Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: YvDpTKVyJuuoSfg/kg86wAwqN1YGchTJ7yyDJARpQN0=
Subject key identifier: 1C:F8:33:06:DB:ED:0E:11:92:FB:1F:03:D5:E8:4D:20:DF:4D:68:44
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 019A003543FFFDD859BFBFCA564B1A6B30B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: 015E
Signing time: Mon 20 Oct 2025 06:01:22 +0000
Manifest this update: Mon 20 Oct 2025 06:01:22 +0000
Manifest next update: Tue 21 Oct 2025 06:01:22 +0000
Files and hashes: 1: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: zLncNHXDUD6jQjI3wm9q5N1xBU6YK5WgzIkA14tvywk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:43:ff:fd:d8:59:bf:bf:ca:56:4b:1a:6b:30:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: Oct 20 06:01:22 2025 GMT
Not After : Oct 21 06:01:22 2025 GMT
Subject: CN=1cf83306dbed0e1192fb1f03d5e84d20df4d6844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:60:38:57:cc:dd:cf:ea:1d:e0:9d:ec:2b:
64:3f:da:26:8f:5a:87:73:e1:13:a4:37:80:c0:18:
01:ba:f5:fe:61:8d:74:9a:de:04:09:0d:d1:f2:bf:
25:f9:89:dd:bf:8d:b8:5b:02:04:7d:e0:ba:9c:fd:
fd:1b:28:1d:0d:00:2c:8f:b6:95:ef:98:4f:56:84:
bc:76:ff:62:d4:79:53:ae:1d:7c:95:01:92:c9:fd:
87:0a:5d:c4:31:2f:0a:28:75:b7:1b:9d:b8:d5:d6:
bc:96:05:7b:6f:02:83:30:d3:1a:98:69:51:4e:47:
cd:10:ca:f7:08:eb:d0:75:de:e4:03:64:aa:2f:69:
51:ad:0e:1d:6f:8c:39:f5:96:ac:4a:90:f3:dd:3c:
58:2a:de:f1:fb:30:fd:cb:a2:e6:3b:e6:cb:6e:25:
69:10:45:61:51:5b:4b:aa:2a:c3:a7:d0:9e:a9:2c:
38:7d:63:f2:70:5c:24:0b:2c:94:89:ad:a7:c1:01:
7d:00:a2:6b:0a:b9:30:a2:b1:f7:c3:7c:e2:00:1e:
b1:b8:1b:9f:c0:1c:08:1c:cb:04:64:e0:32:3b:f3:
38:68:d4:51:fb:ba:04:ff:43:5b:10:4f:0c:5e:bf:
81:f3:8f:37:6c:26:58:d5:ac:07:0d:01:09:26:e3:
2e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F8:33:06:DB:ED:0E:11:92:FB:1F:03:D5:E8:4D:20:DF:4D:68:44
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:29:72:9b:51:b9:00:7c:ea:7c:fb:69:f3:0a:e7:cb:31:ea:
ac:c3:6d:eb:2a:13:67:29:9f:32:62:37:34:c1:8e:65:cb:32:
f5:10:5b:c1:b5:2d:69:16:b5:7e:dd:e5:58:bc:8a:d7:86:93:
59:e5:80:60:45:c8:72:f7:5b:87:96:96:65:19:7d:73:bf:8f:
2c:fc:4a:bb:d8:f7:88:a6:17:ef:f7:b2:7a:29:9e:f0:c0:3e:
55:49:75:7a:39:dd:a1:f8:e2:62:d6:02:34:89:96:4a:0e:73:
71:ea:f0:88:03:d4:af:d3:a6:7c:bd:08:b7:b7:54:77:4d:46:
b2:3d:81:e0:da:71:9b:b3:7d:06:52:15:22:60:c2:43:1a:c2:
99:1d:02:19:01:55:d2:38:a8:b2:88:90:29:29:96:f0:b5:be:
f1:f9:89:7f:a1:b0:25:d6:8b:84:3e:50:27:65:bc:aa:29:67:
91:ec:44:3c:19:aa:ba:d0:00:8d:fa:f2:2d:b4:90:e3:cc:89:
03:86:e7:07:22:53:eb:33:d1:35:40:c0:3c:3e:bd:3e:9b:24:
cf:21:a1:8a:0d:13:95:cb:88:7a:04:54:86:61:59:e6:44:33:
04:b0:3e:f3:f9:49:7d:6b:59:fa:14:74:68:a8:63:1e:ea:eb:
0b:72:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:46:53 2025 by rpki-client