
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier: f2YbAywMKwRlO5d/uwVGNZe/sA2NB0BvkPTDfVAFMN8=
Subject key identifier: ED:CE:E5:6B:42:9B:23:D9:06:E3:10:E9:52:50:D0:7A:30:6C:B4:9A
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer: /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial: 01987D8A213B4C93B915A82147523896ACAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number: 056A
Signing time: Wed 06 Aug 2025 04:01:01 +0000
Manifest this update: Wed 06 Aug 2025 04:01:01 +0000
Manifest next update: Thu 07 Aug 2025 04:01:01 +0000
Files and hashes: 1: UrDZwQUlz8oM-YZBJZCko8DzwV4.roa (hash: R8F+9yAyW9iHTTMQt2jYkPuGAbrbM2b50inI73XP78c=)
2: VUMA1w_cWfBfkplU1WhBDdmnD9o.roa (hash: rD4utDh7xiQYF3Mhd366hiIbKkVcQBZdqh6/duIbK7U=)
3: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: g0Wwx/yvpG/Zt5sER+NvvtOLstb8x9AnufqVR8yYhb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:21:3b:4c:93:b9:15:a8:21:47:52:38:96:ac:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Validity
Not Before: Aug 6 04:01:01 2025 GMT
Not After : Aug 7 04:01:01 2025 GMT
Subject: CN=edcee56b429b23d906e310e95250d07a306cb49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:57:4a:e8:2b:12:bb:67:d6:ff:7c:eb:9c:
8a:7a:c3:44:8b:26:72:e6:e5:e0:b0:81:9b:9b:9d:
7a:a9:8b:d3:42:c5:23:bd:f7:40:bd:58:97:ff:7d:
0c:47:7e:b6:2c:e2:08:8a:29:d0:b1:f8:2f:92:b9:
e4:07:11:cd:1e:9c:90:19:96:a0:08:a2:b5:98:cc:
23:88:91:6f:81:57:bd:d9:80:1a:ca:eb:34:9e:bf:
47:08:46:86:93:b4:44:53:7f:10:75:ca:cf:3e:ea:
b7:b8:fd:b9:a3:c6:af:e7:92:c0:ce:18:4c:05:ee:
d4:ec:f2:fd:d4:86:69:3c:45:22:de:48:2c:80:d0:
75:22:14:8c:4f:38:6e:09:10:04:b6:f8:80:34:6a:
6d:23:ee:54:51:dd:d6:91:12:20:13:ec:0a:74:cc:
82:7f:ff:12:4c:73:ce:79:3d:bf:1a:67:75:c2:41:
9e:90:b4:8f:e3:51:4b:31:70:d6:40:2d:ad:4e:d3:
4a:88:a5:19:cb:04:bd:70:93:fb:2e:07:7f:71:dc:
35:9c:d5:17:99:ed:0a:f4:ab:81:99:ff:d3:11:b4:
7e:5d:9b:84:6f:b1:72:a3:e6:57:95:60:b4:cb:a2:
05:4d:7a:a8:6c:5d:e4:38:ac:7a:8a:ee:cf:69:1a:
c4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CE:E5:6B:42:9B:23:D9:06:E3:10:E9:52:50:D0:7A:30:6C:B4:9A
X509v3 Authority Key Identifier:
keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:5d:9d:70:82:d6:31:cc:68:87:15:81:ef:f2:44:c8:2a:34:
f8:2d:39:73:f9:9a:68:36:86:6f:54:12:08:9f:5a:a7:88:84:
56:ae:ec:4a:54:f3:8e:7e:f8:e6:5d:2a:91:29:b2:cb:20:dc:
d9:8b:84:90:50:f8:4b:fd:de:2e:7e:97:46:23:13:e0:c8:e9:
49:b7:a3:b8:69:b8:4b:6e:98:28:e1:b5:22:43:84:5f:97:7b:
83:f2:1b:f8:01:0d:fa:86:92:e9:76:62:ce:12:78:26:2c:7e:
91:53:68:ad:0e:9a:7c:85:37:83:6d:b9:37:61:e0:c5:6d:8e:
60:11:3a:4b:34:8b:05:fe:7d:96:15:8e:3b:50:db:42:66:61:
cb:3b:40:aa:60:d5:48:aa:d8:43:73:dc:60:a8:f8:7f:4f:74:
64:82:2b:f9:fb:66:77:6a:4c:24:25:b2:ff:f7:2b:a0:fc:fc:
a8:28:46:62:6b:6c:3b:17:fb:78:45:e1:68:61:12:8d:23:78:
c8:e9:37:fd:b0:7e:e7:90:2f:fc:06:36:05:80:e8:f5:dc:95:
5b:2b:05:3d:27:eb:93:20:ac:fe:4e:cc:dc:99:30:44:7d:dd:
72:09:46:f3:bb:65:b9:91:12:f9:de:7e:74:f4:ad:33:b4:00:
a2:18:7b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:23:36 2025 by rpki-client