Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: gL2C1JTQFUXV0JOKN+Ab41Fwq3b/Q90zDglOvB+lnKc=
Subject key identifier: ED:60:22:A4:68:ED:27:CE:81:D3:69:DD:7D:7C:F4:65:4F:F3:D4:9C
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 0196C126585479FF7CD58458033776B5C794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 0484
Signing time: Sun 11 May 2025 21:00:37 +0000
Manifest this update: Sun 11 May 2025 21:00:37 +0000
Manifest next update: Mon 12 May 2025 21:00:37 +0000
Files and hashes: 1: UrDZwQUlz8oM-YZBJZCko8DzwV4.roa (hash: R8F+9yAyW9iHTTMQt2jYkPuGAbrbM2b50inI73XP78c=)
2: VUMA1w_cWfBfkplU1WhBDdmnD9o.roa (hash: rD4utDh7xiQYF3Mhd366hiIbKkVcQBZdqh6/duIbK7U=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: XBLH8ttsEgGbgMe3l7EFtYwFwGuF4d6Z5vu+//dBJ7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:58:54:79:ff:7c:d5:84:58:03:37:76:b5:c7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: May 11 21:00:37 2025 GMT
Not After : May 12 21:00:37 2025 GMT
Subject: CN=ed6022a468ed27ce81d369dd7d7cf4654ff3d49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f4:41:64:06:7a:e0:f4:a5:86:f7:b4:11:4b:
26:b0:24:b2:6a:0e:50:d9:81:c6:ac:31:c8:f2:31:
ae:be:cf:2b:e0:13:a6:ea:92:6e:7d:b7:d7:c5:01:
a1:cf:d6:9b:67:3c:7c:ae:c8:d2:38:b0:3e:f7:ea:
33:35:0f:a3:2d:5a:ab:d6:5a:18:4f:ad:ce:0e:72:
55:a4:18:e4:e7:c7:a5:58:23:cb:59:22:5f:8e:40:
5d:a7:a3:ba:29:bb:d5:b7:ab:ce:6f:b4:3b:ba:13:
dc:e2:3d:9d:54:3f:1d:65:67:43:03:02:fc:9e:07:
bf:83:d8:91:2c:5b:51:81:9b:2e:03:0f:d7:01:2c:
99:5c:89:7b:64:a5:07:88:dc:40:44:a4:4d:16:06:
e8:ab:05:b6:82:63:b3:17:3d:e2:76:d3:00:88:c2:
20:17:15:a4:ba:a5:94:52:1a:a3:94:ad:85:c6:8e:
7e:60:ea:c8:bb:35:30:14:43:66:96:50:47:e0:57:
e8:4a:97:72:95:d8:9a:b6:4d:10:47:d4:72:37:2c:
7c:25:c1:d8:8d:25:1e:a9:b9:81:b6:90:98:4e:38:
ed:9b:64:6d:2f:58:6c:16:28:2e:53:d0:43:b9:a6:
97:8a:8e:89:8b:59:70:29:07:4e:94:d1:f2:9d:8c:
61:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:60:22:A4:68:ED:27:CE:81:D3:69:DD:7D:7C:F4:65:4F:F3:D4:9C
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:47:d7:17:b1:68:e2:32:b1:6f:07:da:e3:68:da:0a:71:2b:
f1:01:24:8c:74:ad:78:05:63:99:28:96:d9:4a:23:92:d0:91:
93:6c:6e:b7:4e:59:46:54:42:8c:9e:a2:40:3d:1b:2c:a7:57:
10:33:f3:60:b3:b2:ce:39:3c:2d:e7:d3:84:16:71:66:13:d3:
13:65:4f:62:e3:84:8c:0c:20:3c:3e:0f:8a:e2:5b:51:1b:3f:
e4:15:3c:55:e7:d4:b1:7b:04:6a:fe:5d:1e:0e:7d:26:d8:1a:
a5:c0:7d:19:42:55:45:03:d4:31:8c:d2:bd:5a:84:6f:10:73:
ec:2d:d1:0b:38:7f:66:1e:ef:6e:64:93:21:1e:13:a8:49:e4:
84:16:8c:13:55:21:54:2e:94:ff:5b:3a:de:ac:e4:37:29:8b:
df:2e:35:58:e6:4c:05:27:c3:e9:3f:6e:08:8b:ad:ea:a4:98:
b0:5c:a3:28:1e:cb:8b:b1:c2:a9:db:97:43:30:f4:a2:b0:e2:
46:db:a3:d7:58:a1:65:c0:95:55:31:d2:76:fb:a6:19:49:dc:
0e:f6:63:2d:f4:83:40:ef:1c:e9:a2:ce:2e:02:d7:1b:02:9e:
c1:d7:3e:27:84:4a:c4:a9:a2:f2:b9:96:99:53:ac:90:70:25:
e9:7d:d4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:20:53 2025 by rpki-client