
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File: wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier: LPUYZJupx4Bp+tE9Gj5yg2OT4R0dk/7OTKzmrf4yWAk=
Subject key identifier: 4F:69:AF:BE:AB:EA:B8:3D:5F:84:43:67:10:BA:9B:EC:AC:1D:6F:E3
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 019A4F61E31B29E0C11CCF2A7D086691D7D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number: 175E
Signing time: Tue 04 Nov 2025 15:00:06 +0000
Manifest this update: Tue 04 Nov 2025 15:00:06 +0000
Manifest next update: Wed 05 Nov 2025 15:00:06 +0000
Files and hashes: 1: KML_hA1pizVhEIN7f877pA6o17I.roa (hash: mPt9GeV0y8ENs4Lz1UL4Oj0gaP0ztnD/yr/Nmb/aj0I=)
2: UUfu95Auivxvbsa7i57178Y2ltM.roa (hash: jFwsCOA5Al7+HGdTwINvFII4nowICJNXPZ21CgfKF54=)
3: bk8bvaCKGh2nGwQX4sd5eWPAY_E.roa (hash: Oyv6e+rWeKuFbdE0+T91WAKyRu15r6MOTTHhVcE1hlg=)
4: iFbYnGs7Q9C9t4JGs8FC0ZymsVY.roa (hash: hx8Edg6PVaBQ6FwoxG19s/wh8IcglMW+NEHUNHseRy0=)
5: j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa (hash: 8PbOwRCb12J1Sy0cdVXGjrVVbnIpBxcT9Ys7VYDlJhM=)
6: kTo0w9ANmlvRAqwEfAOqJPK5HLk.roa (hash: ma1SlWgY7s3fuIJWEMEuFwG0D2BUJyIo28TPPjVIKtc=)
7: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: bh59lj3CYb3bJOurCQRGiaMIp09Nr72wAs7i2FHpjOI=)
8: x6WyfN8IVN62gZgewVASQApkl9g.roa (hash: LBcsH6w2HcXVpYRUhZBSvo3mG6uWjn8TOTZsgX0iRl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:e3:1b:29:e0:c1:1c:cf:2a:7d:08:66:91:d7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Nov 4 15:00:06 2025 GMT
Not After : Nov 5 15:00:06 2025 GMT
Subject: CN=4f69afbeabeab83d5f84436710ba9becac1d6fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:6d:76:a7:b1:dd:cb:59:88:d6:c3:6f:91:
1c:df:95:87:a6:e2:26:ce:67:33:cb:9e:44:ff:e4:
34:bb:2b:c3:d4:c0:8c:d9:f3:eb:cc:9b:20:08:b6:
9e:9a:87:16:8e:c9:ea:2a:1b:29:b5:1e:c5:f3:29:
a9:4d:4a:63:e7:93:15:eb:d3:02:3d:0b:1e:e5:f5:
ee:3c:38:52:a9:48:63:60:34:bf:84:18:d2:54:b4:
2e:ca:cc:c5:f7:2f:2f:8d:ce:a7:99:10:40:bc:7e:
55:cb:fa:6c:64:fb:2b:fb:f7:79:ba:4a:50:e0:a4:
95:a9:b8:3b:40:cf:f3:f4:31:20:1e:09:73:cf:1e:
88:4f:12:d5:9a:ca:c0:c6:75:c8:5a:fa:33:5d:1c:
1d:c9:c3:4f:7f:28:8f:53:2a:34:32:3d:95:ae:4d:
ea:bd:49:c3:45:32:8d:32:49:d5:bc:35:4b:42:b1:
cc:da:56:d2:20:1a:69:04:a5:db:97:46:df:5d:bb:
42:ca:09:7c:06:61:5d:70:74:31:bd:f5:5a:87:08:
be:c0:7d:5e:11:5c:78:8b:53:89:e4:e7:40:26:3e:
eb:0c:11:d2:a4:e5:00:a6:20:20:5b:85:a5:17:95:
ae:e4:35:0f:5c:f2:d4:1a:c9:ef:74:de:88:4e:91:
1f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:69:AF:BE:AB:EA:B8:3D:5F:84:43:67:10:BA:9B:EC:AC:1D:6F:E3
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:82:7e:51:a2:9c:d5:ec:b8:45:cb:dd:94:43:3b:6b:aa:3d:
47:03:a9:90:95:55:c0:59:85:5d:91:80:83:d3:a4:b0:59:4a:
cf:ce:fa:78:d8:b7:e5:c1:42:73:bf:b3:7e:22:96:35:88:67:
37:f3:b3:06:8c:d5:52:0f:58:52:6e:2d:ac:19:2c:92:b6:41:
fc:00:c6:7f:90:71:b1:1d:2a:4d:41:70:8c:57:2d:16:ac:a6:
a9:3f:67:fe:df:1d:ce:15:64:3f:84:7a:4f:f7:15:e1:04:84:
b9:05:43:9b:ee:9b:36:bc:f6:9a:bd:98:0c:b8:81:43:a8:08:
ec:00:ed:7b:b1:0b:c3:4f:f8:df:7b:3a:40:3b:9a:b8:59:b4:
24:58:24:8b:be:82:31:18:92:25:58:5c:26:21:93:8d:51:0a:
26:cf:1e:25:77:da:51:13:48:7a:78:69:73:c8:98:b6:5c:23:
df:85:a1:fd:56:09:ee:0a:92:2d:1c:50:b9:04:40:8a:0e:9e:
b7:22:ad:ae:ec:91:d4:19:77:87:ac:c4:2b:64:32:32:71:86:
28:41:29:3f:c2:68:be:71:7b:35:0b:1d:6c:53:0a:31:5b:2c:
52:82:12:5e:69:a1:52:4b:8a:87:85:3c:2d:e2:6f:43:e2:62:
d4:39:40:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:05:27 2025 by rpki-client