Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: 4a3opXb+q/FRTzwMiPB8AvZFzLSMcqARF4C84f5DIWY=
Subject key identifier: 0D:63:6F:A4:6A:E5:81:A0:8C:78:9D:1E:16:90:A5:78:2F:6E:45:4B
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 0199FDD9468A8A9F61A27DB46F719FC8535E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 141F
Signing time: Sun 19 Oct 2025 19:01:38 +0000
Manifest this update: Sun 19 Oct 2025 19:01:38 +0000
Manifest next update: Mon 20 Oct 2025 19:01:38 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: SjIvsRL4vDgQ32j+tVmlXeMIi/Fn8AAOIZmk9j37/4o=)
2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:46:8a:8a:9f:61:a2:7d:b4:6f:71:9f:c8:53:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Oct 19 19:01:38 2025 GMT
Not After : Oct 20 19:01:38 2025 GMT
Subject: CN=0d636fa46ae581a08c789d1e1690a5782f6e454b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:af:86:b8:d6:42:6c:d9:c1:a0:66:cb:5f:
42:47:41:c3:16:27:b0:c7:e2:42:fb:99:2d:76:b0:
b4:5b:c4:c2:e2:a3:fb:13:a5:2f:3f:46:48:4b:b1:
a6:ef:54:00:93:ec:95:40:4b:8f:20:c1:33:d3:d9:
dd:2b:df:67:e8:92:46:b3:4a:60:e1:9f:34:8a:87:
aa:af:83:f0:76:36:de:39:ea:91:0b:11:6c:1f:52:
b6:a0:f6:5c:2c:67:62:c5:6e:44:58:4d:1d:b1:a9:
a1:6c:fc:7e:53:12:e7:4c:16:61:e8:c7:ee:4a:23:
35:1f:ed:e0:33:e9:3a:76:05:94:43:3e:54:e0:68:
a6:17:83:52:36:21:1d:8c:f8:ab:e5:fc:c9:0a:e1:
b0:9e:a8:26:b3:27:80:dc:5e:9a:e1:c4:82:39:12:
cf:0f:04:8e:45:b1:a5:e9:15:b8:eb:64:ee:9c:17:
75:cb:20:00:ea:e9:49:a0:2e:14:80:e1:6b:26:b9:
bb:48:fc:51:67:29:b0:17:34:2d:61:b8:67:ef:b9:
62:04:ad:a9:b3:78:7d:33:d9:0b:d5:e5:9c:48:26:
09:5a:92:04:98:97:82:da:7f:23:66:2e:19:e2:d0:
66:03:48:41:ad:4e:ce:53:44:53:50:0f:e8:07:25:
d7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:63:6F:A4:6A:E5:81:A0:8C:78:9D:1E:16:90:A5:78:2F:6E:45:4B
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c7:33:09:af:4d:12:b8:bc:7a:e4:2a:c1:5e:e5:07:39:b5:
5c:2f:76:5c:b0:4c:b3:5e:d7:3f:b1:fb:ba:2a:1e:ad:9f:2a:
73:f9:a9:25:33:d1:ce:04:6e:9c:b8:4d:e2:12:08:cd:72:d5:
ec:26:7b:03:0a:93:87:14:cc:f2:e8:23:50:83:fc:b5:36:ca:
ce:8e:47:49:7a:67:76:a0:46:95:e2:c5:71:28:b0:21:6b:15:
eb:26:8e:9f:17:15:f3:85:2e:a7:1f:7c:ae:07:bb:01:18:0f:
73:c7:68:96:d0:94:6b:85:17:6f:27:fe:dd:9f:7f:dd:b5:19:
fb:c4:37:5b:d9:c1:19:e2:23:c1:8f:30:ae:8b:86:e2:69:20:
ed:8c:5e:30:d9:e5:0e:d5:ca:a7:5b:b4:e4:b4:77:76:8b:d2:
b1:4a:87:e1:74:7a:d7:34:a0:ee:7a:35:66:8a:fe:31:9e:bb:
27:d7:19:99:01:dd:d1:cc:a0:e4:c9:75:0c:63:f3:b4:3d:08:
4b:1d:05:ea:a5:3f:32:28:78:1f:ec:00:90:0e:9e:52:cb:c1:
63:66:e8:5c:a8:89:ea:d5:b3:e2:4a:0c:72:86:5c:f1:59:90:
84:ad:a9:ee:f9:54:20:d7:36:9e:6c:b1:50:d0:0a:fb:8a:d8:
87:48:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:30 2025 by rpki-client