Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
File: W5WpStrToolscgdNZnwbYgdZWMs.mft (raw, json)
Hash identifier: EfN56x4HG2BW7sIA/kOLpubW0rugBoX7T0GpsE+aJ+s=
Subject key identifier: 4E:25:D4:7E:A1:45:32:7E:5B:61:70:98:F2:57:60:3D:C5:8F:54:6C
Authority key identifier: 5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB
Certificate issuer: /CN=5b95a94adad3a2896c72074d667c1b62075958cb
Certificate serial: 0196C7288175D6BEC4B77127EE6825F7A85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
Manifest number: 0DFD
Signing time: Tue 13 May 2025 01:00:42 +0000
Manifest this update: Tue 13 May 2025 01:00:42 +0000
Manifest next update: Wed 14 May 2025 01:00:42 +0000
Files and hashes: 1: STQhTVEdoeGn3LGRCtz_IFAHWdM.roa (hash: lJA+P3xzpJoE/23kp+QFPprWwo01m1U/nvmFZ+Rh2tE=)
2: W5WpStrToolscgdNZnwbYgdZWMs.crl (hash: 7MDqQ1kAeoKIVRLwB8pXTJMHYsDe7OVeJQTNHrA53ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:28:81:75:d6:be:c4:b7:71:27:ee:68:25:f7:a8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b95a94adad3a2896c72074d667c1b62075958cb
Validity
Not Before: May 13 01:00:42 2025 GMT
Not After : May 14 01:00:42 2025 GMT
Subject: CN=4e25d47ea145327e5b617098f257603dc58f546c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ce:e9:d0:95:77:5e:7e:c8:80:be:36:3c:b1:
ae:d9:1c:d4:a9:09:54:77:eb:be:a9:d1:72:35:39:
2c:e4:13:9d:86:4e:25:d1:b9:d0:07:88:92:2f:cf:
e8:91:67:f0:b2:58:33:d2:0b:16:e2:0f:4a:a9:82:
cb:6d:e9:78:81:63:4c:36:cb:09:c7:4b:d1:ac:e6:
b8:c4:14:d5:69:48:1d:bc:3e:55:b6:a2:62:b1:17:
57:40:81:6a:93:9b:28:a7:2c:07:4b:0c:55:b8:f1:
bb:c4:76:2b:e0:ed:bd:76:a5:25:eb:14:b3:e7:3e:
69:95:c4:36:db:e2:f5:f8:4c:6a:e7:6b:66:eb:85:
5e:e6:99:bc:bf:7c:d9:8b:79:b9:8a:2a:8b:92:9c:
0c:f8:dd:74:d3:24:9d:b8:7e:73:7d:c5:52:e6:0d:
6f:ad:05:b9:cd:98:4d:07:c3:ae:43:77:88:03:9c:
5c:fc:74:66:a9:c4:84:bd:c4:27:36:04:47:fd:35:
52:03:05:ee:b6:41:09:79:78:5c:c4:a8:04:06:d5:
3f:dc:c4:52:de:7c:eb:bc:ac:4a:b0:47:16:36:04:
93:15:66:e1:df:42:0f:a7:70:dc:df:70:fa:87:0e:
8a:14:3a:d1:b1:00:74:eb:21:19:6c:d6:3b:c9:94:
37:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:25:D4:7E:A1:45:32:7E:5B:61:70:98:F2:57:60:3D:C5:8F:54:6C
X509v3 Authority Key Identifier:
keyid:5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8f:f5:6b:99:76:78:47:aa:2b:6d:22:22:8b:2d:47:3a:aa:
82:04:57:ae:6c:5e:39:26:a6:02:39:83:a2:1a:55:9e:7f:ed:
20:ad:05:cc:33:ba:30:ad:a5:0b:72:af:7b:05:bf:52:43:48:
b8:2d:67:eb:95:e1:33:d3:9a:3c:f2:eb:7e:4d:1d:ea:08:91:
a9:4b:ba:4c:c7:ea:68:f2:d9:15:45:68:20:6c:07:d5:f5:5b:
b4:39:05:2a:92:bd:35:ac:20:fd:5c:8d:79:9f:7b:5c:8d:f9:
7a:b1:5f:46:9d:d5:c9:9a:7c:9d:55:0d:a8:6c:bd:e8:d0:2f:
23:c9:c7:44:29:f6:49:0e:df:56:38:f4:f3:48:25:f7:0f:9a:
b8:b7:7c:18:47:05:71:1c:2d:36:6c:b1:e2:ba:f2:2d:04:2c:
d2:de:b3:73:fc:e9:2f:e8:62:d1:50:be:c4:0b:36:b7:17:f7:
8c:12:8f:e1:58:c2:0b:a1:f5:0f:04:39:73:0e:fb:da:78:0c:
be:60:c4:c7:49:43:1f:1f:f3:bb:82:54:e7:84:61:65:28:81:
5d:a4:9d:a0:03:4a:66:fd:e9:2a:ad:7a:69:f2:6c:53:2e:68:
05:db:5a:3c:b3:55:6e:de:c4:d6:c5:b0:be:05:d1:08:6e:14:
57:55:94:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbHKIF11r7Et3En7mgl96hdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOTVhOTRhZGFkM2EyODk2YzcyMDc0ZDY2N2MxYjYyMDc1
OTU4Y2IwHhcNMjUwNTEzMDEwMDQyWhcNMjUwNTE0MDEwMDQyWjAzMTEwLwYDVQQD
Eyg0ZTI1ZDQ3ZWExNDUzMjdlNWI2MTcwOThmMjU3NjAzZGM1OGY1NDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlc7p0JV3Xn7IgL42PLGu2RzUqQlU
d+u+qdFyNTks5BOdhk4l0bnQB4iSL8/okWfwslgz0gsW4g9KqYLLbel4gWNMNssJ
x0vRrOa4xBTVaUgdvD5VtqJisRdXQIFqk5sopywHSwxVuPG7xHYr4O29dqUl6xSz
5z5plcQ22+L1+Exq52tm64Ve5pm8v3zZi3m5iiqLkpwM+N100ySduH5zfcVS5g1v
rQW5zZhNB8OuQ3eIA5xc/HRmqcSEvcQnNgRH/TVSAwXutkEJeXhcxKgEBtU/3MRS
3nzrvKxKsEcWNgSTFWbh30IPp3Dc33D6hw6KFDrRsQB06yEZbNY7yZQ3wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4l1H6hRTJ+W2FwmPJXYD3Fj1RsMB8GA1UdIwQY
MBaAFFuVqUra06KJbHIHTWZ8G2IHWVjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84Mzk5MjUtMTU1NS00ZmY2LWJjNDYt
N2ZlYWI0OGVlZTYxLzEvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84Mzk5MjUtMTU1NS00ZmY2LWJjNDYtN2ZlYWI0OGVlZTYx
LzEvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHo/1a5l2
eEeqK20iIostRzqqggRXrmxeOSamAjmDohpVnn/tIK0FzDO6MK2lC3KvewW/UkNI
uC1n65XhM9OaPPLrfk0d6giRqUu6TMfqaPLZFUVoIGwH1fVbtDkFKpK9Nawg/VyN
eZ97XI35erFfRp3VyZp8nVUNqGy96NAvI8nHRCn2SQ7fVjj080gl9w+auLd8GEcF
cRwtNmyx4rryLQQs0t6zc/zpL+hi0VC+xAs2txf3jBKP4VjCC6H1DwQ5cw772ngM
vmDEx0lDHx/zu4JU54RhZSiBXaSdoANKZv3pKq16afJsUy5oBdtaPLNVbt7E1sWw
vgXRCG4UV1WUdw==
-----END CERTIFICATE-----
Generated at Tue May 13 08:07:14 2025 by rpki-client