Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File: wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier: DyY6+5MVv5/AYccYJTg9tgSdjnP1BNh0VO40n/HFN14=
Subject key identifier: 7E:40:D1:7D:0D:59:B9:87:6B:35:24:A6:4F:66:EB:0E:DE:7A:11:98
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 0197B8FD1A59626F5B3D5B297F3D6673A2D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number: 1607
Signing time: Sun 29 Jun 2025 00:01:24 +0000
Manifest this update: Sun 29 Jun 2025 00:01:24 +0000
Manifest next update: Mon 30 Jun 2025 00:01:24 +0000
Files and hashes: 1: KML_hA1pizVhEIN7f877pA6o17I.roa (hash: mPt9GeV0y8ENs4Lz1UL4Oj0gaP0ztnD/yr/Nmb/aj0I=)
2: UUfu95Auivxvbsa7i57178Y2ltM.roa (hash: jFwsCOA5Al7+HGdTwINvFII4nowICJNXPZ21CgfKF54=)
3: bk8bvaCKGh2nGwQX4sd5eWPAY_E.roa (hash: Oyv6e+rWeKuFbdE0+T91WAKyRu15r6MOTTHhVcE1hlg=)
4: iFbYnGs7Q9C9t4JGs8FC0ZymsVY.roa (hash: hx8Edg6PVaBQ6FwoxG19s/wh8IcglMW+NEHUNHseRy0=)
5: j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa (hash: 8PbOwRCb12J1Sy0cdVXGjrVVbnIpBxcT9Ys7VYDlJhM=)
6: kTo0w9ANmlvRAqwEfAOqJPK5HLk.roa (hash: ma1SlWgY7s3fuIJWEMEuFwG0D2BUJyIo28TPPjVIKtc=)
7: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: OGAGW/be9C8KFNZw8TYclMxgltym6F5/Gg6iTowoHXk=)
8: x6WyfN8IVN62gZgewVASQApkl9g.roa (hash: LBcsH6w2HcXVpYRUhZBSvo3mG6uWjn8TOTZsgX0iRl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:1a:59:62:6f:5b:3d:5b:29:7f:3d:66:73:a2:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Jun 29 00:01:24 2025 GMT
Not After : Jun 30 00:01:24 2025 GMT
Subject: CN=7e40d17d0d59b9876b3524a64f66eb0ede7a1198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:35:8e:52:b5:fa:a4:4a:ae:69:a0:93:41:
92:7c:33:aa:cd:68:c1:00:d4:3c:cc:d9:5d:3f:d0:
fb:50:55:40:b5:12:3c:87:78:2b:a4:ab:f9:3d:3f:
03:56:61:3d:c9:ee:44:3f:1c:0f:e5:a8:30:58:bc:
55:f8:18:d6:ee:c5:e9:6a:f4:a6:03:f8:ca:bc:db:
b7:18:84:4f:fc:7e:23:9e:ef:27:6a:5c:cf:21:07:
03:1b:19:94:e3:93:06:28:82:94:04:9a:15:e6:3d:
02:74:fa:3e:86:46:04:b0:fe:13:07:2d:78:ed:45:
0f:4f:26:69:21:07:8f:06:36:4f:be:1b:a3:b0:37:
30:1a:6a:64:b1:9b:dd:1f:ad:26:56:47:57:1e:c4:
98:f7:e3:1d:1f:68:9f:31:df:6d:64:94:fd:d9:9e:
d9:59:a3:2b:3a:65:00:f9:69:a1:18:9f:7f:ff:24:
eb:20:f9:cb:0c:ee:49:6e:a4:ef:b5:1d:5f:a0:8a:
1e:5e:b1:95:0d:ec:c0:8b:8f:44:0c:73:e9:cb:9e:
58:6c:57:d0:25:f3:f5:c5:fb:59:14:5b:9d:c9:0e:
6f:54:33:c4:56:99:f1:f7:92:fb:65:ac:10:0b:db:
4f:f4:64:1e:cf:e5:2b:13:14:47:ee:23:b3:39:8b:
8a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:40:D1:7D:0D:59:B9:87:6B:35:24:A6:4F:66:EB:0E:DE:7A:11:98
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:9d:8d:76:1d:aa:b5:96:96:a4:8d:bf:5d:76:c4:0c:8e:a9:
54:e4:37:4e:bd:e1:fe:2d:81:7c:f2:73:71:da:66:4b:60:89:
f5:0b:66:47:65:4b:89:3d:27:d8:8f:a8:38:eb:62:ba:9f:00:
fa:40:0a:30:71:32:c5:17:87:26:5c:fc:66:e3:12:6f:78:75:
b9:5c:60:15:68:1a:3e:c6:b0:5d:8a:2b:59:b2:dd:21:65:3e:
ce:32:69:c1:78:a6:f4:d1:29:5c:0f:c5:e1:b8:ac:bf:42:68:
03:8e:9c:b7:1b:a3:70:a9:be:f2:d3:2d:a0:d7:fb:2d:a6:58:
bc:4f:e2:48:8b:94:55:bb:3e:fd:8d:98:76:e2:d4:d4:ef:db:
56:3d:0a:27:e6:1d:9f:24:47:a3:4e:fd:47:aa:9f:9f:02:c3:
54:09:46:84:4a:05:a2:72:02:65:90:10:09:47:a9:4c:8a:c4:
39:58:7e:75:23:6d:45:23:0b:60:89:89:0e:d9:35:24:70:a6:
57:d9:cb:c2:77:a7:0b:28:f9:88:3a:1b:fc:c3:fa:46:8d:e0:
b1:99:8c:5b:e4:b7:d3:cc:6e:73:9f:a2:5d:43:82:56:3a:e7:
8c:19:1e:0c:33:53:e1:1b:bd:c8:f4:d3:7a:fa:ce:af:48:14:
ea:72:c2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:03 2025 by rpki-client