Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: 4XpY1wy4wMPEwEKo0dH8zYThP54h0GtBE/LO5K6mwew=
Subject key identifier: 5D:A9:3F:B6:05:D9:11:AA:1E:AA:B2:83:7D:1C:EA:31:EE:D3:FF:3B
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 0196C91799B150D8D6F779D2870BABA71B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 1276
Signing time: Tue 13 May 2025 10:01:29 +0000
Manifest this update: Tue 13 May 2025 10:01:29 +0000
Manifest next update: Wed 14 May 2025 10:01:29 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: 19+Z8BAZP9/l5tI1jmjxubvtjtAMp6pInHoAomamiFc=)
2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:17:99:b1:50:d8:d6:f7:79:d2:87:0b:ab:a7:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: May 13 10:01:29 2025 GMT
Not After : May 14 10:01:29 2025 GMT
Subject: CN=5da93fb605d911aa1eaab2837d1cea31eed3ff3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5d:59:e5:b6:56:29:67:a7:6d:17:94:39:c2:
eb:4d:63:8d:d8:0f:aa:95:26:ce:02:92:02:0d:29:
e7:ef:d1:f2:3a:5b:25:37:27:55:dd:aa:4f:a3:f5:
67:91:57:94:80:6a:47:63:12:cd:20:d5:98:2d:9b:
a2:49:ee:04:2a:53:ce:26:db:f0:cf:58:ed:39:ea:
15:10:b2:5e:16:12:45:8f:b1:c0:cd:6f:ee:f7:bd:
f7:a0:b0:68:6b:c0:5e:3b:09:f2:98:8e:62:1a:cd:
93:c6:86:02:5a:db:2e:6c:e4:9c:ae:e5:c0:03:c4:
e7:74:53:fa:06:05:1d:f1:4d:0b:e3:07:4b:ab:30:
06:aa:73:8a:ba:2d:4a:b1:24:27:bf:d5:a5:23:6b:
84:a2:c4:30:b5:61:cd:7b:6d:b6:be:a4:03:e3:ee:
54:b3:cf:0a:65:f2:8d:b9:02:11:68:03:7e:a1:af:
d0:f7:cf:7d:69:5e:90:d4:a7:2c:6a:f8:78:cd:3e:
1e:ee:d3:b4:f4:74:43:2b:18:35:c5:c3:51:2f:8c:
02:7c:ad:ed:ce:8e:90:72:35:6e:45:94:10:82:e9:
4c:67:74:59:99:84:f8:2b:42:ff:f6:23:36:a9:e5:
6b:26:aa:c9:7e:62:21:b7:4f:fd:cc:dd:d8:2a:1c:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A9:3F:B6:05:D9:11:AA:1E:AA:B2:83:7D:1C:EA:31:EE:D3:FF:3B
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3d:7d:3c:db:c0:79:05:cf:5f:dd:cc:00:8d:4a:78:ca:88:
3c:f9:8e:dc:5a:e9:4a:a6:1e:b2:3c:06:66:f7:82:31:67:a8:
c1:c9:35:14:f5:8b:34:eb:fb:da:3c:99:30:a8:9a:61:4f:19:
28:f9:1c:d6:ed:4e:cf:05:1e:d9:73:80:aa:2b:e0:eb:93:c9:
04:df:7d:58:30:49:c2:65:0b:d6:21:d3:f3:7c:94:f3:33:69:
60:fb:ca:e2:eb:92:2a:e1:92:69:d2:f7:da:5f:63:11:24:17:
b6:6a:41:e9:58:6f:6f:8e:74:f0:f1:5c:5d:cd:3d:21:85:09:
58:9e:8b:ef:09:9a:ed:d0:11:85:4e:69:d9:b4:21:4d:22:79:
e8:6b:1c:ed:9b:70:0d:52:a1:ae:3f:dc:e6:06:19:a4:c1:fd:
d1:94:f8:b7:75:c4:83:37:5a:28:fd:18:a3:86:32:2f:03:8d:
f7:13:3f:11:65:7f:be:9c:b0:31:44:e9:cf:f4:fd:0c:2c:b4:
1e:1d:83:3a:f3:eb:09:30:ef:88:6d:3e:e0:0f:29:75:f0:ea:
87:30:b2:f2:0d:f8:91:c3:93:47:a6:fe:25:50:71:58:df:6c:
e9:83:8b:3a:2e:70:87:ad:52:44:ee:06:05:a9:cb:dc:fb:df:
d7:3e:5b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 17:40:32 2025 by rpki-client