Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: nDdsmtwpfQ6JIHpBhzzFCXIFmTMTT7BarNO0Y+7lqy0=
Subject key identifier: 8F:92:66:DF:3F:27:99:74:79:7E:4A:E6:59:56:65:E7:99:BA:75:58
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 1105BFE13B8BBB6255734242FFA3DB6EAF4EC2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 056A
Signing time: Mon 10 Nov 2025 22:06:45 +0000
Manifest this update: Mon 10 Nov 2025 22:01:45 +0000
Manifest next update: Tue 11 Nov 2025 22:25:45 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: iw+56XwsW0emjAKmXu0vtQD2J+7b7MCATYq+io7rDDY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 22:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:05:bf:e1:3b:8b:bb:62:55:73:42:42:ff:a3:db:6e:af:4e:c2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Nov 10 22:01:45 2025 GMT
Not After : Nov 11 22:25:45 2025 GMT
Subject: CN=8F9266DF3F279974797E4AE6595665E799BA7558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:e1:70:6f:a1:92:b4:a5:07:fa:ab:03:7f:
4e:69:6b:f9:52:fd:93:fd:7b:43:ab:1f:01:e7:10:
70:b4:75:4d:fe:0e:2f:53:29:16:fc:70:4a:63:a2:
f1:00:f7:be:80:8d:66:e4:a4:5c:cb:d0:53:d2:fd:
df:09:2b:3d:41:6e:2e:2f:70:22:21:d7:40:48:bc:
01:96:df:a9:b2:00:72:79:09:aa:b7:4f:74:cf:f3:
62:9b:3e:51:32:09:e3:5b:f5:39:5a:d1:14:db:f9:
8b:8e:08:d8:b7:90:38:39:5f:9f:0a:fc:8d:31:41:
fc:57:0b:c4:f7:7a:34:1a:ba:5a:0b:f0:d6:87:97:
7b:e5:9b:c1:54:f0:3e:66:a5:39:54:72:ad:0e:d1:
92:49:fc:26:c1:7b:83:1f:cf:e8:df:84:05:08:01:
51:87:db:b1:51:22:41:3b:99:22:a7:62:b9:9c:a1:
ec:38:a6:08:18:bf:b8:7f:e0:3e:db:a4:f2:39:5e:
c0:14:a6:41:c3:ee:93:55:5e:ab:e7:92:07:0d:81:
7f:a8:e9:5f:95:58:b2:e0:34:61:8a:37:eb:03:96:
ff:fd:4c:e6:9f:8d:41:ef:67:97:07:33:d2:67:9b:
17:4f:5e:07:81:06:47:2c:65:45:21:9f:f6:0f:fe:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:92:66:DF:3F:27:99:74:79:7E:4A:E6:59:56:65:E7:99:BA:75:58
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c6:69:e0:5f:26:f0:b9:eb:55:fe:09:29:38:91:c2:99:d4:
18:9f:ea:d3:66:ce:9d:87:06:47:5e:4a:dd:e4:86:db:1d:3b:
a4:d1:71:2d:09:b6:52:bb:04:a5:6d:fe:31:09:f1:e0:01:d8:
ff:e9:45:d3:da:54:50:c9:6c:49:18:56:2c:a1:7a:05:ab:44:
e5:9c:7f:ca:b6:06:ac:d1:e3:6b:9f:7b:c2:8d:a3:94:1c:0c:
ba:75:eb:38:cf:3f:16:c7:50:7a:c5:1a:71:dd:3c:df:bf:c1:
d0:e9:d5:c0:ee:cb:13:5d:2d:d0:a2:e8:ed:d9:44:4e:de:45:
bc:e2:ff:21:c9:61:97:eb:1e:88:b5:a0:e8:f8:37:f4:81:04:
f9:6a:eb:db:7f:4d:2e:bf:be:ee:cb:af:0d:04:cb:af:69:c6:
bd:c9:0c:08:64:0f:9a:b9:9a:43:f7:05:81:e2:b9:1a:fd:e3:
92:76:42:c9:e9:eb:5d:f1:2a:65:7d:19:e6:39:62:17:a1:a8:
55:a4:58:f4:f8:bc:41:ae:e1:f8:87:dd:90:f1:7e:6d:1d:68:
b4:d4:06:85:61:99:6c:e0:57:bd:92:59:5c:7b:ee:4d:1a:25:
49:3f:a5:79:0a:4a:db:eb:d4:c9:90:98:19:a9:42:a4:9f:e7:
19:fa:e6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:38 2025 by rpki-client