Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: pnkkipnV7aEUco9kqQjcI39ebn5SjdZtm1lxGfGIMyM=
Subject key identifier: 94:71:02:75:90:AD:A4:3E:29:D8:84:AA:24:A6:9F:67:AA:42:91:46
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019653126205881F0582F6F80C111DD0216B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 044B
Signing time: Sun 20 Apr 2025 12:00:35 +0000
Manifest this update: Sun 20 Apr 2025 12:00:35 +0000
Manifest next update: Mon 21 Apr 2025 12:00:35 +0000
Files and hashes: 1: UrDZwQUlz8oM-YZBJZCko8DzwV4.roa (hash: R8F+9yAyW9iHTTMQt2jYkPuGAbrbM2b50inI73XP78c=)
2: VUMA1w_cWfBfkplU1WhBDdmnD9o.roa (hash: rD4utDh7xiQYF3Mhd366hiIbKkVcQBZdqh6/duIbK7U=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: QcgHLmr+ic53zNptDiAKLjTqb2lKcE31k+H0vp0PIXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:62:05:88:1f:05:82:f6:f8:0c:11:1d:d0:21:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Apr 20 12:00:35 2025 GMT
Not After : Apr 21 12:00:35 2025 GMT
Subject: CN=9471027590ada43e29d884aa24a69f67aa429146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:80:ee:10:d0:d9:ca:1e:29:9f:59:c5:0a:
e4:2d:11:63:bb:92:2e:fe:30:d9:9a:2c:28:8d:80:
83:eb:da:b8:53:cd:45:bf:50:49:2a:90:d1:5d:a2:
88:fd:ed:86:2f:33:9f:22:d3:cb:b8:13:5e:df:56:
c1:cb:8e:ac:bc:e4:3d:3a:16:bf:bf:23:09:38:43:
6d:13:1b:76:99:35:da:83:ee:70:25:b5:24:b5:04:
dc:cc:3a:99:d2:47:ae:8f:f2:18:e4:d1:d5:fe:fa:
e7:c4:34:7f:d4:db:0e:38:dc:db:a2:4f:01:2b:29:
e5:d3:ea:cb:0d:ad:fe:9c:1b:d8:7d:1a:3a:7b:5b:
31:f0:6b:37:71:6b:6f:e7:93:4d:43:12:e5:9a:db:
87:c7:bb:93:3c:a1:d7:d2:58:46:de:1f:d1:4a:a3:
eb:a8:c4:a6:3c:89:5f:7c:9f:b9:a6:f6:d5:f1:3a:
1e:e1:3e:8c:4a:a5:2a:10:96:ae:ee:a8:ce:78:83:
9d:6d:0d:dc:c9:26:44:28:60:4d:fe:02:c7:af:b4:
97:cc:3c:66:28:31:9d:9f:06:98:0a:bd:0f:4c:3f:
e5:8c:73:f4:a3:60:5c:1f:35:92:b0:08:47:7b:b3:
f5:de:cf:c5:00:da:10:8c:9a:a4:64:7e:bb:49:d4:
d0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:71:02:75:90:AD:A4:3E:29:D8:84:AA:24:A6:9F:67:AA:42:91:46
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4f:1d:ee:e5:ab:a9:fc:e6:db:28:3a:48:ff:2d:c4:e2:c3:
5c:97:3e:d2:73:02:a9:28:80:15:bf:bf:70:44:25:9c:47:5b:
3f:19:e4:2d:8e:51:56:a0:ce:21:9b:51:cb:10:d3:d4:bb:69:
0e:f4:aa:bd:0d:41:ab:0c:e2:e3:ad:33:6a:b1:23:21:94:aa:
98:ce:cd:44:3a:0b:68:17:40:9e:73:53:5a:53:59:31:d5:58:
c8:a8:b0:1e:a4:65:f1:fe:56:93:35:38:23:8b:44:0c:30:c0:
27:46:73:00:1e:0a:43:02:fb:1f:74:63:2c:22:93:70:0c:55:
ac:44:85:13:2c:41:87:6b:69:ae:3f:e1:41:27:1d:e7:0b:96:
08:5e:02:47:38:f9:e5:75:34:36:7c:39:25:45:97:4d:9c:22:
5f:59:7a:b4:3b:14:6d:2a:8f:48:87:36:f4:eb:d4:40:e3:2b:
e0:e2:db:99:30:6b:41:01:cb:09:54:48:0f:10:19:25:fb:6f:
4b:99:cb:4a:a3:df:fa:98:78:63:42:61:c7:dc:7a:a3:21:6b:
db:c9:76:6f:a9:05:ed:f0:df:eb:7a:73:56:b4:54:b1:b8:8b:
81:d0:5f:c3:aa:bd:c8:46:36:cb:9a:b2:14:d6:af:df:fe:65:
e0:73:cd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:58:46 2025 by rpki-client