Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: GntYVKkldjDL/0kBVP8WZEGLPjzEJyqv+mAcH7BRZ7o=
Subject key identifier: D1:CB:3D:05:21:F2:3C:E7:22:DF:64:E5:C0:80:AC:F3:85:D7:84:02
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 019A52D25DC43BA35298B38EED1BDCD9F644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 065D
Signing time: Wed 05 Nov 2025 07:01:49 +0000
Manifest this update: Wed 05 Nov 2025 07:01:49 +0000
Manifest next update: Thu 06 Nov 2025 07:01:49 +0000
Files and hashes: 1: UrDZwQUlz8oM-YZBJZCko8DzwV4.roa (hash: R8F+9yAyW9iHTTMQt2jYkPuGAbrbM2b50inI73XP78c=)
2: VUMA1w_cWfBfkplU1WhBDdmnD9o.roa (hash: rD4utDh7xiQYF3Mhd366hiIbKkVcQBZdqh6/duIbK7U=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: QjrAPx6I6aAcn+BR4z1SRnzVihqJoSYmsrAjwpHY60g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:5d:c4:3b:a3:52:98:b3:8e:ed:1b:dc:d9:f6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Nov 5 07:01:49 2025 GMT
Not After : Nov 6 07:01:49 2025 GMT
Subject: CN=d1cb3d0521f23ce722df64e5c080acf385d78402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d4:0f:a4:f1:35:31:a4:fe:33:3c:83:1b:64:
ef:0f:72:3c:9a:25:95:c7:de:05:da:ef:cb:24:ee:
b9:97:d9:e2:da:52:e1:a9:05:6f:cf:d0:75:5c:e8:
c7:73:61:18:18:ad:2f:5b:a5:53:95:82:d0:22:6c:
dc:09:d1:e9:fa:60:70:36:f9:b2:76:2e:f3:1f:9b:
9e:8c:30:80:9a:81:df:b7:27:22:07:95:43:98:e1:
12:47:3f:23:e0:b2:51:8c:8d:a8:19:7d:ac:b8:5f:
a0:ba:b6:da:da:32:9a:3f:28:39:51:0c:1e:e1:ec:
7a:c8:b6:50:e8:59:36:f3:eb:61:7c:33:d4:f2:a1:
4a:4f:61:d2:f3:32:43:ee:4e:a8:3d:aa:3e:72:b1:
3c:50:90:47:dc:14:1d:33:03:9b:58:89:23:7e:a9:
62:c3:22:4d:0d:10:e2:26:e2:d3:af:6d:b6:a1:6f:
62:5f:fd:e3:ef:a3:f4:ae:d6:eb:00:49:bf:db:27:
1c:56:10:e5:e8:9d:40:39:3d:c6:22:a6:84:36:4a:
fa:25:e6:30:f6:e1:34:5d:bb:2a:db:f0:a1:f0:ac:
e9:b4:53:ce:c7:8c:02:a0:f1:f0:b2:11:f5:5a:c0:
27:9a:73:96:63:48:4a:4c:ab:2b:b4:65:ab:cd:ea:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CB:3D:05:21:F2:3C:E7:22:DF:64:E5:C0:80:AC:F3:85:D7:84:02
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:22:9e:60:c8:31:26:af:66:1f:db:94:d8:c7:38:9e:5e:ea:
2e:88:9c:53:55:ec:d0:5f:f0:8a:9b:7b:d0:d4:39:8b:0c:77:
4e:be:d8:dc:aa:e2:94:42:b7:66:d4:e4:dd:cd:c0:d9:60:2f:
fd:d8:44:6d:ba:53:51:3e:60:a3:98:cc:ba:19:9b:4f:17:c5:
62:48:11:4d:02:a6:dd:5a:68:ea:9a:5f:37:4e:ba:ef:38:37:
11:a9:42:ca:37:1f:9a:0c:13:66:0f:22:5c:a8:02:cb:0f:c4:
aa:66:0e:42:bb:0c:b1:b0:12:ef:a3:dc:43:6d:85:5d:69:8b:
49:b1:26:3d:98:9d:eb:2a:a6:b1:98:96:ec:be:73:99:48:c7:
8b:9b:1b:6f:a7:42:a8:e3:89:e8:56:4a:c7:87:7a:62:19:cc:
f9:8b:14:b0:bb:1d:80:53:68:47:b6:ad:e1:5d:66:1e:25:52:
29:96:f7:15:a1:a3:d2:7e:36:97:34:5e:cd:9c:62:51:71:2d:
61:47:91:4f:95:fd:93:df:6b:c9:b0:b3:a9:a0:1c:ba:23:44:
63:75:d0:03:33:db:3c:d9:3e:6c:75:1b:b1:1b:6a:62:0f:48:
39:6b:bc:a3:36:97:8a:75:bb:9a:42:f4:8d:af:d1:67:f7:29:
22:75:df:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:12:49 2025 by rpki-client