87:08:C1:1C:FB:C2:D3:A4:08:A3:EB:A9:A9:2A:2A:6F:82:DC:BB
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:15:71:b5:68:01:07:bc:92:fd:e8:6a:ca:73:fb:a7:04:65:
81:c5:89:43:96:cd:53:b7:74:2b:3e:fe:c5:28:93:14:1e:1c:
4d:7f:72:3d:56:d5:86:52:d2:c5:cd:34:03:0d:36:8b:3f:fc:
0e:6f:70:32:07:56:1e:18:41:ee:dc:80:68:64:c1:52:de:14:
72:26:47:82:3a:ce:67:75:33:34:b8:c0:56:b0:66:e3:55:af:
08:60:07:bd:7f:bc:62:5d:44:96:6d:99:00:bb:76:82:b4:3f:
2a:7a:e6:b6:c9:8b:39:25:5a:38:15:07:29:96:98:b4:33:d4:
cc:07:e3:be:f9:d6:d7:bd:9d:54:7b:3b:29:7f:e7:d0:79:0e:
c0:25:09:9c:a4:b6:41:f7:2e:f0:3a:41:ba:94:d1:f6:98:97:
c0:0d:55:ae:e6:53:5c:b4:03:bf:19:02:7c:28:38:fd:57:4a:
7d:86:07:46:a9:3b:fa:e5:8e:d0:01:1a:a0:6a:43:3c:2a:fc:
5e:74:de:17:5a:9b:80:b1:7a:1c:b6:88:11:94:65:7b:d2:2d:
8d:3f:c1:c9:5e:8e:e9:9c:bc:09:ae:45:a0:08:df:ff:c0:0a:
5c:82:d8:03:be:ee:ab:7c:3d:ff:a4:1b:3e:e8:57:f9:1e:f6:
f9:92:8b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:42:59 2025 by rpki-client