Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: huuPjoqbTi1LvqbXZyv1YFHZ+zzzk4utL5XGdNTRyvM=
Subject key identifier: 2D:52:3F:E3:18:42:B3:08:8A:5C:AC:B8:C1:76:7A:AC:1F:84:22:56
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 0198496504E224F06F4A03245A2A6A3BAC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 054F
Signing time: Sun 27 Jul 2025 01:00:13 +0000
Manifest this update: Sun 27 Jul 2025 01:00:13 +0000
Manifest next update: Mon 28 Jul 2025 01:00:13 +0000
Files and hashes: 1: UrDZwQUlz8oM-YZBJZCko8DzwV4.roa (hash: R8F+9yAyW9iHTTMQt2jYkPuGAbrbM2b50inI73XP78c=)
2: VUMA1w_cWfBfkplU1WhBDdmnD9o.roa (hash: rD4utDh7xiQYF3Mhd366hiIbKkVcQBZdqh6/duIbK7U=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: DtcY2Qi1T5m0WRWftlNwSLFWjEg9EAI9VmmD6qUAq9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:04:e2:24:f0:6f:4a:03:24:5a:2a:6a:3b:ac:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Jul 27 01:00:13 2025 GMT
Not After : Jul 28 01:00:13 2025 GMT
Subject: CN=2d523fe31842b3088a5cacb8c1767aac1f842256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:fd:ea:e5:72:c1:cc:3f:56:8e:d9:77:20:
8f:ab:8c:38:f1:38:e9:39:42:59:98:d8:10:b0:cb:
b9:53:1a:05:c1:1f:0a:b0:e9:0a:54:bf:6a:56:dd:
8f:25:66:6b:1f:b1:b5:a0:b8:c0:cd:eb:d5:cf:e4:
b8:df:d7:1d:fb:17:85:bf:1a:11:8c:a1:5f:51:80:
9c:c2:e6:d5:15:f8:d2:ba:3e:89:9f:32:48:bb:8d:
f1:f5:4c:b5:2b:b5:10:e5:df:d5:29:13:23:dd:d2:
ee:31:86:ee:54:27:5b:5d:b0:56:db:99:3d:1a:5c:
74:ec:91:42:57:ad:08:a5:ae:95:6f:11:1d:6f:cd:
6c:18:b1:4a:62:87:47:14:11:c1:f4:7f:33:af:e9:
fc:2c:cc:70:03:61:09:3a:bd:7e:90:69:af:63:59:
88:1d:58:82:57:28:7f:fc:97:c3:b1:c3:b3:4f:a5:
18:d1:8d:9e:3f:1a:0d:2a:66:e4:67:63:60:aa:3f:
34:fe:01:dc:d8:55:c1:91:2d:b9:14:81:10:63:e8:
88:a3:8e:3a:18:9e:fe:d0:1c:9f:31:0a:68:07:5c:
32:ef:a9:e1:fd:7b:be:71:92:08:4b:31:e5:51:da:
3a:d6:ff:f8:e0:3a:ed:b0:be:7a:43:ac:de:22:a5:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:52:3F:E3:18:42:B3:08:8A:5C:AC:B8:C1:76:7A:AC:1F:84:22:56
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:62:ef:65:ef:75:0f:e0:3a:82:b1:66:d7:31:9a:76:eb:8e:
4a:64:b3:aa:90:90:08:69:e8:88:ea:d5:89:73:c2:4b:6b:35:
7b:5e:57:41:00:52:5e:6e:3e:7d:22:db:c6:69:57:ab:8f:ab:
95:5d:ca:af:73:31:3f:ad:fb:31:a3:9c:a8:71:f4:03:b1:c5:
e3:a9:a7:ba:97:1f:64:2a:a7:17:23:bf:a6:96:5e:19:11:07:
d1:88:58:b5:75:2c:c3:4c:62:04:55:5f:3c:a0:30:1c:ea:1d:
08:3d:2e:9c:b1:b8:45:f6:37:99:e9:2d:50:40:77:05:2d:ef:
f9:76:b3:fb:5e:d6:97:0f:ee:12:6e:bf:53:b0:cb:a4:23:bf:
4f:04:0f:87:d1:d6:d6:0d:d3:1e:21:43:c1:94:d3:28:88:64:
96:de:d9:1b:a0:73:b6:57:be:89:56:f7:e0:61:d0:d0:7e:58:
ac:87:65:49:94:b4:fd:45:c9:23:c1:83:f7:38:25:28:33:72:
9b:2c:0a:d2:88:8e:b8:f5:6f:b8:c6:cc:65:ab:73:5c:95:d2:
97:00:73:01:2d:6e:1a:c2:84:0b:46:db:7c:21:d3:e0:b2:94:
98:36:3b:b5:37:42:a8:ce:7a:1b:64:1e:80:48:1e:4a:4e:9a:
3f:04:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:21:18 2025 by rpki-client