Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: /Jz7j+1O47LwWVSk0z667Ic+EBfB7DXHPTep+6nn5Ks=
Subject key identifier: 3A:37:95:85:9F:29:1A:F6:4D:7E:0A:53:A3:A6:3F:B4:94:C0:5D:D4
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 0197485536584C9E2611818316675DFDD7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 04CA
Signing time: Sat 07 Jun 2025 03:00:33 +0000
Manifest this update: Sat 07 Jun 2025 03:00:33 +0000
Manifest next update: Sun 08 Jun 2025 03:00:33 +0000
Files and hashes: 1: UrDZwQUlz8oM-YZBJZCko8DzwV4.roa (hash: R8F+9yAyW9iHTTMQt2jYkPuGAbrbM2b50inI73XP78c=)
2: VUMA1w_cWfBfkplU1WhBDdmnD9o.roa (hash: rD4utDh7xiQYF3Mhd366hiIbKkVcQBZdqh6/duIbK7U=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: Qd56gkXoz9R3zQ5TjTT05+uGAk+AfIhEW38zxGLTcJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:36:58:4c:9e:26:11:81:83:16:67:5d:fd:d7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Jun 7 03:00:33 2025 GMT
Not After : Jun 8 03:00:33 2025 GMT
Subject: CN=3a3795859f291af64d7e0a53a3a63fb494c05dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:da:47:4b:57:ef:b9:08:68:0c:57:f9:50:09:
6a:7f:d3:5e:9e:00:fb:d9:18:02:cf:67:a7:f3:bb:
72:50:14:03:6c:1e:1c:93:c3:b1:d0:a7:65:b6:9c:
40:c8:48:72:8a:d1:5c:43:9a:c3:fe:20:70:95:c2:
46:14:27:42:03:32:8a:b2:f0:16:ca:9d:eb:88:6e:
50:78:49:52:e9:f4:3e:e0:2a:5d:ac:ab:48:23:d6:
05:0c:cd:41:99:89:43:98:8b:1b:99:11:af:b3:84:
dc:23:63:d6:e0:fa:7f:53:86:95:1a:d5:61:1b:cb:
40:63:23:67:77:1b:e5:41:54:b6:df:cb:06:34:c0:
49:43:6e:02:26:77:c8:52:4d:7a:bc:7b:03:c7:46:
65:db:ba:29:6e:b6:a0:8b:21:ac:17:c9:5f:9a:9c:
b2:22:54:70:d2:65:d4:1c:11:17:20:dc:01:66:05:
13:59:07:81:ae:95:14:15:18:61:71:7e:50:68:24:
b9:f4:5d:5f:0c:58:e7:0d:75:92:98:5a:ab:b1:31:
5c:37:ed:2f:ef:b6:42:ea:a1:c3:49:6e:f4:83:ef:
40:37:68:7a:ca:a7:0a:38:72:37:c9:d2:22:a4:6a:
04:3c:e5:35:5d:02:ad:80:c8:ab:c5:20:66:c1:14:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:37:95:85:9F:29:1A:F6:4D:7E:0A:53:A3:A6:3F:B4:94:C0:5D:D4
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0d:7e:72:3b:ee:ba:b8:bd:76:4e:ba:55:9f:c6:85:95:96:
d6:3f:9e:48:62:b1:b0:68:fc:96:25:a5:9f:89:48:98:c9:c5:
fc:6c:00:9d:9d:cf:cd:e1:13:a8:4c:a1:68:00:f9:1e:19:28:
65:b2:24:14:39:68:61:9d:44:a4:bd:9b:1b:50:0b:71:4d:cf:
0d:3f:8d:95:55:4a:80:80:9c:9f:b4:f4:6f:78:f6:2b:1f:76:
42:dd:9b:5e:30:d2:4c:3d:9b:93:86:02:9a:83:83:aa:7b:da:
77:44:5e:8f:40:75:e3:c6:79:98:ab:ed:d0:b5:fe:35:a0:3d:
60:e1:0b:53:32:e7:fe:b1:92:32:c9:86:b4:62:79:02:8f:3d:
d7:cd:f9:4c:0d:79:80:9c:e5:7e:b1:20:63:ee:d0:12:95:11:
4c:92:5a:3f:d6:eb:03:96:55:4e:b4:1b:be:95:dd:38:de:1b:
6d:55:ac:a9:61:fa:16:c7:f6:bd:05:db:70:c7:ed:99:f6:e8:
39:a1:69:79:25:25:8c:7a:13:48:64:39:56:c0:d8:67:89:21:
b2:17:10:cf:0d:1f:64:c5:0e:5b:5a:d3:e3:7e:11:ae:08:38:
00:f3:b2:36:4f:5a:45:04:93:ab:82:69:c2:27:f1:36:6a:42:
a9:e1:23:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:46 2025 by rpki-client