Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: NT5rIakY/ItqxBZ7XrXx1OOu3I6yUZ1FIkcUWUd2Od8=
Subject key identifier: 3E:B5:F0:BF:D6:93:FC:D6:BB:00:6C:E1:13:72:7F:33:51:F9:7F:A7
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 0198D65F4B5608D9B831B06E831FD920975B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 1386
Signing time: Sat 23 Aug 2025 10:00:25 +0000
Manifest this update: Sat 23 Aug 2025 10:00:25 +0000
Manifest next update: Sun 24 Aug 2025 10:00:25 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: s1O6kUkMM+SwhpAHJNEIwYo1PsjrUtZ5SFkhGdMHHkQ=)
2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:4b:56:08:d9:b8:31:b0:6e:83:1f:d9:20:97:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Aug 23 10:00:25 2025 GMT
Not After : Aug 24 10:00:25 2025 GMT
Subject: CN=3eb5f0bfd693fcd6bb006ce113727f3351f97fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:85:86:63:15:22:06:a2:e8:45:99:b0:d6:
49:56:9e:ea:9a:07:45:52:88:10:bc:8b:5a:72:82:
81:e8:15:0e:b6:92:27:c3:5e:61:4b:f3:9f:82:0a:
a9:ed:ff:f1:f1:e5:e4:a7:c8:e3:9a:42:35:91:ef:
a1:f3:7e:c3:88:49:e5:22:31:10:77:fb:bf:15:b4:
ff:cb:7c:e9:9f:8e:1a:c3:2b:4d:d2:ab:19:11:6c:
74:77:90:24:a5:09:0a:64:65:66:c4:fd:1f:83:da:
c7:ae:12:d7:76:29:91:f8:27:e1:3a:84:0c:8b:8b:
a7:d6:96:2f:82:d3:de:c6:d1:1f:93:35:cd:9f:a3:
14:f4:31:c9:34:d8:d9:80:ef:f3:3d:33:3f:63:27:
74:e2:00:e0:31:47:c8:4a:ca:89:71:5c:8e:fe:dd:
c2:c8:a9:8b:d0:be:bf:f8:82:e1:40:9d:bb:39:ff:
41:65:75:8a:3a:02:90:01:bb:da:34:2a:82:0d:da:
20:76:41:e9:80:0a:92:42:61:a3:4d:41:bf:f6:ed:
07:95:b6:db:ba:50:3c:2e:3b:15:3b:55:d3:0b:7c:
fa:06:54:ed:fa:b7:45:b7:74:9f:0e:e4:3f:e2:88:
a3:00:a2:b4:fd:11:89:3f:10:f2:c4:1c:62:94:5d:
94:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:F0:BF:D6:93:FC:D6:BB:00:6C:E1:13:72:7F:33:51:F9:7F:A7
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fd:fb:1c:5b:b3:63:6d:92:92:56:6b:41:e5:30:d4:92:3a:
46:d3:f4:72:34:9f:f9:37:d9:fe:b5:ea:85:0d:11:e0:f5:c7:
93:8a:7a:99:ee:0b:f3:94:48:bd:e4:d9:a0:c6:66:d8:41:e8:
af:e0:6a:e3:e7:cc:ec:71:ef:4d:d1:ed:83:d8:d0:92:d5:86:
c0:9a:b9:16:3b:0b:4e:e0:b8:6c:00:0c:ca:b1:e8:08:4b:d4:
39:09:fb:6c:fe:72:a1:4f:71:0d:5c:77:30:11:33:54:51:4a:
4b:c7:3b:f9:d8:57:2c:b1:18:95:c9:1c:8b:34:73:ca:00:09:
d4:df:a0:8b:0b:6d:7d:4d:8e:aa:65:53:24:68:11:8a:7a:d9:
1e:19:a5:6d:6a:58:fd:f6:d7:f3:7b:55:89:ec:b4:a5:9a:4e:
96:c8:ec:03:76:4a:18:61:99:77:da:14:19:0e:f5:e6:b7:a0:
f0:00:e1:9c:9a:31:3f:88:31:5a:d0:e5:43:fb:ff:60:7f:e0:
15:d5:d1:95:f3:06:78:b4:e3:b8:5b:d2:f6:37:5e:c6:16:3b:
bb:4d:26:e2:21:ba:b9:77:6a:41:d0:f4:df:fa:df:82:3c:d5:
3b:2c:b8:b2:72:dd:35:58:3c:ca:16:c1:ba:3d:02:5c:4d:d8:
53:bb:db:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:36:00 2025 by rpki-client