Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: dRauKF9I8m8yLf5RrdUIVeze6+sQ8OZPXLFC+pc8oNc=
Subject key identifier: 62:9E:99:F7:B3:67:7A:DC:49:DF:6B:B6:C3:40:93:B5:D7:47:66:0F
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 0197B70E6820D0EC4AC17AB09805E071EBC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: 2F
Signing time: Sat 28 Jun 2025 15:01:04 +0000
Manifest this update: Sat 28 Jun 2025 15:01:04 +0000
Manifest next update: Sun 29 Jun 2025 15:01:04 +0000
Files and hashes: 1: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: QrCSnCI1x/Hfj/zo93jtCxQ2BYBGaSHQMgv+sPAL4F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:68:20:d0:ec:4a:c1:7a:b0:98:05:e0:71:eb:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: Jun 28 15:01:04 2025 GMT
Not After : Jun 29 15:01:04 2025 GMT
Subject: CN=629e99f7b3677adc49df6bb6c34093b5d747660f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:4e:5b:70:b5:0c:37:ff:92:89:1f:99:1c:
be:a3:08:1d:4a:b4:37:d8:ea:b4:8d:cd:28:57:27:
7e:82:d3:06:38:5e:9a:2f:c7:76:87:06:e0:e6:ac:
db:87:27:71:e1:fe:5f:8e:bd:1d:77:84:34:4e:30:
d0:ba:86:6e:71:da:8c:ab:a9:c9:64:03:83:52:80:
51:4b:9a:e1:1e:bd:c6:f9:31:ee:01:f8:1e:3b:19:
a4:f8:29:99:3b:57:d4:83:8e:89:06:d1:c6:b7:47:
1e:e7:32:31:e3:de:69:dd:ca:21:ff:2e:68:f6:3c:
08:51:a1:dc:bb:a1:e0:f8:20:d6:51:04:2b:c7:60:
a2:fb:12:b0:56:f3:ec:e0:40:b4:94:81:d2:2a:3f:
4a:22:6d:e2:1a:a9:c4:aa:a8:ca:1c:16:bb:1f:84:
aa:84:67:90:f5:e4:ec:25:fa:98:fe:18:f9:d2:92:
66:2b:a0:03:70:68:bc:df:36:d5:68:c8:5c:64:98:
86:75:c3:2d:2a:b2:44:8d:7c:3e:63:84:fe:2e:a3:
18:1b:7f:d5:17:1d:b7:87:b9:8b:35:80:e9:cd:c7:
34:bd:ea:ea:71:c0:f8:1d:99:a2:6e:41:31:3f:11:
c2:12:7f:cd:7c:9b:4c:e9:5d:8d:44:a4:49:3c:68:
2c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9E:99:F7:B3:67:7A:DC:49:DF:6B:B6:C3:40:93:B5:D7:47:66:0F
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:6b:ed:e0:2d:00:e2:ef:55:9c:4c:fc:6f:b1:83:5f:1f:a5:
97:d2:f4:e8:13:ad:bf:40:31:bb:95:3b:2b:6d:90:4b:63:aa:
e7:0f:7e:ef:9d:6b:a8:22:da:da:68:92:21:f1:35:84:ef:63:
64:65:72:82:12:e8:94:28:02:a6:5d:11:36:ac:c2:16:c6:f6:
a8:32:59:37:46:98:51:f0:d6:7e:f6:aa:49:0c:e4:43:e8:35:
b1:69:c2:76:e1:2e:ad:d8:37:fc:92:1a:c1:6a:ea:94:2f:1c:
c9:25:c1:3e:ad:7f:8e:fb:96:60:13:5f:fd:69:a5:32:94:e7:
3b:88:15:34:70:66:b6:7e:99:d6:7a:cc:3c:8d:57:54:3d:64:
6c:d9:1a:42:2d:ea:5c:52:0e:f3:ce:c0:54:c7:d7:ce:bd:cf:
59:c1:43:e3:1a:a7:fc:5f:5f:a3:94:fa:df:45:9e:ec:fc:a2:
4d:62:fd:6d:98:01:be:48:31:f5:6f:8c:77:2a:e9:43:89:07:
45:05:fc:7b:29:af:b3:02:7b:3d:3f:18:e1:88:cc:b4:e5:b3:
cc:40:96:0d:57:d5:0f:b4:19:2b:1e:9c:d5:4b:b5:f9:39:47:
ae:dd:5a:bf:ed:60:ca:35:be:9e:09:d4:a7:a4:65:96:d0:51:
0b:3b:6d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:04 2025 by rpki-client