Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: NsR8N8zzo4dIbDiyHPWy4kispSpmvu0Hn+4aRBRxXgA=
Subject key identifier: 37:86:07:E5:6E:8A:A9:1A:0F:17:50:82:AD:F3:82:12:0C:FF:27:45
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 60A1F2E3C896122E87EC160370711E306D4A9CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 054D
Signing time: Sun 19 Oct 2025 20:47:42 +0000
Manifest this update: Sun 19 Oct 2025 20:42:42 +0000
Manifest next update: Mon 20 Oct 2025 22:33:42 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: /MIA8zT/YLhteCVe9PjGavpW1TY1VlFZQ1oPE6734SE=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a1:f2:e3:c8:96:12:2e:87:ec:16:03:70:71:1e:30:6d:4a:9c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Oct 19 20:42:42 2025 GMT
Not After : Oct 20 22:33:42 2025 GMT
Subject: CN=378607E56E8AA91A0F175082ADF382120CFF2745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:64:c9:04:05:00:c7:e1:e1:65:29:61:ad:9e:
75:62:2c:ed:36:4e:b4:74:9a:1c:1b:66:40:89:c8:
df:a9:c3:14:4d:4e:57:a9:f6:7c:22:d5:4d:6a:a1:
fc:3e:81:b4:4f:50:84:d9:63:6b:5e:83:89:48:dc:
fc:08:15:54:cd:86:8d:f7:34:0b:c0:8f:f6:57:06:
79:70:93:f3:b3:d2:79:4b:90:d5:4c:3b:8f:84:2d:
f2:93:ca:ea:14:87:ef:55:c4:df:22:55:4b:17:9a:
d3:68:fc:8f:73:cc:ad:0f:59:f0:ad:38:52:5c:0e:
96:69:e7:fa:0d:3b:0e:f1:eb:f0:c0:48:72:72:8c:
54:db:40:04:84:ff:98:d8:a7:3c:ea:96:f6:03:c4:
7e:b8:e2:c1:4c:5c:14:ba:df:41:9d:7e:7c:ae:35:
30:da:5a:2d:75:f4:eb:ee:4a:c6:4a:95:38:cc:31:
fa:f2:69:6a:6a:76:6c:99:ab:ca:64:d1:17:a9:5e:
fc:3a:b6:e8:6d:cc:d5:57:8d:6d:f1:00:57:c7:2b:
5d:2c:1f:25:32:d7:61:0f:fc:84:5c:e4:cd:2a:47:
b0:ea:0a:93:f2:24:1d:14:f7:bf:8d:dd:dc:e6:c4:
9e:b5:f9:0a:94:50:a7:b7:06:99:bc:57:90:17:86:
2b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:86:07:E5:6E:8A:A9:1A:0F:17:50:82:AD:F3:82:12:0C:FF:27:45
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:40:2f:64:ab:5a:1c:84:9a:06:a1:ed:5b:7b:03:29:32:fd:
40:47:a5:8a:7a:b7:e5:6f:8f:97:9a:7b:3a:e9:4f:6a:e4:36:
19:cd:e6:65:fb:10:82:81:db:47:70:11:92:58:d8:f2:9d:9e:
c2:40:02:88:f6:9d:80:57:14:d7:cd:e9:8d:82:d7:d7:63:24:
44:9e:9b:96:87:13:a2:8f:a8:84:69:99:77:ac:a7:25:99:e9:
f6:e2:84:9f:3b:c7:0e:d8:36:66:87:55:56:e8:76:76:fd:89:
4b:73:6d:a3:61:47:b9:2e:89:ad:44:94:26:ec:f6:f5:27:50:
cb:4d:9c:d7:5d:11:8e:47:fd:15:4c:be:5c:1e:fc:d3:81:b9:
2d:16:0c:b7:af:ed:42:45:6d:47:15:89:24:1e:19:61:72:dc:
16:fa:97:ed:9a:dd:c7:23:35:a6:96:50:7b:7c:d0:7d:7c:07:
87:d0:cd:d5:99:64:3a:a9:f4:86:87:47:01:a9:06:c4:7c:20:
ba:7d:ce:18:e0:7c:9d:a0:02:a1:15:3e:a2:11:f5:91:92:38:
98:77:34:8d:23:c4:65:7c:49:c6:77:6f:0e:95:90:4f:26:75:
99:2b:9e:1c:6f:35:dc:b2:cf:b8:d3:3b:df:26:94:e9:d6:c6:
12:64:cb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:44 2025 by rpki-client