Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: ZnCKEPoc1Dl5Sd73QRFcAEBZcDWWAEhMhBGT5MbM3/4=
Subject key identifier: 53:B7:6E:26:C3:38:21:00:03:8F:19:51:EE:C0:8D:69:EF:35:93:21
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 0199FBEB1587641694483DA054AE39671B26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 0630
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: UrDZwQUlz8oM-YZBJZCko8DzwV4.roa (hash: R8F+9yAyW9iHTTMQt2jYkPuGAbrbM2b50inI73XP78c=)
2: VUMA1w_cWfBfkplU1WhBDdmnD9o.roa (hash: rD4utDh7xiQYF3Mhd366hiIbKkVcQBZdqh6/duIbK7U=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: wl6IONoiE0974uGvVNxDJ/LUJr5Kz6HiO7Xi2MXGSHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:15:87:64:16:94:48:3d:a0:54:ae:39:67:1b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=53b76e26c3382100038f1951eec08d69ef359321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6c:92:93:c1:9a:36:b3:9c:fd:ef:e8:a1:6f:
2d:f5:28:01:0a:73:ed:1c:8a:55:18:21:32:bf:96:
19:2e:19:85:03:8c:11:78:d8:5b:92:9b:61:94:8c:
89:e6:08:01:eb:af:9c:3e:c3:f1:1a:d8:ef:b2:ad:
61:8e:79:16:01:38:c2:2d:2a:7b:39:8c:cb:4e:b7:
29:25:f6:e5:89:9f:3f:01:90:a3:1b:fd:57:09:b9:
05:e9:30:77:96:09:e3:fc:34:d4:dc:48:aa:9f:89:
ef:82:d8:03:43:c8:c1:c9:5c:e5:eb:4c:dc:2e:f1:
8f:52:a4:1a:dd:fb:1d:94:be:b2:a3:99:2a:c2:94:
b1:6c:01:3a:0a:8a:bc:df:c3:00:06:77:ae:3d:29:
3d:c4:a6:bd:10:8b:db:dd:57:cb:09:b4:9f:3b:d0:
10:51:f9:a1:7b:5d:e1:05:9f:80:ea:87:78:77:77:
0f:11:6c:ad:40:6b:37:ac:16:92:e3:c9:9a:e6:3a:
3e:e8:68:c2:8e:c9:06:10:d1:fc:c3:0c:47:6c:82:
74:4f:b8:de:fc:f1:02:25:1c:02:d5:88:85:ad:2a:
aa:c8:07:a8:85:45:46:7b:4d:09:a4:05:ef:16:ae:
ed:5d:f5:fa:19:92:59:37:29:6b:f9:dc:8f:42:dd:
9f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B7:6E:26:C3:38:21:00:03:8F:19:51:EE:C0:8D:69:EF:35:93:21
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e8:c5:cd:60:8b:2f:87:93:a8:84:07:62:27:08:e3:74:30:
dc:85:99:63:46:d6:e5:cb:c1:98:c1:2c:b9:35:00:c6:be:8c:
67:f9:33:fb:bb:75:3b:54:5a:64:23:ae:fa:88:2d:79:a6:07:
a5:c2:1b:3c:af:74:4b:e5:11:b7:6d:f6:62:ca:37:86:81:e0:
99:1a:76:8c:5c:29:f8:31:90:f2:18:21:a3:30:f0:60:f0:b8:
6b:e8:32:c0:16:5e:21:03:7f:23:f4:9e:bb:6f:7a:f1:fc:ee:
1b:0f:0b:7f:8c:df:e1:19:0e:1e:9d:2b:7b:a2:32:39:08:c1:
32:54:e6:87:2a:e4:74:51:ac:23:b5:df:fa:0a:ea:3a:80:ae:
7b:08:1e:e0:46:71:14:5e:97:6b:f0:2c:5c:83:e7:94:36:16:
2a:57:40:fe:6d:b1:c3:89:95:33:d6:9d:5e:f2:06:3f:1c:5a:
66:1d:dd:01:53:23:12:53:7c:73:f7:9b:fe:29:16:17:26:2d:
7d:bd:2d:b5:ef:17:a2:95:26:2b:ba:8f:f0:58:35:6b:86:11:
dd:d0:e6:92:22:33:50:23:f2:bc:8d:61:a7:09:07:05:70:84:
68:2f:d2:a0:a4:07:26:2c:70:af:16:df:35:b6:c6:af:b6:80:
e3:e6:de:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:37 2025 by rpki-client