
Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: p3TDfTeiFHhqtSzS9t407FG4C2XbDfwdyMLPZz9c4Ts=
Subject key identifier: EA:04:03:49:D0:68:6C:A6:C9:24:15:F6:C9:A4:F5:44:4E:39:DB:93
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 7205A828C25969092CF4ACB27DDC3A284ED87521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 0447
Signing time: Wed 16 Apr 2025 16:38:29 +0000
Manifest this update: Wed 16 Apr 2025 16:33:29 +0000
Manifest next update: Thu 17 Apr 2025 16:42:29 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: T/jpQvGnWtbxaL1JoNnnwI83X37FxGSax+YBW7VADPM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 16:42:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:05:a8:28:c2:59:69:09:2c:f4:ac:b2:7d:dc:3a:28:4e:d8:75:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Apr 16 16:33:29 2025 GMT
Not After : Apr 17 16:42:29 2025 GMT
Subject: CN=EA040349D0686CA6C92415F6C9A4F5444E39DB93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:fb:50:8b:8a:d4:34:07:8b:94:49:d5:9d:
8e:65:e2:50:17:6d:49:c0:8c:e4:3d:c1:ee:81:85:
27:49:71:d7:eb:78:f9:fd:a5:49:cd:4f:36:2b:f4:
ee:46:be:1d:c9:1b:e6:23:fc:52:8a:41:42:6d:95:
22:25:16:59:c5:2f:fb:39:40:c3:17:e1:f7:94:06:
ca:2a:05:cc:ea:b4:12:5f:5d:1e:64:5b:63:fe:2f:
56:cc:59:fc:6d:0b:39:84:7c:3b:0e:22:d2:02:30:
4e:9f:9d:30:2d:e7:ef:b9:04:97:72:eb:87:d3:09:
2f:16:83:bf:8c:1e:6b:3a:25:4d:86:6b:4c:78:f4:
b8:6c:45:88:a1:85:2e:52:6d:bd:a7:37:de:a3:af:
ef:86:21:95:fd:ad:26:67:82:1b:27:12:7b:1a:ac:
44:d9:44:57:d1:b4:d7:4d:da:05:1d:ac:74:37:44:
0d:57:7b:ef:3f:d7:c5:a6:d6:bc:b5:5c:26:3d:c5:
76:11:72:88:2a:18:1d:8f:5b:a0:40:ef:28:89:33:
2e:dd:6e:6b:9e:12:58:79:ab:0d:0f:73:84:2d:50:
97:61:c6:34:3d:04:59:08:09:8d:39:cb:a7:0f:15:
9d:b2:d3:23:c1:77:2b:5b:c4:e7:61:a9:1a:6f:d4:
11:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:04:03:49:D0:68:6C:A6:C9:24:15:F6:C9:A4:F5:44:4E:39:DB:93
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:75:71:a6:dc:a6:13:de:65:8c:9f:a5:fb:97:fe:6a:ab:92:
b3:1a:51:66:8a:23:c2:79:c7:ca:06:78:d8:e7:45:87:30:74:
fb:73:e1:03:71:47:21:6a:31:f9:f5:35:0a:76:77:b0:f3:3a:
78:68:b3:e9:d9:dc:bb:25:3b:f3:fd:3f:c3:86:7f:29:32:e7:
75:8b:1f:6c:5a:d0:d5:ce:45:fe:c7:8f:8f:a2:a2:98:47:98:
48:b1:67:d4:67:8b:b1:e8:16:b6:20:c0:eb:d1:91:31:51:ee:
a2:da:96:2e:c1:aa:44:67:77:24:8b:68:53:45:28:f1:f8:bd:
bd:d1:db:cb:70:d0:7c:85:5d:a7:4b:0c:7c:0f:85:bf:04:c3:
20:39:19:06:7d:fc:2d:47:a9:69:56:6b:d9:41:ff:c4:6a:7a:
27:0d:d0:00:80:27:42:23:8f:e8:b2:71:6b:c3:1a:28:85:75:
92:49:bf:4d:a0:64:47:46:ea:06:75:f5:0b:bc:6b:d3:98:d4:
06:f0:1b:c2:cf:d4:40:c9:0a:24:9a:35:cc:c4:e1:62:72:5d:
d1:94:d0:a5:b9:ac:6f:2c:6b:85:52:b5:67:f6:ac:79:99:d4:
ca:cb:33:0b:05:ba:90:4d:53:3a:0d:64:72:18:ac:66:23:f4:
0f:5e:ea:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:12:16 2025 by rpki-client