Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: x1FoC3VkxASf99Ka+axQIvig/vlLJe3YSJHmN3XstiI=
Subject key identifier: E9:03:82:04:A9:47:EE:88:E7:46:60:D1:AA:DF:EE:53:AA:F3:07:61
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 0197B7B354470256C37FFF48CE9256ADA3A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 18:01:12 +0000
Manifest this update: Sat 28 Jun 2025 18:01:12 +0000
Manifest next update: Sun 29 Jun 2025 18:01:12 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: OFM8byV1gA6WGa7GTJqtTvFl0x6+DhvDFVokGmmsCfA=)
2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=)
3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=)
4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:54:47:02:56:c3:7f:ff:48:ce:92:56:ad:a3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Jun 28 18:01:12 2025 GMT
Not After : Jun 29 18:01:12 2025 GMT
Subject: CN=e9038204a947ee88e74660d1aadfee53aaf30761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1a:9f:4d:f6:cd:8c:fd:09:cc:b6:2a:ca:c6:
64:8e:30:e5:54:35:b4:f2:cd:99:18:a1:cd:71:85:
53:6a:5d:10:d3:3b:fe:af:1f:2e:33:64:0c:07:61:
73:8b:50:58:04:9d:b2:c7:67:9b:b4:da:46:25:90:
49:9e:e3:ca:1d:35:62:49:8f:e2:a8:51:69:4a:fd:
33:e1:19:37:ed:df:c2:7c:a2:3b:4b:42:c4:29:4b:
05:aa:bd:a8:fb:08:05:e0:5c:55:b1:db:2a:fb:37:
a7:8e:72:a6:79:5a:cf:ae:b2:24:04:02:f1:32:3a:
80:81:20:fb:12:fc:93:09:a9:b1:3d:f1:a9:92:4b:
07:de:fa:fd:28:d0:87:c7:a1:7d:ce:33:3c:de:9f:
9d:7a:3d:1b:87:be:96:33:2e:61:14:80:29:95:c9:
f2:4b:4e:2e:c9:67:9d:f4:42:e3:44:77:0c:61:0f:
84:ce:46:62:19:77:df:db:ef:9b:74:62:99:e8:34:
9b:c6:e3:d9:3d:9b:ec:36:3a:03:98:c5:ba:db:aa:
43:ae:a4:6e:00:51:84:f8:91:0a:21:2e:ad:7c:e2:
15:96:15:b0:c8:2c:9d:7f:eb:d2:f3:5a:e9:40:b2:
30:ac:38:07:c3:94:8c:7a:85:00:0b:e6:64:15:9d:
58:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:03:82:04:A9:47:EE:88:E7:46:60:D1:AA:DF:EE:53:AA:F3:07:61
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:99:62:b7:4b:07:c6:b2:f9:63:9e:90:45:37:ca:18:d7:a1:
80:00:0c:f5:45:15:63:37:5d:b1:95:7d:4d:64:05:69:74:7a:
7c:01:54:a2:d1:dd:9e:d5:a6:5e:3a:69:a7:88:e8:dd:8a:ae:
69:75:ca:8e:ba:b5:37:3e:f7:cd:66:f0:13:6e:2f:36:cb:ae:
c3:74:4d:00:aa:69:96:b1:fc:d5:2c:9c:c4:89:46:ea:e4:6c:
1f:6b:66:6c:fd:c2:c7:67:ef:b2:4f:ff:79:d0:65:17:52:26:
5d:7e:e9:d9:af:25:1b:71:eb:01:d2:20:8f:9d:88:b4:08:66:
c5:9a:3d:dd:4d:13:ed:5b:07:58:08:40:a5:1c:84:37:5a:ea:
4b:9d:c3:d8:7c:8e:a9:ff:86:50:36:f1:3c:0e:88:1a:f8:1b:
77:c2:74:21:c3:7d:bb:75:e4:82:a3:0e:d8:26:d0:1d:4a:4c:
38:e8:51:87:34:f9:be:da:2b:80:a2:9f:bd:c8:8b:7f:15:d1:
b8:e1:42:99:0c:3d:d7:90:29:19:83:b8:96:32:e2:01:c3:f3:
bc:f4:de:1a:00:cc:09:83:b8:b6:12:8f:b2:1c:ae:57:6e:12:
14:49:65:28:5d:a1:ec:c8:4e:fc:57:e5:d2:7b:43:8f:04:3e:
7e:e1:3f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:15:23 2025 by rpki-client