Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: 0RzcolJ3V6hS5gUsdfJaIQZDNajXcO0ouPbmlLA08KI=
Subject key identifier: 69:D4:5D:16:A4:B1:44:C4:55:25:4C:D0:48:2A:CF:EA:DA:E3:92:06
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 01994E1C338176C1E3B4BF7DCB3E5321B666
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 05D6
Signing time: Mon 15 Sep 2025 16:01:35 +0000
Manifest this update: Mon 15 Sep 2025 16:01:35 +0000
Manifest next update: Tue 16 Sep 2025 16:01:35 +0000
Files and hashes: 1: UrDZwQUlz8oM-YZBJZCko8DzwV4.roa (hash: R8F+9yAyW9iHTTMQt2jYkPuGAbrbM2b50inI73XP78c=)
2: VUMA1w_cWfBfkplU1WhBDdmnD9o.roa (hash: rD4utDh7xiQYF3Mhd366hiIbKkVcQBZdqh6/duIbK7U=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: 5G9UbrEXs2wEzpmPXNMOmjB0Gds7TuFBwNpw8QsjNKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4e:1c:33:81:76:c1:e3:b4:bf:7d:cb:3e:53:21:b6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Sep 15 16:01:35 2025 GMT
Not After : Sep 16 16:01:35 2025 GMT
Subject: CN=69d45d16a4b144c455254cd0482acfeadae39206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:54:43:9e:c5:be:65:be:98:45:20:1c:fd:
aa:06:32:56:a6:99:26:65:dd:69:da:40:07:11:0a:
7b:e0:8d:e3:a5:a1:32:43:2e:f0:88:8b:c4:ee:7a:
7d:3b:5f:d1:e7:c2:38:d8:6d:d8:e1:64:eb:33:46:
86:ba:15:10:c6:6c:d1:53:d3:ab:55:ac:a2:8d:20:
60:ff:fe:0d:4c:54:78:f6:ad:d7:e6:24:98:c4:af:
e5:ed:7d:41:16:9c:8a:85:bc:86:70:db:b5:d3:34:
42:33:53:ba:28:91:4f:8d:18:bc:d7:a8:7c:83:be:
64:88:22:5b:ad:92:d9:67:99:d5:c4:53:53:76:03:
74:59:48:41:1b:7a:d6:dd:28:a0:5d:7d:84:66:b9:
ae:a7:fa:55:20:5a:3a:c6:f0:72:75:1d:45:72:63:
15:fa:8f:18:4d:41:0b:21:c0:34:79:ec:49:3e:98:
40:7a:88:c4:e0:19:51:0f:44:0d:5e:6d:da:1e:c9:
d8:11:48:71:37:4d:54:22:35:12:2e:3b:69:2f:71:
6f:69:83:4a:16:7d:25:03:a4:75:e6:e1:c5:07:df:
19:a1:5c:80:96:c6:6e:88:b5:cd:bd:df:db:b8:ef:
58:f5:a6:3b:1c:68:74:88:e9:cb:58:95:7e:05:04:
de:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D4:5D:16:A4:B1:44:C4:55:25:4C:D0:48:2A:CF:EA:DA:E3:92:06
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:88:58:cb:db:1f:b2:27:11:cb:54:29:98:eb:e8:cd:03:2b:
d8:20:88:fb:77:a5:aa:ef:3c:18:a6:71:14:da:64:27:a9:8c:
2f:86:67:82:ba:c0:29:93:ef:08:8d:10:51:d8:70:f8:c6:16:
56:b5:d7:61:38:ba:1d:7e:69:f5:53:aa:68:92:b3:9c:30:29:
20:45:86:a9:77:f4:68:68:2b:17:21:a8:3a:4b:fc:3e:b6:c6:
63:e1:40:99:33:ce:ff:2e:1f:59:fe:48:64:76:f2:93:ce:58:
b9:9c:d5:b3:25:d5:fc:9a:d5:b3:70:81:fb:6a:55:68:76:13:
b9:bf:c2:c1:03:34:8b:49:1f:07:44:49:14:f4:c1:b1:16:e6:
f6:40:88:df:03:cb:f2:b4:70:46:e8:fb:59:c8:7f:6c:05:f5:
49:ae:7f:52:ad:dd:78:43:dd:93:ee:1a:d6:62:95:41:c3:f2:
a9:17:b5:bc:b8:93:5e:95:db:3b:07:6b:71:5e:f9:17:8c:00:
6d:82:c5:a7:f1:7e:8a:c8:6c:2e:36:34:93:b7:27:e0:11:f8:
e7:0b:98:5a:2d:30:1a:1c:cf:77:8e:85:23:be:eb:c8:9e:e9:
e2:96:36:30:71:a7:83:71:3e:c4:1f:9d:7a:89:d2:c6:04:2b:
b9:1a:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 23:14:38 2025 by rpki-client