Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File: wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier: YSRZjkENYTu12pB5ct4gEL9lQqwEX1wcw1biWJnl5eo=
Subject key identifier: DF:59:B3:3E:0B:63:27:01:7F:25:5A:AF:AF:CC:A4:CD:67:BA:F9:8C
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 01964443DA5E2D87BD7B12966E42E00A4718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number: 1546
Signing time: Thu 17 Apr 2025 15:00:19 +0000
Manifest this update: Thu 17 Apr 2025 15:00:19 +0000
Manifest next update: Fri 18 Apr 2025 15:00:19 +0000
Files and hashes: 1: KML_hA1pizVhEIN7f877pA6o17I.roa (hash: mPt9GeV0y8ENs4Lz1UL4Oj0gaP0ztnD/yr/Nmb/aj0I=)
2: UUfu95Auivxvbsa7i57178Y2ltM.roa (hash: jFwsCOA5Al7+HGdTwINvFII4nowICJNXPZ21CgfKF54=)
3: bk8bvaCKGh2nGwQX4sd5eWPAY_E.roa (hash: Oyv6e+rWeKuFbdE0+T91WAKyRu15r6MOTTHhVcE1hlg=)
4: iFbYnGs7Q9C9t4JGs8FC0ZymsVY.roa (hash: hx8Edg6PVaBQ6FwoxG19s/wh8IcglMW+NEHUNHseRy0=)
5: j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa (hash: 8PbOwRCb12J1Sy0cdVXGjrVVbnIpBxcT9Ys7VYDlJhM=)
6: kTo0w9ANmlvRAqwEfAOqJPK5HLk.roa (hash: ma1SlWgY7s3fuIJWEMEuFwG0D2BUJyIo28TPPjVIKtc=)
7: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: gY003E72Nes/f09dJmQ1b6lDrVefcjTCF21G6pPmhy8=)
8: x6WyfN8IVN62gZgewVASQApkl9g.roa (hash: LBcsH6w2HcXVpYRUhZBSvo3mG6uWjn8TOTZsgX0iRl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:43:da:5e:2d:87:bd:7b:12:96:6e:42:e0:0a:47:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Apr 17 15:00:19 2025 GMT
Not After : Apr 18 15:00:19 2025 GMT
Subject: CN=df59b33e0b6327017f255aafafcca4cd67baf98c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:a4:2d:51:0a:f5:f5:11:3b:e7:ae:0e:82:
61:e9:6e:1c:39:22:dc:e0:74:d4:2e:d0:0c:03:ec:
ca:f1:4b:87:de:c9:95:52:ad:6a:6e:f5:64:15:8c:
cb:66:1d:ef:38:b6:f0:8a:64:12:da:35:55:dd:d0:
fe:00:0c:9c:d5:e0:36:18:61:9d:03:eb:e5:d1:fb:
17:91:b9:0a:6a:36:55:c0:2e:04:ab:2e:c9:f1:c3:
7f:41:f3:ed:5a:82:b4:ec:ec:a8:af:ac:8c:e8:a8:
b4:03:46:a5:4f:8f:97:e8:d6:bf:4f:ab:4b:9c:0b:
af:03:3d:6a:3b:63:43:08:59:dd:2c:7a:82:bd:6d:
6b:cd:22:53:49:12:8d:47:c8:44:67:4c:e7:e0:a5:
9e:74:e8:0f:b7:e3:3f:73:6b:60:00:cc:5a:d1:de:
dd:0c:e0:24:b1:9e:a5:68:9a:b0:bc:82:bc:14:1b:
f5:3f:ba:1a:0b:0a:60:26:d5:ea:eb:15:a5:12:7f:
74:93:b9:9c:c3:50:51:85:57:1d:f4:7d:8f:34:d7:
e6:2a:52:87:bf:5d:75:79:b4:51:ae:bc:0b:c9:21:
5a:d6:6c:d7:80:79:a6:82:75:00:65:5c:2b:f3:10:
96:32:a2:4a:ea:f2:01:6b:68:90:dc:04:09:ff:c6:
b2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:B3:3E:0B:63:27:01:7F:25:5A:AF:AF:CC:A4:CD:67:BA:F9:8C
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f1:80:fa:4e:bd:eb:87:3b:88:c1:a7:35:a9:95:96:fa:3c:
5b:84:b9:0b:fb:66:f2:b0:f4:2c:bc:74:c4:df:96:31:f5:79:
3c:d1:df:50:00:d0:39:40:a1:f6:bf:a0:13:a7:c4:4f:d4:4e:
d4:bc:4b:07:70:30:fd:b3:36:8d:c5:a4:57:07:cf:67:60:fb:
36:2d:c2:3b:85:41:ee:14:51:7a:3f:77:0b:b5:86:41:08:7e:
91:ac:ff:05:ea:ec:ae:68:10:e4:99:de:b6:8c:0f:02:2c:a9:
73:1e:14:96:7c:3d:95:69:de:f0:be:98:3c:34:19:13:96:82:
8d:ad:3a:3e:2d:9c:72:df:e4:d8:f0:e6:19:d5:3e:09:61:b7:
61:cd:33:04:09:12:68:6b:64:69:08:78:dc:a8:9f:07:b7:1f:
8f:1d:89:b4:c9:46:59:a8:9c:0a:8a:df:10:ea:2b:6c:42:0e:
11:95:5c:14:78:a7:ae:9e:c9:d4:d2:2a:7e:ea:b6:dd:18:96:
ee:de:2f:f0:d0:90:2f:35:e0:cc:c3:ea:5b:fb:eb:ef:03:10:
9f:ae:fe:8a:a9:c8:5c:25:9f:7d:fa:59:c7:2e:61:19:bc:4a:
5c:ba:e2:04:02:ba:3e:49:f7:43:f5:20:60:a1:3c:b0:51:14:
c8:2b:2f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:35:34 2025 by rpki-client