Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
File: 29T45HYjd_hrB6h1P26Y9vS2t5I.mft (raw, json)
Hash identifier: Mxbx/VQBxoR9IDwgpPPqWOHKgPMdHIaYptj3UIu0hpc=
Subject key identifier: 1F:20:C0:FA:22:32:2C:AA:76:E2:C8:17:9D:91:D0:41:1F:44:42:EF
Authority key identifier: DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
Certificate issuer: /CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Certificate serial: 019931C86126DF83CF475E3B7C9E750629AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
Manifest number: 1688
Signing time: Wed 10 Sep 2025 04:00:39 +0000
Manifest this update: Wed 10 Sep 2025 04:00:39 +0000
Manifest next update: Thu 11 Sep 2025 04:00:39 +0000
Files and hashes: 1: 29T45HYjd_hrB6h1P26Y9vS2t5I.crl (hash: rxAxwvy2+FooMmvMYoEN/zR0TLQGH3l1ru9MuHXVTAI=)
2: Bx5AqFrmCEvvpg5PP6G3iYi6cm8.roa (hash: nv+50RjE0P7RZsHAtUfv4vKeiING47CC1niIjtZ9NmE=)
3: EjiEhqCQfFeJxheh78DjOW0HnX8.roa (hash: xMjHQVoybWNabo3SxaU+I1LoAYBSZrLhM+vfUEw6Ma8=)
4: gmpsE3gYpq4JCSohIVHDm3a0vAc.roa (hash: UIxgMbyZxswMhLzYSeqRYLHgjf+FlKpy5d7Je9K3bz8=)
5: hsQv-_pPjXxEs3KS3Yli7KkGY8s.roa (hash: hNWKluVfWlyL1Lj4BF60xi3YP+tHJFMq6o5hVtlALzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:c8:61:26:df:83:cf:47:5e:3b:7c:9e:75:06:29:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd4f8e4762377f86b07a8753f6e98f6f4b6b792
Validity
Not Before: Sep 10 04:00:39 2025 GMT
Not After : Sep 11 04:00:39 2025 GMT
Subject: CN=1f20c0fa22322caa76e2c8179d91d0411f4442ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:19:74:3d:3c:04:9d:cc:d0:11:d4:4b:2f:
03:12:71:be:0b:d8:5b:1f:f7:b5:1a:b2:25:cc:cb:
8c:25:ad:9f:00:80:bb:ab:9a:28:97:f0:cc:91:0b:
b9:ca:ea:c1:91:8f:63:dc:5b:75:fa:d6:82:ee:92:
37:83:74:13:31:15:e8:50:50:b5:1d:eb:c5:d2:14:
68:f9:80:0b:8e:7f:88:d9:e9:07:e4:3a:94:d7:1a:
3a:92:e6:3d:da:da:43:08:6a:80:15:11:6c:98:1e:
c6:d5:94:d1:02:c0:26:fb:ec:8a:71:7f:9c:33:83:
b4:0b:54:51:34:c1:c9:e6:ac:a4:72:70:d6:8e:bb:
96:be:87:de:da:32:f2:a1:f7:ef:32:26:05:3a:77:
0b:b5:b6:ef:d2:13:94:21:2b:25:f5:46:ca:4f:2f:
a0:8c:71:7c:c9:3d:34:82:80:6f:45:0e:46:8c:a7:
59:c7:e9:82:35:aa:8f:dd:66:2b:92:3d:f8:16:17:
b8:59:73:03:06:a1:7e:e9:5c:b8:7f:72:6f:6c:91:
dc:d9:d2:5c:e1:85:c1:6e:dc:15:96:2c:25:d8:f6:
45:72:bc:dc:36:45:4a:f8:82:56:c9:18:ef:68:cf:
03:be:0b:a8:70:cc:4d:01:fd:4a:b7:f0:48:83:57:
44:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:C0:FA:22:32:2C:AA:76:E2:C8:17:9D:91:D0:41:1F:44:42:EF
X509v3 Authority Key Identifier:
keyid:DB:D4:F8:E4:76:23:77:F8:6B:07:A8:75:3F:6E:98:F6:F4:B6:B7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29T45HYjd_hrB6h1P26Y9vS2t5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3f65d-afab-4d28-b46e-620a79cf792b/1/29T45HYjd_hrB6h1P26Y9vS2t5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:da:3b:33:50:04:dc:cf:80:9c:1a:50:b8:57:7c:7e:76:41:
e1:bb:b4:c9:d7:5d:ba:87:34:98:77:e5:de:09:03:55:7a:14:
04:a0:87:bb:52:c9:e7:6f:b6:e9:b4:cb:3e:c0:c6:1f:6a:11:
66:57:88:24:52:83:6c:7b:e0:51:6e:74:ec:f3:3c:d8:65:ef:
43:51:1d:26:91:c5:f7:39:8f:8a:a8:ea:1c:ca:6f:ce:55:7e:
ce:df:63:3d:a7:3f:5c:ee:23:5c:5e:a0:98:d8:80:a6:e5:2e:
b5:06:3e:f1:dc:0c:11:d6:c1:b8:96:32:10:f6:81:63:5d:a5:
11:d7:ff:bc:1a:bb:06:0d:1b:7f:4f:6a:92:d5:8b:b0:0f:85:
c9:5d:68:07:54:7b:1b:a9:42:43:79:d2:8f:56:6f:21:d8:7f:
ce:73:e3:c6:f4:f6:1e:54:9a:0b:83:71:3b:49:74:44:af:a9:
60:27:53:f3:1f:2f:4d:88:be:d3:bd:e7:02:6a:87:09:61:26:
1d:dd:1d:a6:fa:5e:4f:d6:7e:05:73:a8:0f:d0:2b:8a:bc:51:
93:cb:65:42:83:d5:6a:17:42:9c:78:a6:2b:cf:d1:4b:52:fa:
3a:60:7a:9b:66:eb:2a:ae:bb:62:6d:93:1b:45:43:d1:22:24:
68:99:7e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 07:33:19 2025 by rpki-client