Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File: wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier: yWWkH4lEf/0IrQEsAW2ZTBlaVbowPgZbzpak2qgyDtw=
Subject key identifier: 34:7E:31:A5:93:58:3D:E6:D8:1C:C2:D6:24:30:AF:14:1A:60:99:ED
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial: 019A07EDC0D7893A1948A3926D4F7B28BE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number: 1739
Signing time: Tue 21 Oct 2025 18:00:13 +0000
Manifest this update: Tue 21 Oct 2025 18:00:13 +0000
Manifest next update: Wed 22 Oct 2025 18:00:13 +0000
Files and hashes: 1: KML_hA1pizVhEIN7f877pA6o17I.roa (hash: mPt9GeV0y8ENs4Lz1UL4Oj0gaP0ztnD/yr/Nmb/aj0I=)
2: UUfu95Auivxvbsa7i57178Y2ltM.roa (hash: jFwsCOA5Al7+HGdTwINvFII4nowICJNXPZ21CgfKF54=)
3: bk8bvaCKGh2nGwQX4sd5eWPAY_E.roa (hash: Oyv6e+rWeKuFbdE0+T91WAKyRu15r6MOTTHhVcE1hlg=)
4: iFbYnGs7Q9C9t4JGs8FC0ZymsVY.roa (hash: hx8Edg6PVaBQ6FwoxG19s/wh8IcglMW+NEHUNHseRy0=)
5: j1Ed5LvHfZfExEzQ6asSeLqnEo8.roa (hash: 8PbOwRCb12J1Sy0cdVXGjrVVbnIpBxcT9Ys7VYDlJhM=)
6: kTo0w9ANmlvRAqwEfAOqJPK5HLk.roa (hash: ma1SlWgY7s3fuIJWEMEuFwG0D2BUJyIo28TPPjVIKtc=)
7: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: CoK9Oj6HLbyW7PfZsJOnWj8/jyLnUfZTxVFks5QXYco=)
8: x6WyfN8IVN62gZgewVASQApkl9g.roa (hash: LBcsH6w2HcXVpYRUhZBSvo3mG6uWjn8TOTZsgX0iRl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:ed:c0:d7:89:3a:19:48:a3:92:6d:4f:7b:28:be:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
Validity
Not Before: Oct 21 18:00:13 2025 GMT
Not After : Oct 22 18:00:13 2025 GMT
Subject: CN=347e31a593583de6d81cc2d62430af141a6099ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:cd:b7:12:fd:93:fd:ea:ac:4e:e0:68:13:
8f:0c:b3:19:14:fd:70:7f:73:47:f7:9b:67:db:ab:
8b:7a:6c:17:ff:24:c1:0c:0f:46:e6:f7:57:1b:62:
a8:ff:95:ac:89:16:19:ab:2d:c3:34:51:6d:96:7d:
ce:ac:fc:3c:c1:15:ff:6a:d5:ac:99:68:11:14:0f:
bd:e0:4e:a9:fb:1a:28:de:ae:38:18:66:5a:dc:8e:
f0:39:80:98:0e:09:0b:a5:a2:b8:44:ad:f2:57:5d:
1a:18:57:26:f5:e7:ef:bd:38:68:a5:11:21:b3:ac:
ab:3f:99:72:33:9b:8c:69:96:78:b8:35:1b:29:03:
e5:49:51:61:16:a5:5a:14:03:b5:03:8f:3e:6a:ed:
53:7a:1a:c1:1c:9a:ac:4b:65:08:5f:03:97:f8:c9:
3a:0c:4a:5f:09:12:f4:d0:84:52:43:08:06:b4:ba:
b3:21:57:ad:a8:62:b1:f8:49:a2:24:10:be:23:59:
1b:89:83:9b:a8:21:56:2a:e2:cf:36:1b:73:48:b7:
d0:e3:56:1d:13:89:59:3f:74:8c:ce:e6:9c:82:cc:
5b:05:07:37:4d:4e:9d:e7:c3:94:3c:43:76:e1:29:
5d:f0:a9:8f:b2:58:33:4b:8d:84:94:96:85:9a:75:
ce:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7E:31:A5:93:58:3D:E6:D8:1C:C2:D6:24:30:AF:14:1A:60:99:ED
X509v3 Authority Key Identifier:
keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:63:53:08:6e:06:c2:df:85:a9:65:dd:20:51:a4:ba:1d:2a:
51:d5:03:8a:32:6a:e8:c7:c3:12:a0:60:53:0f:cc:9e:22:0a:
ec:76:2d:f2:c8:c6:b8:60:7c:7a:9b:16:74:21:fb:d1:1e:c5:
cc:73:43:05:1d:4b:7c:82:6d:19:69:8a:f2:08:6f:47:92:af:
60:f4:d2:d0:38:e8:2c:2f:cd:82:6c:5b:3b:11:ae:6d:4b:80:
1a:06:23:ae:62:f2:25:5b:fc:5f:fe:3b:83:1e:42:25:d4:cd:
0e:66:60:66:ab:57:46:87:51:5f:c4:3e:0b:f3:f9:3d:44:42:
34:91:ae:60:56:8b:6c:63:d5:44:45:3a:40:56:e7:48:fe:f6:
ac:3f:4e:0a:c5:b8:89:7a:5f:c6:73:a9:98:2a:0d:d8:85:39:
7f:10:6e:ad:ec:af:61:26:18:2f:39:bd:73:89:3b:f4:35:ce:
a5:23:e9:ec:f2:ca:2d:1f:6f:0b:76:50:43:54:1f:9a:a7:a8:
ea:39:fc:22:7e:fc:ef:d2:1b:45:de:d2:bf:b1:cf:77:f4:d4:
59:19:7e:8b:3a:53:a1:f4:28:09:dc:6c:7c:6f:8e:ad:34:c2:
28:d7:e6:71:8d:a6:0e:b2:b9:cb:ad:3f:f4:c9:af:07:01:99:
aa:12:db:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:08:06 2025 by rpki-client