Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: Xl99QEgLCy0/UcxBGYPreb1CvFk3utVR0Pqh5bbYnLg=
Subject key identifier: 90:FE:E5:D1:98:57:19:19:79:C0:1C:BD:1A:47:81:13:2C:37:55:AF
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 5194E1CDFAAAEF484EC7F04BDDCBC79D74767990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 048F
Signing time: Sat 07 Jun 2025 05:27:18 +0000
Manifest this update: Sat 07 Jun 2025 05:22:18 +0000
Manifest next update: Sun 08 Jun 2025 09:21:18 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: as2h6q8yMbRXJ7g70RLakA31yzyC7JsnCXgIUypT8nM=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:94:e1:cd:fa:aa:ef:48:4e:c7:f0:4b:dd:cb:c7:9d:74:76:79:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Jun 7 05:22:18 2025 GMT
Not After : Jun 8 09:21:18 2025 GMT
Subject: CN=90FEE5D19857191979C01CBD1A4781132C3755AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e9:ca:40:f3:35:50:22:cf:c7:2c:a6:66:43:
c4:aa:2f:29:9e:55:a9:d4:9e:38:0b:f3:3a:ef:4d:
98:74:57:5a:21:35:9e:f0:82:28:07:d5:dc:02:37:
a7:90:a5:c7:a8:db:be:da:37:69:7e:df:ab:a2:20:
4d:dd:5c:6a:f9:09:b4:39:e1:ec:02:59:5e:cc:62:
c5:3d:0a:7c:ec:cf:26:5a:d5:6c:4d:fa:68:60:e6:
c3:01:9a:22:9c:a9:2e:14:4d:f0:3c:b9:b3:66:15:
f9:00:c2:84:1a:e2:6b:af:30:05:5b:d4:fc:85:f9:
d8:b3:66:54:d8:01:77:f5:8c:d7:90:87:f4:02:3b:
da:ba:fd:ef:1d:e6:a3:e4:d9:ee:54:66:f5:21:96:
8f:c0:38:0f:38:79:39:86:5c:a9:ef:df:82:46:9c:
aa:b2:e8:e0:4c:90:64:c9:86:b7:60:6c:c1:f3:cd:
f4:34:e4:f3:4d:07:9a:5e:11:06:a7:df:ac:b5:98:
e2:5b:de:01:13:68:a5:d4:ba:b7:b3:7a:9d:7b:13:
97:fd:ed:98:67:e3:ad:98:ce:12:cd:73:58:a2:ad:
b7:a2:fb:d9:11:e3:dd:e5:b1:af:a5:cf:5b:e5:2f:
99:3b:ea:5c:9d:4b:85:f8:15:24:10:c8:3b:3f:49:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:E5:D1:98:57:19:19:79:C0:1C:BD:1A:47:81:13:2C:37:55:AF
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:73:aa:32:cb:76:63:82:b7:2b:61:6e:f1:48:20:de:e9:06:
81:53:ae:3a:58:3b:7e:5f:9c:c3:bb:f3:6d:1c:38:cf:e7:83:
8c:ab:8e:6c:46:a9:f7:51:e3:97:94:16:79:ce:f4:3d:b9:00:
a6:85:12:d6:65:d5:cf:3f:b2:26:42:ed:7e:6a:3a:eb:f1:04:
a6:70:04:01:6e:ba:18:db:6e:75:5b:0c:9c:9f:ff:e0:f4:17:
8b:d6:57:65:ea:b0:43:80:6c:ba:8b:d5:a6:ba:4e:d8:2a:63:
0c:0e:b3:ce:12:30:3c:0a:78:4d:53:33:e9:d3:be:e9:a4:d8:
4d:70:82:52:ad:61:70:10:8b:f1:60:68:68:f9:1f:75:1e:2e:
61:42:d3:2e:9d:d5:08:be:df:a9:78:ca:e0:a0:61:2d:db:b3:
b3:9a:9e:9a:2e:83:0d:77:60:05:99:bf:1b:37:3a:e8:3b:26:
4f:69:7c:25:57:c4:a6:76:51:9f:3e:22:ae:0b:5e:a8:6f:e3:
03:a5:e0:95:15:dc:b7:57:40:b5:5f:b7:b8:94:2e:4b:49:27:
ee:d8:92:0f:7d:e8:e5:e5:9f:7b:1a:8d:bb:5b:0d:a4:cc:67:
11:6c:3b:36:2e:96:30:1a:98:41:28:b6:c4:62:6f:27:58:42:
df:13:00:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:22:33 2025 by rpki-client