Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File: wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier: oTh6kHFFifra7t5Ubv4OFq2hIj76+fUcght7pu8b7Oc=
Subject key identifier: 64:33:74:1C:6B:68:E0:9F:F5:15:B9:B5:91:B8:6B:AA:F5:6B:4B:57
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 0199FC58294292073E9F437CAA6153AE37C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number: 1733
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: KML_hA1pizVhEIN7f877pA6o17I.roa (hash: mPt9GeV0y8ENs4Lz1UL4Oj0gaP0ztnD/yr/Nmb/aj0I=)
2: UUfu95Auivxvbsa7i57178Y2ltM.roa (hash: jFwsCOA5Al7+HGdTwINvFII4nowICJNXPZ21CgfKF54=)
3: bk8bvaCKGh2nGwQX4sd5eWPAY_E.roa (hash: Oyv6e+rWeKuFbdE0+T91WAKyRu15r6MOTTHhVcE1hlg=)
4: iFbYnGs7Q9C9t4JGs8FC0ZymsVY.roa (hash: hx8Edg6PVaBQ6FwoxG19s/wh8IcglMW+NEHUNHseRy0=)
5: j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa (hash: 8PbOwRCb12J1Sy0cdVXGjrVVbnIpBxcT9Ys7VYDlJhM=)
6: kTo0w9ANmlvRAqwEfAOqJPK5HLk.roa (hash: ma1SlWgY7s3fuIJWEMEuFwG0D2BUJyIo28TPPjVIKtc=)
7: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: 0Jc4X+3DJhsy6EJDq3WbE21yhUXS5zd2WxmDV/BglTM=)
8: x6WyfN8IVN62gZgewVASQApkl9g.roa (hash: LBcsH6w2HcXVpYRUhZBSvo3mG6uWjn8TOTZsgX0iRl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:29:42:92:07:3e:9f:43:7c:aa:61:53:ae:37:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=6433741c6b68e09ff515b9b591b86baaf56b4b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:ff:1c:35:60:4c:22:41:a5:2f:26:9c:02:
d4:b5:f2:be:18:8d:c0:23:af:b7:0e:9b:9e:71:f2:
b9:12:30:d0:b9:cb:92:25:ce:d8:2c:fe:d8:89:2e:
43:2e:ce:5e:b6:80:04:39:85:cb:5d:12:c8:01:29:
b7:d9:8c:e7:9d:1b:58:c7:11:6d:a0:12:13:b8:05:
dc:dc:06:8a:07:21:c9:db:0c:c1:76:5b:84:a5:b2:
60:df:d9:77:4f:1a:af:58:ed:29:38:0f:75:6a:64:
cf:82:20:76:af:8a:01:59:c7:02:eb:f3:db:26:b7:
05:76:37:3c:6d:12:74:f4:7a:59:0e:c9:f5:5f:a1:
9c:5c:9f:ba:11:dc:67:04:69:bd:3e:04:6e:f4:5a:
41:5c:0f:04:0c:ca:62:37:e4:b8:81:a2:1f:77:8c:
83:f6:a4:63:8c:a8:cb:6a:f0:46:2a:84:fd:b5:ae:
81:61:3a:fb:ee:23:48:28:32:a7:7c:c8:3f:21:dd:
75:67:72:f9:16:b7:9a:5c:5a:42:0c:52:b6:b5:3b:
54:71:d8:bb:30:bc:eb:b5:de:06:5e:6c:95:c4:25:
4e:a3:37:38:1b:43:b3:7c:60:d8:3b:78:a4:e8:0f:
ad:d9:94:7f:56:69:28:eb:28:8d:95:ac:03:b5:84:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:33:74:1C:6B:68:E0:9F:F5:15:B9:B5:91:B8:6B:AA:F5:6B:4B:57
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:53:41:db:df:76:48:58:be:7a:57:98:86:aa:e8:16:67:b9:
18:ed:4c:50:ec:4d:fd:cd:d2:6f:8b:ab:e2:1e:50:00:c3:84:
f4:98:a3:bc:4a:7e:8b:96:44:cd:05:bb:f0:11:ac:1f:35:a5:
07:f4:ff:f9:3b:d1:98:dc:87:01:9b:42:39:cc:a4:1b:e3:1b:
b1:b7:bf:4d:3d:05:d4:d4:51:18:3e:5b:73:79:ab:6f:db:a3:
ad:e1:8e:6b:79:52:15:74:91:ff:60:a8:83:8f:0c:c5:7a:f6:
06:91:d7:33:a8:1f:a3:09:a7:1d:5b:4d:31:98:56:df:f9:ce:
5a:c7:8e:27:64:38:09:86:31:94:e1:d4:ed:10:88:40:da:40:
a1:50:64:23:7d:85:e7:8e:ad:4f:e7:9d:02:2b:6e:dd:2a:5c:
59:1d:fb:bf:d1:c2:67:7a:0d:99:ef:7a:60:03:31:41:0f:2f:
a7:81:5d:16:bc:4c:b4:5a:cb:03:3a:81:33:58:04:dd:3e:a3:
4f:68:44:3e:58:4e:aa:da:3b:83:78:34:7f:5c:9c:bb:9c:ef:
f4:a8:e1:ef:ae:a5:fa:10:ba:ba:d5:e3:9e:ab:8b:3e:0c:18:
82:f4:50:32:de:38:8f:5d:f0:fa:a6:59:70:7e:ba:9a:d1:a4:
95:9c:f9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:33 2025 by rpki-client