Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
File: W5WpStrToolscgdNZnwbYgdZWMs.mft (raw, json)
Hash identifier: +Fuy2W+9bCGqvRlamtyH10wv1plPfW/oZUTKxvwp/Rg=
Subject key identifier: 7C:DC:F1:DD:80:F0:C9:37:9D:36:D2:85:D5:9E:10:17:B7:B5:B0:83
Authority key identifier: 5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB
Certificate issuer: /CN=5b95a94adad3a2896c72074d667c1b62075958cb
Certificate serial: 0199FBEB5929A8CF61058495E99481CB0DD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
Manifest number: 0FA6
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: STQhTVEdoeGn3LGRCtz_IFAHWdM.roa (hash: lJA+P3xzpJoE/23kp+QFPprWwo01m1U/nvmFZ+Rh2tE=)
2: W5WpStrToolscgdNZnwbYgdZWMs.crl (hash: irHeamRsnqlKbib0f70yu1MJjVmH9ipkurAU8KvtG3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:59:29:a8:cf:61:05:84:95:e9:94:81:cb:0d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b95a94adad3a2896c72074d667c1b62075958cb
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=7cdcf1dd80f0c9379d36d285d59e1017b7b5b083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:f1:76:c8:04:a1:18:95:b1:45:8f:ba:38:
a0:63:de:8c:33:f3:a3:0e:35:1d:67:5a:65:3f:dc:
fa:07:a6:85:74:09:3b:2d:dd:4f:6c:f5:06:b1:7a:
da:42:9a:d1:80:e4:0b:3a:44:35:82:08:86:3d:2d:
7c:82:a3:d4:64:8e:b2:c2:ac:4e:0d:18:99:e7:c6:
20:0c:98:ff:95:37:af:84:19:30:66:bf:91:c6:32:
56:f0:fc:31:79:b7:02:bc:48:82:58:dc:55:18:3d:
39:53:24:5c:b5:4f:ed:3e:b3:92:f8:e5:d6:f5:6a:
f5:00:e9:c2:d4:0b:ac:8d:a4:b0:6f:5a:f2:dc:3a:
b9:f1:10:a2:f2:a8:7b:a7:01:ae:cb:aa:0c:57:f1:
27:09:2d:6f:03:3c:92:eb:38:ad:0d:10:eb:93:9d:
d1:53:b9:44:fb:f5:e2:59:f2:64:7c:1b:bf:f7:69:
00:c4:01:4e:1c:76:20:57:35:51:0c:5e:e8:58:27:
05:7c:97:43:82:90:ac:4a:7b:dc:dd:2e:bc:c5:ac:
d6:28:ef:76:50:79:ea:19:98:e5:4b:6b:f2:80:ab:
da:bf:c9:ea:2c:94:04:70:9a:cc:75:79:f3:ac:c9:
1c:ad:01:80:b5:da:c8:1c:3a:f1:85:bd:5b:b0:6c:
63:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DC:F1:DD:80:F0:C9:37:9D:36:D2:85:D5:9E:10:17:B7:B5:B0:83
X509v3 Authority Key Identifier:
keyid:5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:44:10:63:00:f0:2b:c4:2a:3a:c1:11:27:99:dd:5e:77:15:
85:88:e6:85:65:ad:06:99:62:c4:04:f4:54:5f:b3:5b:4e:88:
75:49:62:f8:fc:cd:fb:2b:30:df:46:5f:7d:60:fa:ba:c6:fd:
a7:42:74:f0:f4:07:95:90:9a:b7:68:fe:82:24:ca:0e:b1:af:
50:a1:d1:c1:f5:fb:37:c0:c3:fb:cd:06:52:a2:b4:a4:00:11:
f6:8d:79:4b:09:d7:45:8a:a9:86:87:18:3d:f6:58:ec:8a:34:
b4:08:2f:c0:7c:1a:5a:3b:ef:33:52:da:dc:3e:2d:e5:f9:ba:
0c:da:90:d1:8e:9c:a5:5b:d9:55:09:2f:4d:10:aa:47:ac:13:
92:b1:46:81:cb:36:db:62:d6:c5:33:44:a9:8c:db:6a:0c:46:
64:d0:91:cf:1a:60:9c:38:9a:50:93:aa:0b:11:8e:6d:67:27:
3a:7b:4a:73:ab:5b:94:15:11:19:0f:57:18:c9:ed:e6:22:5d:
48:a0:62:72:6c:0a:7a:6a:49:ee:b2:ec:30:28:d0:57:e6:bb:
05:69:10:14:a3:d7:f7:e3:15:f5:26:93:a1:a0:7e:10:5d:d6:
ed:43:fc:f3:4d:5d:e7:31:e5:43:24:17:22:9c:f2:8e:48:19:
54:5e:5a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:49 2025 by rpki-client