Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
File: 29OCJ0tFdmK6ctGIZXOix9zDVIY.mft (raw, json)
Hash identifier: SOWxIktGVz3PJzzjFbUPrgXSwaaDhGZYnGsThSTf8ys=
Subject key identifier: 0F:7C:D9:E2:38:52:80:4D:53:BD:68:71:7C:2B:8B:9C:F5:6C:68:B0
Authority key identifier: DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
Certificate issuer: /CN=dbd382274b457662ba72d1886573a2c7dcc35486
Certificate serial: 0197B8908606078E89EE13CEA76E489A1294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
Manifest number: 12F2
Signing time: Sat 28 Jun 2025 22:02:48 +0000
Manifest this update: Sat 28 Jun 2025 22:02:48 +0000
Manifest next update: Sun 29 Jun 2025 22:02:48 +0000
Files and hashes: 1: 29OCJ0tFdmK6ctGIZXOix9zDVIY.crl (hash: znxNypug8RdRvR26Jc7lNtBE8nvMEnaFDtISdqPjKoc=)
2: iUMe2JOAJNlxZXEaHwJwVAIN3WA.roa (hash: ZvIlGSaMCDAbt70045McSuBEc2GtkECp8D75xEWNHU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:86:06:07:8e:89:ee:13:ce:a7:6e:48:9a:12:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbd382274b457662ba72d1886573a2c7dcc35486
Validity
Not Before: Jun 28 22:02:48 2025 GMT
Not After : Jun 29 22:02:48 2025 GMT
Subject: CN=0f7cd9e23852804d53bd68717c2b8b9cf56c68b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ce:ad:be:4d:3c:d0:6c:e2:c3:8e:64:dd:51:
bc:9c:e0:3a:a6:7b:31:be:5a:22:8d:2d:c4:ef:21:
19:ce:2e:31:c9:78:50:94:9b:07:26:12:35:4b:2f:
20:4a:91:d0:3f:54:b2:b5:24:13:64:26:53:8f:43:
ff:3b:96:f7:31:65:82:5a:72:93:ee:c8:64:ce:05:
24:c7:8a:b8:b4:39:4d:cd:f9:f3:38:c4:32:43:91:
e1:4a:02:f3:b2:7f:db:d7:02:eb:db:ab:31:f3:a1:
d3:9a:22:c1:7b:0a:7a:72:b7:8e:91:73:92:d9:c9:
d4:9a:16:e5:e2:c6:11:05:bd:8f:49:1e:f2:0b:bc:
b1:f2:34:9c:37:4b:a2:78:26:8a:96:f3:87:aa:42:
5b:f6:f3:f6:27:c1:4d:6a:97:dc:b9:67:42:3b:59:
48:89:b1:0b:48:a7:24:e3:03:f6:02:42:ab:9d:06:
ba:ea:b1:0f:09:c3:3d:62:d9:f6:94:8b:4d:08:5d:
c7:cf:70:41:b4:ce:b9:e7:ab:e9:ca:64:f7:5f:62:
65:44:62:c3:81:48:b9:5c:59:f2:11:ea:ea:d7:00:
6a:cd:24:cd:74:3d:28:2b:19:05:c3:6f:13:c4:81:
19:7e:ca:4d:6e:c9:97:41:9b:a2:6b:a2:ed:a0:36:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7C:D9:E2:38:52:80:4D:53:BD:68:71:7C:2B:8B:9C:F5:6C:68:B0
X509v3 Authority Key Identifier:
keyid:DB:D3:82:27:4B:45:76:62:BA:72:D1:88:65:73:A2:C7:DC:C3:54:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29OCJ0tFdmK6ctGIZXOix9zDVIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f12029-6758-4233-9dfc-c654356b07c4/1/29OCJ0tFdmK6ctGIZXOix9zDVIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:9f:e1:92:94:72:d2:79:14:ed:3b:eb:00:5a:a9:00:e6:bc:
f2:cc:46:39:08:c9:8f:78:59:4d:08:e4:8d:d4:4c:58:c5:ac:
de:3b:95:16:3e:8b:80:4f:1d:41:98:48:95:75:b2:7d:6b:07:
2a:8b:9f:46:ca:d3:e4:f2:41:f3:2f:4e:21:77:ba:c2:11:23:
e1:95:ca:b5:c5:69:fc:42:d2:93:ae:27:4d:d7:41:a0:83:bf:
d0:be:f2:42:7e:29:0f:82:30:0b:55:06:34:db:8c:5a:ff:a2:
04:99:7b:f7:f9:4f:db:3f:f7:5c:0e:cc:03:6a:16:a7:42:b5:
04:a8:cb:a4:38:ae:61:20:30:af:c7:62:f8:e8:97:67:67:6c:
5c:45:b1:3d:99:1a:7f:16:b4:c8:e7:c1:77:90:28:da:0d:99:
c8:a4:64:4d:f7:c6:91:bb:82:0b:f3:6d:96:66:4e:70:87:4d:
1d:c1:b3:b7:e2:62:91:dc:59:19:d5:4f:5d:46:ab:a0:8d:86:
40:85:db:ff:9a:51:9c:2c:7d:15:17:60:17:2a:e4:78:19:8a:
68:91:10:8a:50:62:a0:f8:6c:77:03:03:ba:0a:e3:e4:12:98:
eb:f1:7c:30:6b:cc:7f:8e:1a:eb:32:2d:54:e9:a9:42:e2:ae:
a1:e8:e9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:52 2025 by rpki-client