Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File: wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier: GEA6g4LaEuJ+gB9QMTE9vyPlzzzSJgcH8OSrxbAASHQ=
Subject key identifier: 49:3F:A6:61:20:D0:5B:10:F6:C3:02:BA:78:28:4D:9D:64:06:1B:1F
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 0198D4E08584BB7E12CA0E65AE28FE0E2E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number: 169A
Signing time: Sat 23 Aug 2025 03:02:20 +0000
Manifest this update: Sat 23 Aug 2025 03:02:20 +0000
Manifest next update: Sun 24 Aug 2025 03:02:20 +0000
Files and hashes: 1: KML_hA1pizVhEIN7f877pA6o17I.roa (hash: mPt9GeV0y8ENs4Lz1UL4Oj0gaP0ztnD/yr/Nmb/aj0I=)
2: UUfu95Auivxvbsa7i57178Y2ltM.roa (hash: jFwsCOA5Al7+HGdTwINvFII4nowICJNXPZ21CgfKF54=)
3: bk8bvaCKGh2nGwQX4sd5eWPAY_E.roa (hash: Oyv6e+rWeKuFbdE0+T91WAKyRu15r6MOTTHhVcE1hlg=)
4: iFbYnGs7Q9C9t4JGs8FC0ZymsVY.roa (hash: hx8Edg6PVaBQ6FwoxG19s/wh8IcglMW+NEHUNHseRy0=)
5: j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa (hash: 8PbOwRCb12J1Sy0cdVXGjrVVbnIpBxcT9Ys7VYDlJhM=)
6: kTo0w9ANmlvRAqwEfAOqJPK5HLk.roa (hash: ma1SlWgY7s3fuIJWEMEuFwG0D2BUJyIo28TPPjVIKtc=)
7: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: sdbmHNvzSOb4mCo2WvL1CTFL1/hi4BKinKuAjLoz/z8=)
8: x6WyfN8IVN62gZgewVASQApkl9g.roa (hash: LBcsH6w2HcXVpYRUhZBSvo3mG6uWjn8TOTZsgX0iRl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:85:84:bb:7e:12:ca:0e:65:ae:28:fe:0e:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Aug 23 03:02:20 2025 GMT
Not After : Aug 24 03:02:20 2025 GMT
Subject: CN=493fa66120d05b10f6c302ba78284d9d64061b1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:6c:e4:6b:be:ae:bf:0b:ba:4c:b2:b3:19:
09:cb:5b:7a:d2:92:84:3f:ac:f4:60:6e:84:f7:26:
c8:fd:71:10:d7:80:11:86:b3:aa:ec:3f:9e:6a:84:
70:0a:5e:94:f5:78:0a:40:f3:05:3d:76:60:fd:ca:
f5:29:25:30:ac:a1:ee:0a:a1:43:e1:bc:66:c6:b2:
f7:b0:5c:fe:93:5d:03:93:72:39:59:9e:ac:3f:e5:
53:aa:b0:f7:48:2f:bc:2d:81:64:4b:2a:36:8a:6b:
48:4e:1b:54:66:fd:05:53:74:2d:2a:24:f9:59:6f:
8b:4f:8e:b7:5d:e9:37:25:b4:87:cc:23:06:de:76:
b7:e6:08:a8:df:12:f6:19:55:6a:52:78:ca:a8:14:
f0:f0:2f:f7:4b:91:81:a3:10:d2:75:62:09:b8:d3:
1d:58:e1:cb:37:89:3c:ce:02:01:58:8d:71:45:ce:
c7:32:37:ce:aa:21:3b:2f:f9:3e:15:16:19:ef:11:
2e:de:da:61:0a:a3:2e:c2:ff:c1:80:1c:2e:20:12:
f5:8d:9d:1c:7c:5e:4e:4e:90:b8:d2:88:94:97:f0:
b8:22:60:3f:1d:e7:42:27:bd:dc:05:14:55:11:9b:
59:63:14:f5:9c:5c:bb:3f:8e:49:9e:51:36:8f:87:
5b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3F:A6:61:20:D0:5B:10:F6:C3:02:BA:78:28:4D:9D:64:06:1B:1F
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:07:f6:85:db:c0:48:0c:91:d5:70:89:ba:8d:23:db:25:34:
43:38:ff:bb:4d:17:8c:e9:09:7d:48:94:25:1f:9c:52:cd:4d:
25:3c:52:e7:09:32:b9:2b:34:22:1b:0e:a7:3b:63:43:d7:2a:
ff:61:bb:08:ff:02:c9:f3:54:cb:c8:4c:0b:3d:4e:49:e4:54:
e4:83:64:81:dd:72:62:c2:1a:c8:1f:df:09:89:01:0a:fd:3d:
ec:0a:1a:92:87:04:90:05:b0:43:a8:ec:0c:11:5f:e8:b1:d7:
c9:af:fc:92:00:8b:79:02:fd:08:0a:95:13:e3:3f:58:b6:7f:
16:90:bc:36:bb:69:af:e9:a9:e9:a3:2c:08:5c:3f:4d:c3:fb:
b6:3f:93:9b:15:bc:64:a9:4c:5d:53:b7:2a:83:29:06:77:39:
88:90:04:cc:6d:7c:6d:16:59:61:5f:c7:e8:3e:2c:8c:91:66:
4b:cf:65:8e:50:2e:6a:4e:b5:6c:01:3d:cd:26:92:6c:7b:11:
61:da:3f:c6:03:d0:a0:a1:92:3a:d5:02:c0:24:42:f4:bf:ac:
52:b1:1a:f2:4e:22:6e:b7:49:37:a7:96:b5:22:98:e0:00:c8:
45:71:0d:4b:65:29:b6:93:9d:64:7d:1a:3d:39:6a:b2:6b:7b:
d1:75:82:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:41 2025 by rpki-client