Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: UsDeCNQPaP68/5iIx6ZUB7gbCvYLLoSvPsvRBN+CHG4=
Subject key identifier: 63:8C:7E:81:6D:60:A2:04:6B:3D:78:8D:F6:0A:D9:0D:98:5A:33:86
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 28E87662E0FBB84E4D22B2E8934ADEEEC6A82199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 0512
Signing time: Sun 07 Sep 2025 08:44:16 +0000
Manifest this update: Sun 07 Sep 2025 08:39:16 +0000
Manifest next update: Mon 08 Sep 2025 10:20:16 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: kYHXrckBy+FOptMkngPD8luhmB5GP0t37DQlI9aX62w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:e8:76:62:e0:fb:b8:4e:4d:22:b2:e8:93:4a:de:ee:c6:a8:21:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Sep 7 08:39:16 2025 GMT
Not After : Sep 8 10:20:16 2025 GMT
Subject: CN=638C7E816D60A2046B3D788DF60AD90D985A3386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b4:d9:63:d9:3b:d0:42:23:6f:4a:f5:de:a3:
64:54:05:88:30:cc:f8:4e:91:03:a8:31:47:21:55:
c8:57:00:d9:c1:2b:42:99:51:73:22:f5:10:90:ae:
04:ff:32:33:c6:28:57:25:66:94:a2:4c:3a:eb:30:
d6:fa:83:cd:d7:6c:b6:70:27:77:af:34:98:de:51:
8c:c7:89:6f:9c:3d:9b:79:a4:95:30:95:b5:f1:d6:
c7:87:78:6b:f7:69:0a:8e:71:cd:ed:33:f3:99:c0:
57:08:62:1f:c7:d8:55:c4:67:2f:c5:d1:24:57:57:
db:af:82:a4:1d:f8:98:9f:8e:c4:a1:d4:c9:e2:ce:
bf:08:32:16:16:78:e5:ca:c3:c6:5a:08:f0:09:dc:
c8:bb:46:ae:7d:93:a0:f3:a9:5f:4f:b7:6f:70:23:
f1:90:02:54:db:c8:5c:c4:c2:2c:1a:71:fd:b2:d4:
a1:e5:b3:db:f8:94:35:6d:38:05:cc:f6:1d:54:fc:
a1:9d:fc:65:c3:6f:9a:bc:d3:53:5b:4b:9c:bb:5e:
28:67:46:fb:ff:b9:6a:67:7b:c6:56:e9:3e:4a:19:
1a:ff:43:7f:b6:a6:b7:f0:1d:14:f3:b8:7d:49:b6:
44:f2:d8:a4:42:8b:2f:2e:0a:c6:98:88:0e:dd:41:
5e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8C:7E:81:6D:60:A2:04:6B:3D:78:8D:F6:0A:D9:0D:98:5A:33:86
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:28:0c:d6:2c:ce:20:e2:76:80:24:52:81:3e:d9:e2:cb:99:
f4:0a:07:c6:d3:70:f8:19:96:89:ef:e5:2f:d6:b6:39:b7:ff:
54:ac:d2:ea:2b:5a:76:8b:ba:75:e8:77:fa:e0:29:65:d6:de:
d7:44:bf:37:cb:d8:86:eb:7b:1f:1f:1e:e0:31:77:96:a7:fd:
1f:87:c5:2b:5a:60:05:c9:2e:c3:bd:45:96:ed:35:3c:b2:aa:
b6:4e:e5:4f:ba:be:3f:b8:06:2f:e7:1a:45:fc:cd:67:c6:51:
03:47:06:51:9e:96:bd:f7:7c:4c:c9:5f:b3:c3:2b:25:41:83:
40:15:a6:07:ea:a0:a1:75:b1:9e:1e:f5:3d:0b:8d:e0:c3:fe:
00:e6:9d:83:49:80:1c:2d:49:95:14:11:c9:04:b3:cc:7a:45:
cb:88:72:2c:ff:2a:59:c2:2a:ae:11:c3:37:86:2c:18:d4:68:
ff:02:0d:a0:c6:07:61:bf:b4:ec:92:d9:f4:93:43:7d:d2:a1:
d6:3a:4d:74:b9:79:d8:ab:c4:0a:9f:ef:52:94:b1:b3:28:15:
16:a8:44:84:1f:30:93:06:06:7d:e6:18:f6:27:b0:9b:ff:26:
83:0b:22:3d:55:dd:e5:78:0c:1e:34:f0:fb:39:c4:a5:48:8a:
d2:75:01:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:10 2025 by rpki-client