Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: 33m7k+KXYxJMHMlyw96nFdv1SxeOMD5QvP5efUTtRx0=
Subject key identifier: ED:DD:56:DB:54:C0:2B:91:67:AF:D1:73:D0:E9:F9:A7:57:B1:1C:33
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 7F99D1A712C8E1F228B10F3DACC27A13A03B3A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 0465
Signing time: Thu 08 May 2025 00:40:39 +0000
Manifest this update: Thu 08 May 2025 00:35:39 +0000
Manifest next update: Fri 09 May 2025 02:12:39 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: JL4DGdvPHwROM7kZMcBnfx9wGnDlUHkB18bl6GJpT6g=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:99:d1:a7:12:c8:e1:f2:28:b1:0f:3d:ac:c2:7a:13:a0:3b:3a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: May 8 00:35:39 2025 GMT
Not After : May 9 02:12:39 2025 GMT
Subject: CN=EDDD56DB54C02B9167AFD173D0E9F9A757B11C33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:40:af:0d:4c:df:cd:39:b7:c3:fb:dd:78:
11:b1:f6:71:93:ba:61:6b:87:1b:55:3d:46:05:0f:
67:a9:54:55:21:8e:30:7f:60:78:5c:6f:2d:07:4b:
72:49:50:1d:ff:6b:75:47:a0:00:8b:3f:3f:c3:98:
31:24:26:96:d3:1d:ee:5d:fe:1b:f8:50:cd:9b:5f:
95:8d:a3:8d:33:26:cc:a9:4e:12:d7:03:12:16:5e:
5b:44:35:c3:bc:62:8d:85:e3:c1:3d:b0:42:cd:1e:
f3:1b:9a:28:2f:d4:3b:c1:63:d6:87:cb:7b:73:18:
a9:a2:af:39:2c:59:14:4b:6d:7b:ba:02:89:4a:6f:
90:16:e1:83:d3:79:f6:a6:3e:95:51:d5:0e:a6:c9:
7a:ec:bf:df:25:9e:21:7a:95:72:1a:e7:ca:44:e4:
64:b8:9f:21:6e:8d:fa:cb:96:10:63:a1:6f:f0:b1:
4a:f5:33:40:db:4a:dc:be:dd:4b:9d:dc:8b:38:11:
d1:32:1a:43:67:0a:47:d7:61:fa:37:0e:35:b8:20:
55:20:a1:e3:cb:b3:9d:bc:0e:6a:65:c3:13:70:d5:
57:c3:e7:48:6b:1e:e3:a3:8a:51:fc:6a:de:8c:7d:
d9:a5:9a:78:56:ba:ef:1f:6a:5e:0e:5e:dc:f9:c3:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:56:DB:54:C0:2B:91:67:AF:D1:73:D0:E9:F9:A7:57:B1:1C:33
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b1:ff:f5:a9:77:26:08:19:9b:53:94:9a:09:e5:ce:b1:f1:
82:46:25:07:ce:12:8d:75:17:f7:e9:a7:f2:6a:d0:9b:6b:fc:
68:bd:07:d5:ed:a9:62:7d:37:46:6b:9d:02:62:a0:92:ba:c2:
68:fb:3c:07:ed:e5:78:0f:28:a1:35:39:26:1b:88:f1:78:54:
b6:1b:12:d4:6e:40:b7:28:c5:d8:fe:dd:64:72:9d:b6:55:3f:
20:79:9b:7d:57:a7:9b:72:47:a4:bc:0b:d2:00:19:96:2e:64:
20:4f:83:14:96:d2:3e:58:37:3e:d4:cf:37:75:ff:36:51:67:
e0:1d:58:2f:9d:55:bf:3a:1d:ce:30:b4:52:0e:de:b4:7a:91:
31:84:02:0c:79:a1:04:1d:1a:5b:c6:23:fd:fc:9a:03:d1:62:
9f:1c:76:62:62:bf:4d:19:aa:54:e9:58:58:8c:3d:1a:80:d5:
b5:81:00:26:96:98:7f:d6:64:b3:90:d6:52:b5:57:ea:fa:25:
42:f5:b3:0b:9f:f0:e0:12:21:2f:19:0b:f6:bf:33:cf:83:55:
c9:06:ed:77:42:d5:50:80:d0:29:5e:f8:51:74:09:bb:b4:3b:
19:42:ae:13:74:a7:70:a6:f9:c9:74:70:f3:91:e3:4c:1d:28:
4f:6e:fc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:21:05 2025 by rpki-client