Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: Ll4RwDll8PGEomDnGWtalvOgKnyZhg6xxxHeWtBqfZ8=
Subject key identifier: 97:01:F0:6B:CA:28:89:6B:DB:32:73:3E:35:E7:BA:D6:26:20:3C:40
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 01976929D9A7BE61145A3BF0E511EB229A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 04DB
Signing time: Fri 13 Jun 2025 12:00:39 +0000
Manifest this update: Fri 13 Jun 2025 12:00:39 +0000
Manifest next update: Sat 14 Jun 2025 12:00:39 +0000
Files and hashes: 1: UrDZwQUlz8oM-YZBJZCko8DzwV4.roa (hash: R8F+9yAyW9iHTTMQt2jYkPuGAbrbM2b50inI73XP78c=)
2: VUMA1w_cWfBfkplU1WhBDdmnD9o.roa (hash: rD4utDh7xiQYF3Mhd366hiIbKkVcQBZdqh6/duIbK7U=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: pIkReFNtMZAzHVddFJziVK9Usay7D9snqonFMtuzOWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:d9:a7:be:61:14:5a:3b:f0:e5:11:eb:22:9a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Jun 13 12:00:39 2025 GMT
Not After : Jun 14 12:00:39 2025 GMT
Subject: CN=9701f06bca28896bdb32733e35e7bad626203c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:17:b9:3f:dc:af:f4:2b:84:7d:c8:df:62:
47:40:5f:a6:f6:35:ac:21:bb:72:f6:7a:91:ee:6d:
e4:78:5a:20:9e:17:c7:87:ec:1d:24:f3:e4:3f:2a:
8d:cc:15:fc:30:6b:5e:f2:44:16:cb:d6:57:7e:96:
52:97:fc:9b:fa:f3:46:2e:df:40:73:70:be:13:8f:
22:ef:8a:45:b5:57:70:a0:a9:bc:e6:9c:f6:0a:3d:
57:32:04:c8:44:5c:6f:3c:e7:2a:17:a7:e9:6f:03:
e1:d2:79:39:b0:6c:7c:1e:f7:b2:61:36:bb:52:0d:
d5:35:45:d2:ff:c2:ea:1e:f1:96:8c:ca:05:7f:26:
3d:aa:63:e8:f5:82:95:c1:ae:83:25:15:ea:e4:7c:
ae:59:a0:ab:c5:80:49:79:a4:88:79:34:98:29:c0:
c4:39:2f:78:51:11:90:57:f3:a0:9f:d9:75:e3:6a:
03:d9:00:df:28:d3:8d:65:58:e6:08:84:0f:da:90:
e8:ef:3d:70:21:68:db:c9:96:5a:6d:90:6d:0d:fa:
ba:cd:47:1a:94:92:83:5e:cc:8d:4e:38:bb:70:9d:
b1:8b:e0:4b:94:a5:db:a6:ae:43:1a:be:d7:56:28:
ad:84:30:71:21:dc:2d:90:4e:5e:8b:c2:22:2e:44:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:01:F0:6B:CA:28:89:6B:DB:32:73:3E:35:E7:BA:D6:26:20:3C:40
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:06:cf:ae:5f:a1:54:c5:96:31:ff:39:59:ed:59:09:fd:74:
21:b6:a9:00:da:e1:7f:1d:fe:3c:f4:50:e8:c2:65:20:84:5e:
2f:50:a9:c1:1e:7c:37:37:35:3e:0d:1d:7d:7b:cd:53:74:7a:
b8:ae:ad:1e:52:08:74:25:da:9f:03:cd:0a:46:cb:c2:1e:3d:
ca:59:39:51:d3:39:7c:65:7e:dc:8f:5b:c2:a6:ec:fc:bf:8b:
7a:cd:33:b7:a1:fb:81:70:58:f6:0e:8f:a8:36:d7:98:cb:35:
f6:ab:57:00:a7:63:f4:aa:8e:80:91:44:4b:55:5c:fe:d0:07:
81:0c:0c:e6:42:8c:fe:2e:79:2a:b9:1f:25:37:f4:e7:f7:76:
b0:a3:b9:46:61:fa:24:f2:16:31:a8:ec:03:b8:fd:db:2a:c1:
ca:02:cb:77:1a:4e:ce:27:e8:62:26:f3:8f:db:1b:b7:96:61:
13:03:b5:ae:23:76:73:cf:be:5e:1a:9b:e6:d7:b2:6b:5e:9b:
63:ca:7a:ed:23:ab:39:24:90:5a:74:4e:c9:74:b7:8b:2e:b0:
9e:c0:78:6c:5c:3b:5c:51:10:c9:ad:0e:98:e6:15:23:39:71:
02:c6:d9:68:91:e0:bc:36:64:d3:45:5a:c5:6a:ea:b1:0a:ac:
87:63:0a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:40:34 2025 by rpki-client