Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File: wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier: kBkljU1sC25hHIqFFfibw6SMaXrKswl9IzW+L6VgoJU=
Subject key identifier: FA:6E:13:78:80:2D:E5:69:03:DD:4E:8E:EC:EB:B3:03:9C:D6:8D:DC
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 0197737665E44E9BFBE4FB54C54BDBC763B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number: 15E3
Signing time: Sun 15 Jun 2025 12:00:28 +0000
Manifest this update: Sun 15 Jun 2025 12:00:28 +0000
Manifest next update: Mon 16 Jun 2025 12:00:28 +0000
Files and hashes: 1: KML_hA1pizVhEIN7f877pA6o17I.roa (hash: mPt9GeV0y8ENs4Lz1UL4Oj0gaP0ztnD/yr/Nmb/aj0I=)
2: UUfu95Auivxvbsa7i57178Y2ltM.roa (hash: jFwsCOA5Al7+HGdTwINvFII4nowICJNXPZ21CgfKF54=)
3: bk8bvaCKGh2nGwQX4sd5eWPAY_E.roa (hash: Oyv6e+rWeKuFbdE0+T91WAKyRu15r6MOTTHhVcE1hlg=)
4: iFbYnGs7Q9C9t4JGs8FC0ZymsVY.roa (hash: hx8Edg6PVaBQ6FwoxG19s/wh8IcglMW+NEHUNHseRy0=)
5: j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa (hash: 8PbOwRCb12J1Sy0cdVXGjrVVbnIpBxcT9Ys7VYDlJhM=)
6: kTo0w9ANmlvRAqwEfAOqJPK5HLk.roa (hash: ma1SlWgY7s3fuIJWEMEuFwG0D2BUJyIo28TPPjVIKtc=)
7: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: kR2xIYWqiGJcKMvqUVeStYpH1iRcDgu/L+s2qeGMjj8=)
8: x6WyfN8IVN62gZgewVASQApkl9g.roa (hash: LBcsH6w2HcXVpYRUhZBSvo3mG6uWjn8TOTZsgX0iRl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:65:e4:4e:9b:fb:e4:fb:54:c5:4b:db:c7:63:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Jun 15 12:00:28 2025 GMT
Not After : Jun 16 12:00:28 2025 GMT
Subject: CN=fa6e1378802de56903dd4e8eecebb3039cd68ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6f:2b:82:24:22:74:a1:38:d7:7e:0e:cc:17:
02:78:10:0c:bd:41:a4:f8:f9:af:8a:34:14:4d:d1:
db:b7:21:c1:96:c7:a3:f3:ba:61:b3:9d:60:b7:bf:
60:c5:71:e7:d3:2f:d0:ef:81:b5:f1:d3:9d:62:90:
7a:8d:52:1d:d7:5f:3a:44:33:4f:fe:4e:1b:21:8f:
48:5c:e9:a3:8f:f8:6a:43:8a:87:1b:c9:90:e8:96:
03:87:96:3c:5a:74:0b:11:29:23:2a:c1:a6:5d:f8:
bb:36:32:19:b7:88:71:7e:83:a9:da:ee:bb:fb:e3:
69:0d:78:e7:44:33:9b:50:6f:fe:42:2c:84:aa:29:
c8:14:53:a1:6b:38:fc:63:a1:cc:bf:d1:5d:28:7f:
7f:c7:56:a4:a7:84:11:36:33:37:73:54:d0:a2:fe:
be:21:c7:d3:8e:0c:1d:65:39:c3:5c:7f:79:cf:ba:
d8:fd:de:b1:4c:cc:85:92:b1:02:e9:77:09:21:13:
dc:33:be:32:da:89:f2:55:6e:20:7a:fb:01:70:89:
a9:59:48:c4:ad:22:57:24:f4:13:6b:a7:39:73:ca:
c8:0a:7a:48:a5:43:c5:95:bc:41:2b:db:c4:30:95:
03:a0:dd:52:4e:f4:4d:63:3f:fe:78:f4:3e:45:00:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6E:13:78:80:2D:E5:69:03:DD:4E:8E:EC:EB:B3:03:9C:D6:8D:DC
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:68:ab:a1:ff:1e:40:06:4c:b9:18:1e:37:61:19:e7:7b:a7:
43:fe:1d:44:96:d8:27:26:67:f3:b5:1f:f5:44:93:9e:a3:d5:
4e:60:84:80:5d:9a:75:07:1b:78:c1:fc:e7:24:2e:6e:93:5d:
0d:66:57:8e:1c:29:56:cd:39:b8:73:bd:c5:1f:ed:14:0b:c4:
82:14:bc:03:0b:dc:f3:73:3b:92:bb:98:79:3c:ec:57:39:27:
d6:57:a3:bf:78:69:c4:fa:9b:6a:c1:5c:f3:81:eb:74:76:35:
d5:8f:78:ba:78:da:40:ea:ed:cd:8e:a5:6b:6a:83:ae:3f:af:
07:50:ea:b9:1d:ed:23:ad:ee:26:e0:3d:63:15:f5:11:a1:d0:
33:2d:a9:63:66:36:67:a7:41:79:80:9b:9b:63:eb:87:85:a3:
71:26:6f:45:c1:96:01:db:71:7f:58:00:91:58:5a:5c:4a:54:
79:fc:21:e3:b9:28:a2:6f:7e:38:46:3b:c8:a5:b8:39:3f:e2:
26:3b:90:b6:7f:bc:b5:9e:44:06:d6:22:46:b2:4a:40:6b:4d:
67:ef:10:28:c3:f6:81:89:d8:5c:94:6b:a2:86:8d:86:0f:88:
3e:fd:24:3d:c7:d0:88:7c:10:47:ab:a5:42:84:e7:59:68:3c:
78:21:80:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:19 2025 by rpki-client