Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File: wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier: ipdEPRyLu1w0ezqEsREpRg7B8L4Ez3QRPC2tkmJl23s=
Subject key identifier: C8:53:BC:56:3E:A5:94:4B:A8:4E:74:C9:4F:1F:31:4E:82:6D:38:39
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 0196748C4B2CA3373943C3497BBAB41086D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number: 155F
Signing time: Sun 27 Apr 2025 00:01:13 +0000
Manifest this update: Sun 27 Apr 2025 00:01:13 +0000
Manifest next update: Mon 28 Apr 2025 00:01:13 +0000
Files and hashes: 1: KML_hA1pizVhEIN7f877pA6o17I.roa (hash: mPt9GeV0y8ENs4Lz1UL4Oj0gaP0ztnD/yr/Nmb/aj0I=)
2: UUfu95Auivxvbsa7i57178Y2ltM.roa (hash: jFwsCOA5Al7+HGdTwINvFII4nowICJNXPZ21CgfKF54=)
3: bk8bvaCKGh2nGwQX4sd5eWPAY_E.roa (hash: Oyv6e+rWeKuFbdE0+T91WAKyRu15r6MOTTHhVcE1hlg=)
4: iFbYnGs7Q9C9t4JGs8FC0ZymsVY.roa (hash: hx8Edg6PVaBQ6FwoxG19s/wh8IcglMW+NEHUNHseRy0=)
5: j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa (hash: 8PbOwRCb12J1Sy0cdVXGjrVVbnIpBxcT9Ys7VYDlJhM=)
6: kTo0w9ANmlvRAqwEfAOqJPK5HLk.roa (hash: ma1SlWgY7s3fuIJWEMEuFwG0D2BUJyIo28TPPjVIKtc=)
7: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: Zwxdot5yZ5W+sfcRShnYTHhQaWEW7oyXhlQ8hk8XcR4=)
8: x6WyfN8IVN62gZgewVASQApkl9g.roa (hash: LBcsH6w2HcXVpYRUhZBSvo3mG6uWjn8TOTZsgX0iRl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:4b:2c:a3:37:39:43:c3:49:7b:ba:b4:10:86:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Apr 27 00:01:13 2025 GMT
Not After : Apr 28 00:01:13 2025 GMT
Subject: CN=c853bc563ea5944ba84e74c94f1f314e826d3839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:83:22:84:78:39:9d:03:14:d6:17:02:0b:
71:fa:6e:44:d1:da:98:15:53:30:36:be:6b:45:5b:
28:2e:64:f6:fa:e2:d0:4c:53:8c:23:dc:bf:a6:86:
a1:1c:ca:87:20:d3:fc:c5:79:c1:93:c6:5d:74:c6:
c8:70:59:d1:59:c2:e1:d7:5c:2a:5b:bb:15:17:75:
6f:7a:e7:09:a2:df:96:b8:d7:66:f1:4c:5c:dd:8c:
1b:de:ed:51:ef:52:79:f1:92:30:94:d0:9e:d8:0b:
d7:6a:7c:3e:6f:4e:82:5e:1b:90:c3:ee:48:42:a5:
4c:82:aa:de:5e:0a:42:e2:6a:50:fd:08:19:f0:07:
bc:75:fa:80:14:af:13:1d:39:2a:ae:45:b5:ac:f3:
c7:4b:b8:4b:e1:fc:9a:33:7d:73:cf:07:00:b6:ed:
35:cb:cf:7c:68:40:b8:d4:7d:22:f2:49:74:96:2d:
65:7f:55:4e:67:cb:37:ba:f7:c6:01:27:d8:04:e5:
21:4f:de:b9:8f:08:fb:c6:1d:06:b2:7e:3e:9b:c3:
52:58:07:a1:25:c3:d9:ca:f3:09:64:81:6c:f6:2e:
44:1a:8a:c4:87:56:b5:8c:7f:c6:0d:9f:80:8d:e1:
73:0b:87:ad:30:5f:29:7a:81:e0:7a:88:1c:54:f3:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:53:BC:56:3E:A5:94:4B:A8:4E:74:C9:4F:1F:31:4E:82:6D:38:39
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7f:7c:70:cb:54:1c:98:5a:bf:7c:4b:2c:5f:ee:fd:b5:e4:
a9:72:0d:e6:42:31:cb:4a:1e:3e:e5:de:11:0d:c4:a3:61:3d:
29:11:4c:60:fa:1d:a2:19:90:a1:14:1d:6e:32:c9:89:fe:86:
25:cb:56:b8:92:24:a0:ab:ea:a6:51:07:e5:72:05:ca:f7:68:
79:9e:d5:5b:5d:34:c2:5c:8f:1d:35:90:e8:1d:ae:51:60:5e:
90:1c:94:2f:b3:fc:60:11:4f:9e:6c:46:5e:15:3e:fd:c8:dd:
c4:79:5a:a2:13:e4:c5:40:b7:17:5d:ec:8a:5d:8d:ee:9d:62:
53:e1:66:2a:d0:52:af:20:0f:c3:34:45:a1:1d:f8:c9:ee:9a:
4e:1c:e6:08:7c:06:dd:bb:d6:ac:34:73:18:9a:9c:70:a1:c6:
ab:f2:f0:49:50:8f:b4:3a:a3:69:42:2e:a7:5f:f0:76:06:7a:
d7:bd:33:64:14:97:cf:14:25:38:91:c1:0d:bd:38:3b:13:27:
4f:17:4b:74:89:36:1e:da:9d:05:d8:b9:60:b9:bf:9b:32:b1:
c5:2f:7f:2f:9b:3f:8f:c6:55:4b:e2:34:57:56:8f:b9:1d:9d:
b7:24:9a:85:a9:2d:71:b9:63:3f:99:25:d2:26:87:0d:da:b2:
73:f9:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:21:07 2025 by rpki-client