Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier: JDyu+Ts8JdGTYuglljFHe9PRI+K030KB4oBztaeTiyQ=
Subject key identifier: D4:59:FF:72:7F:2B:50:AC:63:92:92:98:34:5C:70:6D:DD:0F:75:F5
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer: /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial: 6CBB5D1D1F7B56E5705818C58258347B0A154A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number: 04AD
Signing time: Sat 28 Jun 2025 17:12:40 +0000
Manifest this update: Sat 28 Jun 2025 17:07:40 +0000
Manifest next update: Sun 29 Jun 2025 18:23:40 +0000
Files and hashes: 1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: b2G3gJvJZ4z95PJ2c+qQt5LWNSQDWrvHKzl8WDUo5BU=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:bb:5d:1d:1f:7b:56:e5:70:58:18:c5:82:58:34:7b:0a:15:4a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Validity
Not Before: Jun 28 17:07:40 2025 GMT
Not After : Jun 29 18:23:40 2025 GMT
Subject: CN=D459FF727F2B50AC63929298345C706DDD0F75F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:82:d2:01:db:17:42:ff:f0:69:b4:d3:60:
6b:1f:f1:84:22:cd:87:86:06:f0:ce:73:12:32:18:
85:86:1e:4a:29:2e:b5:de:57:71:d7:d3:4d:d7:a8:
32:5a:15:61:07:75:1e:ad:0d:af:e4:ae:c9:25:87:
78:61:44:5f:2a:dc:96:a0:6e:68:e2:63:08:75:82:
aa:29:1e:8d:3e:ae:7b:a3:4c:67:4c:6f:90:bb:5c:
69:ab:1d:70:14:f5:a2:06:0f:e9:f9:88:2c:61:a8:
56:3a:11:db:e5:ea:5e:bd:4c:08:68:23:59:bf:aa:
f4:32:33:d1:53:ba:79:3c:03:2e:b6:30:86:59:97:
03:f2:4b:39:d8:fb:41:2b:7d:1d:22:46:4b:66:45:
1a:5a:07:81:6a:2b:e1:92:37:37:f7:d4:7b:50:82:
1b:0d:9c:50:39:2c:5a:6f:ea:d3:c3:f0:35:35:9b:
b1:a5:f1:4c:6d:37:2b:5e:42:41:db:87:6d:a9:a3:
22:35:5d:fe:f8:ba:0d:82:db:24:e0:8b:63:65:a2:
05:4e:ee:be:f7:41:1e:f3:f1:c4:7e:3f:13:31:b9:
fe:bc:6c:0b:5d:66:94:80:59:8c:b2:8a:f7:f0:32:
92:05:b6:f1:50:1c:39:2d:66:c9:a9:62:c1:74:e1:
63:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:59:FF:72:7F:2B:50:AC:63:92:92:98:34:5C:70:6D:DD:0F:75:F5
X509v3 Authority Key Identifier:
keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:23:72:75:61:20:c4:08:aa:03:99:03:8f:a8:95:f6:09:8d:
ea:53:5f:33:ca:d3:d4:fe:fa:04:22:6e:a6:ff:f8:29:56:d6:
9a:87:ef:27:f8:ae:6e:d5:a9:a0:8d:ba:89:92:56:fa:8d:1e:
99:e7:e2:b1:c7:a5:50:70:78:74:83:f6:e5:f2:a1:2d:32:24:
12:e0:0b:15:bb:cb:f4:dd:db:7a:9d:8d:1c:6b:77:86:34:38:
5e:a3:d4:b5:d8:cb:f9:e9:9c:e2:9b:32:41:8e:3c:d9:be:0b:
09:b4:3f:69:2f:1d:3f:0b:07:0e:6b:4a:0c:f2:b8:0b:34:d3:
b7:ff:36:68:a4:34:3a:13:89:75:dd:96:96:92:29:f5:30:a3:
0f:b9:99:89:b0:da:82:01:e3:10:ac:7b:82:a7:68:fc:6b:98:
fb:76:d6:71:bb:e9:ce:00:ec:58:42:0a:9e:3c:d2:f7:a5:65:
95:d1:c5:2b:51:75:0e:5e:44:27:a0:5d:bd:b1:bb:9e:3b:e1:
29:d1:b0:e3:23:a6:45:35:50:c1:41:40:b6:1b:fa:46:91:01:
a9:63:50:ef:fe:91:73:d7:bb:5f:f4:09:e3:c1:48:bd:fc:3c:
39:88:03:fc:df:17:05:b6:ef:ed:f7:37:b4:fb:2d:ec:4d:41:
f0:ef:07:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:38:55 2025 by rpki-client