Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: kA5nM+BSNLatpwuMsnlGQXe4hpnJJ+dl+FcAt+e2QtI=
Subject key identifier: 23:A7:1B:44:89:B2:BB:FC:DE:FE:2D:04:8A:16:7D:D8:F8:4C:79:6C
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 6DF24047E2D7C93E55BE1CC6C0A6D850AC469328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 04FD
Signing time: Fri 22 Aug 2025 23:13:28 +0000
Manifest this update: Fri 22 Aug 2025 23:08:28 +0000
Manifest next update: Sun 24 Aug 2025 00:11:28 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: pSGL29NLk8vHJSNuNCy7rtUxLmLVSoBLbPM8ecCdFXY=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:11:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:f2:40:47:e2:d7:c9:3e:55:be:1c:c6:c0:a6:d8:50:ac:46:93:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Aug 22 23:08:28 2025 GMT
Not After : Aug 24 00:11:28 2025 GMT
Subject: CN=23A71B4489B2BBFCDEFE2D048A167DD8F84C796C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:ab:72:d2:c5:3d:ca:b4:0a:2e:08:ca:cb:
03:21:17:4a:39:d1:54:86:d0:f7:cb:d1:0d:3b:8c:
61:15:b7:5b:4c:5c:44:a6:27:ac:c3:d7:d3:9e:23:
ca:cb:fc:ff:dd:63:10:49:1e:78:65:67:4e:56:d8:
66:4c:33:38:4a:21:4c:01:1c:5b:b0:4d:3b:dc:e2:
c5:08:f0:6c:73:fe:13:26:5d:66:d4:05:70:60:8d:
09:d6:4b:41:80:e5:03:b1:d9:b6:d6:13:4a:6b:aa:
d8:e1:57:d8:af:b6:39:b3:cf:48:70:fb:88:6e:b8:
f5:86:b2:c5:e7:56:7b:ed:5c:be:64:39:b2:60:8e:
9d:61:1e:b5:01:f9:72:af:e0:42:36:80:88:5c:f3:
e8:78:6a:e0:0b:81:21:e1:57:69:e7:05:7c:95:f7:
3a:d1:b0:91:57:31:14:90:5e:52:a4:f5:02:e7:96:
b1:97:bb:58:bd:78:98:10:ef:fe:8e:a1:2c:9e:f2:
ff:24:33:21:e0:50:53:fa:0f:1e:2a:dc:e2:0a:80:
1c:b1:8d:56:23:1d:de:2c:a2:ce:24:93:aa:24:e9:
f6:fe:47:24:9a:71:f0:c0:11:58:f7:da:b0:9e:58:
30:39:15:99:9b:c0:09:94:b0:c6:04:49:39:a4:10:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:1B:44:89:B2:BB:FC:DE:FE:2D:04:8A:16:7D:D8:F8:4C:79:6C
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:20:e5:f3:13:72:c5:57:d3:c4:9c:f2:bc:10:90:33:35:de:
e4:a5:15:d1:9d:b1:8a:a2:8f:12:87:a2:38:eb:75:b8:71:eb:
a5:49:af:9e:af:ef:b9:e1:91:4f:c0:bb:4a:62:55:56:0c:f6:
9f:ee:78:91:ca:61:59:9d:6c:2c:32:d6:6b:15:46:75:09:13:
49:c9:cb:20:7f:3d:39:99:71:be:fd:49:7d:33:41:83:8f:0c:
a8:4d:ca:c5:f8:b3:37:23:9f:3a:7c:df:f7:e9:7f:9c:66:d7:
86:64:0d:33:d0:40:55:5c:aa:50:21:6d:4b:9d:26:cf:1d:ff:
07:71:50:95:9f:7c:95:da:37:7a:3c:f0:6d:d0:7d:e1:6e:9c:
78:55:17:20:6d:70:66:70:48:51:a2:36:82:b2:99:4a:e8:63:
9f:eb:49:2d:79:65:5b:34:44:96:49:76:7c:98:66:5e:b9:61:
30:81:d8:29:36:e9:49:1c:c5:eb:9c:1c:11:6f:e2:61:a6:ec:
cc:06:2a:ef:38:98:f4:8d:b8:08:79:4e:62:bb:af:9c:e3:52:
bc:dc:3b:d9:d2:28:95:8f:d0:1c:88:85:e8:b1:46:8c:b2:b0:
48:14:80:07:14:9a:83:be:52:00:17:58:e1:cb:a3:04:58:ab:
47:fd:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:31 2025 by rpki-client