Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json)
Hash identifier: d/3dxePpo/C1OCIog/SMxHRqb1uaU23DyXUyLx12NZw=
Subject key identifier: FE:80:71:F1:B3:49:6B:CA:4F:69:58:64:A7:29:1A:0F:DF:E2:B4:BB
Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Certificate serial: 0198D5839E6F1653BAD0F7CB6C994F66CA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 06:00:29 +0000
Manifest this update: Sat 23 Aug 2025 06:00:29 +0000
Manifest next update: Sun 24 Aug 2025 06:00:29 +0000
Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: kjvknmI/3ex72DhvBFEQ0xtMwi6kPzGz5/VVwt5Fn38=)
2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=)
3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=)
4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9e:6f:16:53:ba:d0:f7:cb:6c:99:4f:66:ca:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451
Validity
Not Before: Aug 23 06:00:29 2025 GMT
Not After : Aug 24 06:00:29 2025 GMT
Subject: CN=fe8071f1b3496bca4f695864a7291a0fdfe2b4bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:0f:be:d6:bb:68:dd:d7:7e:de:84:df:89:
e8:93:e0:0b:e3:2c:81:af:4e:3d:ed:0d:26:29:fa:
ce:c4:7c:d3:96:63:67:0b:ea:ff:d0:3c:ee:b5:77:
c7:61:ee:c9:f8:cd:30:6d:64:39:47:65:14:0d:42:
9d:60:9f:fc:e4:72:60:53:64:ea:7f:e1:10:96:a1:
48:e0:28:94:eb:08:9e:6a:22:dc:2c:ad:18:19:1c:
8f:ab:5d:3e:df:1d:c8:a3:f2:c9:8e:e8:bd:62:0f:
af:4d:71:d1:4a:ff:db:a5:31:8a:bc:09:4e:92:e9:
24:57:9a:0a:97:03:78:af:69:c4:77:ce:e9:e9:67:
f4:79:0a:65:93:ec:d2:5a:c9:42:c4:a9:47:c2:e6:
da:ab:d7:04:31:15:93:5d:b3:22:7a:74:35:ab:4b:
8f:02:4e:bc:ab:b3:3f:56:47:5e:f2:07:8b:97:65:
cf:99:8a:ff:14:77:9a:a7:7f:0d:2f:bf:be:2e:de:
fd:4f:ce:3c:b4:bf:d9:24:6f:ae:c7:ea:0a:21:86:
e9:13:69:dc:c0:a5:39:f4:9d:08:25:8a:92:57:75:
b1:d7:aa:ba:a9:1d:31:28:e1:b5:1d:e5:78:ee:50:
59:a3:d0:8a:42:eb:79:cd:c1:be:1e:3c:f3:c7:c2:
cb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:80:71:F1:B3:49:6B:CA:4F:69:58:64:A7:29:1A:0F:DF:E2:B4:BB
X509v3 Authority Key Identifier:
keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:52:c9:c1:3a:2c:a3:3b:61:89:e7:77:60:39:8e:76:a4:72:
0f:5b:40:ec:94:37:f5:83:cb:f4:3c:37:5b:e4:98:83:a5:45:
6c:e5:08:a9:6a:2c:7c:8b:d4:b4:87:66:ef:e0:95:2b:ed:72:
15:30:8f:d1:69:52:4d:5c:73:d2:ba:11:c9:40:98:30:fd:2f:
61:9a:64:0a:38:b3:20:76:cf:1f:c6:a3:cf:39:25:10:55:ac:
07:72:28:c7:1b:6d:99:15:e0:c0:dc:89:17:37:d1:d4:6e:3f:
9e:6c:c1:aa:46:70:07:8a:55:60:08:e6:aa:ff:c4:04:c9:7e:
55:94:71:3a:6c:f3:2b:74:ed:ef:cf:a9:74:a1:4b:c2:47:17:
4f:a6:02:69:02:10:df:14:9e:75:e8:52:f2:4f:82:21:c7:2c:
f7:c7:09:fe:b1:c8:e5:01:d9:90:bc:ba:a1:65:6d:33:4b:c0:
f2:b0:89:0a:00:a6:05:c4:78:81:44:8f:82:ed:1c:91:f0:74:
99:53:48:80:3f:f0:1d:67:65:09:1b:79:c4:ef:d7:1c:50:f7:
90:95:49:7d:21:e9:47:ec:3b:e7:15:02:d2:ff:cb:d3:a5:8a:
ac:65:82:21:b1:d6:11:7d:c5:64:21:34:f6:63:73:d6:03:32:
f6:8b:5a:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg55vFlO60PfLbJlPZso4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZDdmYzUwNTQ4Mjg3ZGVhZWE3Y2U5MjA5OWU0N2EwNGE3
MGQ0NTEwHhcNMjUwODIzMDYwMDI5WhcNMjUwODI0MDYwMDI5WjAzMTEwLwYDVQQD
EyhmZTgwNzFmMWIzNDk2YmNhNGY2OTU4NjRhNzI5MWEwZmRmZTJiNGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5cPvta7aN3Xft6E34nok+AL4yyB
r0497Q0mKfrOxHzTlmNnC+r/0DzutXfHYe7J+M0wbWQ5R2UUDUKdYJ/85HJgU2Tq
f+EQlqFI4CiU6wieaiLcLK0YGRyPq10+3x3Io/LJjui9Yg+vTXHRSv/bpTGKvAlO
kukkV5oKlwN4r2nEd87p6Wf0eQplk+zSWslCxKlHwubaq9cEMRWTXbMienQ1q0uP
Ak68q7M/Vkde8geLl2XPmYr/FHeap38NL7++Lt79T848tL/ZJG+ux+oKIYbpE2nc
wKU59J0IJYqSV3Wx16q6qR0xKOG1HeV47lBZo9CKQut5zcG+Hjzzx8LLSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6AcfGzSWvKT2lYZKcpGg/f4rS7MB8GA1UdIwQY
MBaAFNvX/FBUgoferqfOkgmeR6BKcNRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEt
ZjI1NjA0YzRiZTgyLzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEtZjI1NjA0YzRiZTgy
LzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVLJwTos
ozthied3YDmOdqRyD1tA7JQ39YPL9Dw3W+SYg6VFbOUIqWosfIvUtIdm7+CVK+1y
FTCP0WlSTVxz0roRyUCYMP0vYZpkCjizIHbPH8ajzzklEFWsB3IoxxttmRXgwNyJ
FzfR1G4/nmzBqkZwB4pVYAjmqv/EBMl+VZRxOmzzK3Tt78+pdKFLwkcXT6YCaQIQ
3xSedehS8k+CIccs98cJ/rHI5QHZkLy6oWVtM0vA8rCJCgCmBcR4gUSPgu0ckfB0
mVNIgD/wHWdlCRt5xO/XHFD3kJVJfSHpR+w75xUC0v/L06WKrGWCIbHWEX3FZCE0
9mNz1gMy9otavg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:28 2025 by rpki-client