Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json)
Hash identifier: rPTan8vdWsCpSBHuAt4ifhewgb0KxR3/riB8SZ9dSpo=
Subject key identifier: F3:60:75:98:AB:B2:58:87:D5:64:97:CC:0C:63:9B:10:47:8C:B6:ED
Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Certificate serial: 0198D8BD72A6D1F3BD527DBF0B24ABB14615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
Manifest number: C5
Signing time: Sat 23 Aug 2025 21:02:30 +0000
Manifest this update: Sat 23 Aug 2025 21:02:30 +0000
Manifest next update: Sun 24 Aug 2025 21:02:30 +0000
Files and hashes: 1: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: Q7EIT8xzGIyw86zgAvqSairG1zngobNIMXkPNzfjst8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:72:a6:d1:f3:bd:52:7d:bf:0b:24:ab:b1:46:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c
Validity
Not Before: Aug 23 21:02:30 2025 GMT
Not After : Aug 24 21:02:30 2025 GMT
Subject: CN=f3607598abb25887d56497cc0c639b10478cb6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2b:ec:4b:a0:ea:d1:93:0f:1f:6d:4f:7a:7a:
6b:cd:06:cb:f7:18:39:f8:61:2f:e0:b5:cd:c4:c1:
af:e1:1a:86:2d:5b:05:5a:83:35:f1:04:60:bc:4b:
47:4a:8d:91:87:e1:16:93:aa:1a:3b:74:d2:2c:54:
66:2b:32:48:f3:55:5f:a0:cd:4f:fc:aa:c4:3d:01:
83:23:7e:71:9b:b8:e8:0c:e9:dd:01:5e:99:94:85:
dd:b3:a7:44:ef:10:24:44:b3:fd:01:73:c2:49:a1:
d1:53:32:fe:4f:14:2f:77:d3:8c:89:0f:a0:4d:85:
29:54:7b:fd:16:54:c3:44:b9:29:77:73:55:f8:93:
57:8f:fc:37:17:4f:50:d9:fd:05:96:81:9d:4d:c3:
46:79:91:d9:24:cb:e8:4d:52:73:57:af:a5:77:3b:
7c:18:98:73:eb:d7:94:dc:0c:bb:3d:b0:6c:ce:2e:
c3:c8:ca:5f:c3:1a:8d:26:3e:85:40:c5:ec:6b:75:
11:66:06:23:2b:18:56:8d:9d:be:09:73:91:2e:9b:
fb:0f:fd:ce:1c:91:dc:6b:04:b3:b8:0e:78:ef:28:
b5:ad:04:f3:e6:9a:2c:6f:75:d7:bb:a0:09:6c:c6:
d6:32:94:9e:3f:8e:70:4e:07:d0:6b:45:44:f6:00:
28:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:60:75:98:AB:B2:58:87:D5:64:97:CC:0C:63:9B:10:47:8C:B6:ED
X509v3 Authority Key Identifier:
keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a7:30:69:c5:9c:7a:7b:1c:09:ac:d7:f0:d0:58:c6:d0:ba:
84:c9:bf:c8:64:df:5c:04:a8:85:81:ff:5c:8d:7f:c2:05:31:
08:74:df:a5:10:7d:71:e9:da:54:d1:d3:bd:98:d7:19:29:37:
ea:4e:e3:17:37:0e:c2:e9:ef:48:4a:df:85:4a:b6:a9:3e:cb:
bb:91:6f:57:35:f4:e0:88:9a:b8:ef:b8:d2:e9:7c:50:aa:6c:
d5:60:eb:c8:02:63:de:76:9c:1b:42:b7:b1:09:b3:09:19:ef:
6f:0b:f5:a8:9f:5b:bc:69:e6:78:e8:01:91:6f:9c:43:a7:a3:
f5:b2:a2:57:0f:8c:a9:30:cf:b0:ea:13:15:a1:5c:c9:2b:73:
f5:27:4d:3a:17:19:7b:da:da:3b:c6:62:d3:b9:75:71:f4:86:
5c:ca:b6:93:69:55:97:06:f6:e7:2e:8f:77:8f:18:b4:1c:dc:
f3:20:fd:14:f9:a4:10:a3:cb:85:6b:77:c1:0b:b6:7c:d1:98:
3d:56:ce:42:20:aa:37:06:98:d5:83:60:f1:c1:4b:fb:c5:f9:
42:10:ec:da:bd:4e:47:6b:1d:d4:e6:5c:4f:65:19:9d:55:36:
4f:be:1d:89:d9:fc:27:03:88:0a:ed:3f:75:42:c6:63:05:7e:
b3:6b:77:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:01:42 2025 by rpki-client