Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File: wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier: c1fM8uNGpf3CLPTQH2SDGg4jlr2rWb8FPECXhofMcso=
Subject key identifier: A8:77:89:74:2F:72:12:6A:A5:30:71:CD:9B:2C:EE:E3:4F:C7:02:C2
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 0198745099DEBEE0FE3F548967F0EC90F8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number: 1668
Signing time: Mon 04 Aug 2025 09:01:35 +0000
Manifest this update: Mon 04 Aug 2025 09:01:35 +0000
Manifest next update: Tue 05 Aug 2025 09:01:35 +0000
Files and hashes: 1: KML_hA1pizVhEIN7f877pA6o17I.roa (hash: mPt9GeV0y8ENs4Lz1UL4Oj0gaP0ztnD/yr/Nmb/aj0I=)
2: UUfu95Auivxvbsa7i57178Y2ltM.roa (hash: jFwsCOA5Al7+HGdTwINvFII4nowICJNXPZ21CgfKF54=)
3: bk8bvaCKGh2nGwQX4sd5eWPAY_E.roa (hash: Oyv6e+rWeKuFbdE0+T91WAKyRu15r6MOTTHhVcE1hlg=)
4: iFbYnGs7Q9C9t4JGs8FC0ZymsVY.roa (hash: hx8Edg6PVaBQ6FwoxG19s/wh8IcglMW+NEHUNHseRy0=)
5: j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa (hash: 8PbOwRCb12J1Sy0cdVXGjrVVbnIpBxcT9Ys7VYDlJhM=)
6: kTo0w9ANmlvRAqwEfAOqJPK5HLk.roa (hash: ma1SlWgY7s3fuIJWEMEuFwG0D2BUJyIo28TPPjVIKtc=)
7: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: zAKWv66c86OE5IvrFkVdz/l+HWwcf0512JkKm8VaG7s=)
8: x6WyfN8IVN62gZgewVASQApkl9g.roa (hash: LBcsH6w2HcXVpYRUhZBSvo3mG6uWjn8TOTZsgX0iRl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:99:de:be:e0:fe:3f:54:89:67:f0:ec:90:f8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Aug 4 09:01:35 2025 GMT
Not After : Aug 5 09:01:35 2025 GMT
Subject: CN=a87789742f72126aa53071cd9b2ceee34fc702c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:32:66:09:2e:3e:4e:f4:6c:5d:f6:29:38:
84:50:73:28:c8:a8:3d:db:40:40:b6:51:94:0e:44:
b6:ed:5c:55:b1:41:42:15:19:a8:0d:fc:c3:7f:11:
a1:4a:92:a8:f4:29:1d:49:3f:37:5b:06:f0:48:f6:
bd:27:13:64:7a:20:59:6c:0c:0a:ab:1b:a7:e2:f0:
94:0a:1c:d6:db:32:0e:2e:f4:d3:dc:6e:96:69:b4:
34:48:29:d7:e8:c4:e3:74:58:7f:08:67:7d:ca:80:
76:5d:b2:c0:9b:35:45:7b:bc:f1:5f:9b:c7:29:b3:
60:88:01:a6:05:bb:0c:6a:94:d2:df:77:84:fa:e9:
f9:c8:f9:96:eb:16:9a:26:57:7d:06:57:59:9f:57:
8c:87:42:6d:65:a8:e4:32:bf:8e:27:6b:0b:da:62:
80:ce:80:a4:89:d5:81:3f:d1:3b:da:02:b7:0d:8d:
16:fa:ea:ee:67:fd:fb:75:5b:a5:bd:e0:f8:a1:25:
c4:d0:96:f7:c2:1d:6b:54:11:5e:da:a4:97:2d:04:
4d:dc:3c:70:e1:9c:3e:62:0e:c8:e2:29:e2:98:ad:
48:f4:c5:a9:90:c6:63:0c:37:f2:fc:9c:8a:cf:95:
39:d7:65:ad:86:d6:f7:e1:e6:61:7e:2a:8a:3e:59:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:77:89:74:2F:72:12:6A:A5:30:71:CD:9B:2C:EE:E3:4F:C7:02:C2
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:27:c7:22:8f:c9:dd:da:7c:34:16:99:82:ef:a2:d0:cd:0e:
87:6f:92:fc:90:65:28:9b:5d:71:33:28:95:0f:99:41:6a:52:
c2:a2:44:ee:84:e1:23:37:0a:95:9f:23:56:e4:be:74:07:5a:
b7:cc:00:23:e3:cd:ae:d5:c6:12:ad:11:a0:91:14:5e:95:b8:
4c:db:28:f5:c5:7b:dc:d4:7a:89:ac:cc:c3:df:d6:d3:a4:79:
26:ec:81:51:a7:d7:fc:38:78:50:f2:7a:95:22:1e:3e:08:1e:
06:bd:6c:9d:52:60:91:3e:2c:a3:b1:a5:c0:fc:06:3f:dd:57:
93:26:5f:df:f7:7f:53:bc:d9:e3:d6:fd:0f:1e:51:fd:fc:49:
ab:cb:8f:c3:71:66:b0:bf:6f:df:8e:4f:a9:b3:c9:14:07:86:
cf:0f:10:1d:4c:bc:86:fc:da:14:39:72:2a:fd:29:9f:8a:48:
9b:29:5f:ad:8d:b3:78:74:97:b1:59:7d:3b:88:01:cd:ef:e8:
eb:4c:fa:95:fa:e9:be:d9:99:dc:ef:0f:ca:be:d1:83:37:a8:
95:0f:e2:cb:fa:3e:bc:7a:c2:16:c9:47:20:20:35:2b:1a:d5:
17:a9:c8:04:a9:08:21:57:6f:3c:11:9d:b3:1e:27:ab:73:67:
22:bf:25:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:17:40 2025 by rpki-client