Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: cqyLK3nnFIurMR2UodXU4nuMXcVfkL7DizOy8JgqFHU=
Subject key identifier: 03:17:6A:1A:B6:7B:AE:41:01:B4:4F:04:12:72:EB:08:A2:BA:55:CD
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 0197B88EDF5B22287F7538E6CBCF13C9F8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 0504
Signing time: Sat 28 Jun 2025 22:01:00 +0000
Manifest this update: Sat 28 Jun 2025 22:01:00 +0000
Manifest next update: Sun 29 Jun 2025 22:01:00 +0000
Files and hashes: 1: UrDZwQUlz8oM-YZBJZCko8DzwV4.roa (hash: R8F+9yAyW9iHTTMQt2jYkPuGAbrbM2b50inI73XP78c=)
2: VUMA1w_cWfBfkplU1WhBDdmnD9o.roa (hash: rD4utDh7xiQYF3Mhd366hiIbKkVcQBZdqh6/duIbK7U=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: DvrKdb1p9+1ZrzwPhGRR2YFYvyC5PV+gdPtp5ba5vw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:df:5b:22:28:7f:75:38:e6:cb:cf:13:c9:f8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Jun 28 22:01:00 2025 GMT
Not After : Jun 29 22:01:00 2025 GMT
Subject: CN=03176a1ab67bae4101b44f041272eb08a2ba55cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:64:12:da:db:f5:0f:29:8d:8b:1d:09:87:
d1:22:59:3e:51:c0:cb:0a:21:86:c4:5e:93:af:80:
49:81:6a:e7:2f:a7:32:a3:ce:c9:9f:2a:e5:c9:2c:
5b:89:14:18:35:fb:48:70:95:98:62:4f:77:5e:e0:
cd:2f:5f:46:0a:6f:ff:09:ee:7e:f1:10:57:00:34:
1f:02:6d:ff:60:a6:b5:b8:bd:88:81:36:f2:5c:09:
0b:76:b7:81:a6:68:b9:e7:b9:43:20:fe:a4:dd:e8:
ee:fc:b8:1a:f5:1e:17:ba:db:dc:f4:16:d0:f5:b8:
30:9f:15:c1:3b:c4:a1:d2:69:6e:7d:a1:5e:4d:fe:
82:bc:cd:3f:04:0a:9c:1b:f5:d0:df:a7:88:53:81:
81:f5:de:a3:1f:5c:8b:94:db:6b:ec:e9:8d:c8:be:
a7:ff:23:ad:0e:79:ed:35:3d:d1:bb:cf:a3:93:6b:
70:63:80:76:56:94:61:35:df:75:55:84:f0:73:e6:
3a:bb:cc:94:70:20:26:1a:f1:6f:f0:fb:c2:1a:4f:
c7:7d:93:cf:60:d2:ae:dd:0b:6b:11:b5:3e:bb:57:
69:a0:1d:a5:9f:04:2e:d8:0f:98:50:fc:00:c6:1f:
b3:21:66:88:56:6e:6d:59:9d:9b:0d:54:cb:1c:98:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:17:6A:1A:B6:7B:AE:41:01:B4:4F:04:12:72:EB:08:A2:BA:55:CD
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a4:02:44:89:98:a6:d6:26:9c:ad:86:02:3a:3b:cf:ad:10:
e5:13:cb:ce:99:71:3b:bb:fd:b4:5e:29:99:6f:ad:ab:da:69:
8f:91:3d:d3:ba:dc:56:83:ca:80:7f:08:22:ce:bb:71:82:49:
9d:9a:96:ba:b4:c4:01:44:a9:96:85:15:ee:84:45:90:7b:95:
42:f9:a0:63:a3:23:56:73:91:44:d5:86:be:55:ad:73:86:63:
f8:62:36:49:48:73:3b:33:a3:3d:43:68:6d:1a:9b:5b:d6:14:
e5:89:82:2c:6d:f6:fa:d1:e0:2a:28:fd:92:e3:99:ec:f1:c4:
bb:3e:57:41:98:3b:ec:c0:e5:cb:80:11:69:7e:58:45:5f:3f:
b7:47:80:f1:19:a7:41:17:36:09:0b:71:1a:39:8d:78:35:50:
43:33:97:f6:83:72:e5:66:79:31:4c:52:4f:68:48:89:13:40:
ee:aa:36:15:b0:d5:6a:81:51:45:39:83:68:5e:a4:c3:f2:ad:
49:01:df:39:ab:0e:3b:ca:de:56:f3:33:0d:6c:19:06:1f:d9:
32:bf:6e:c0:3e:e0:f1:19:9d:bd:4c:c0:91:28:7b:d2:d7:b4:
8b:15:54:2d:ed:e3:41:83:7f:d0:d7:30:4b:d8:13:60:b0:df:
46:1c:cb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:29 2025 by rpki-client