Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
File: W5WpStrToolscgdNZnwbYgdZWMs.mft (raw, json)
Hash identifier: rWEAvDzQZb+ZQ4xxty/RAXNfo9T/zDGQUtEEiazOs5M=
Subject key identifier: 93:8D:C9:5E:35:45:E6:70:23:20:9C:77:A9:CA:ED:90:6C:60:DA:F1
Authority key identifier: 5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB
Certificate issuer: /CN=5b95a94adad3a2896c72074d667c1b62075958cb
Certificate serial: 0197B88F014F56980C37B24C1CD00C11CFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
Manifest number: 0E7A
Signing time: Sat 28 Jun 2025 22:01:08 +0000
Manifest this update: Sat 28 Jun 2025 22:01:08 +0000
Manifest next update: Sun 29 Jun 2025 22:01:08 +0000
Files and hashes: 1: STQhTVEdoeGn3LGRCtz_IFAHWdM.roa (hash: lJA+P3xzpJoE/23kp+QFPprWwo01m1U/nvmFZ+Rh2tE=)
2: W5WpStrToolscgdNZnwbYgdZWMs.crl (hash: AWsR/Wv9jFC/NoaGnx9h0VBjMjVRkQRNsry9UCNUjDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:01:4f:56:98:0c:37:b2:4c:1c:d0:0c:11:cf:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b95a94adad3a2896c72074d667c1b62075958cb
Validity
Not Before: Jun 28 22:01:08 2025 GMT
Not After : Jun 29 22:01:08 2025 GMT
Subject: CN=938dc95e3545e67023209c77a9caed906c60daf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:ec:6c:6e:a1:74:27:dc:58:12:03:88:85:
70:93:ba:ab:48:f3:0e:bb:27:94:59:72:c0:23:09:
1a:a2:bf:87:56:e3:69:bd:1d:ec:eb:e3:b0:c8:40:
dd:63:71:0a:66:e7:2b:f0:f4:8f:3d:db:b0:7c:23:
96:05:1d:4c:7f:98:dc:91:5c:8f:16:43:38:4a:41:
6a:19:73:9b:b9:ca:ec:44:09:5b:62:56:2e:eb:7a:
cf:30:9a:0f:32:73:65:5f:63:77:fa:0a:6f:e5:b1:
9f:ff:5d:27:7e:8a:c3:3a:3f:a4:97:d7:d0:c6:7e:
86:7f:5b:8a:82:58:d3:d0:31:14:39:37:84:c8:32:
4b:80:87:69:24:44:3a:75:a5:3c:fd:a5:02:d9:31:
7a:3b:40:cf:73:d2:f0:45:ad:16:59:0d:43:d7:31:
70:fc:f5:e8:28:a4:8b:ba:24:b4:db:e6:95:be:dd:
19:f6:57:48:b5:9f:dc:4a:da:06:41:14:db:60:d3:
1d:43:0c:97:1b:ca:eb:d5:cd:e2:df:2c:08:e4:85:
2f:e5:4b:ef:a1:46:81:e3:a7:48:a6:7f:62:dd:1b:
ee:e8:d7:96:43:cb:ae:4c:ed:5f:81:b0:71:a0:5e:
81:ba:cc:4c:73:01:c0:e8:8e:79:b2:3e:e2:e1:9f:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8D:C9:5E:35:45:E6:70:23:20:9C:77:A9:CA:ED:90:6C:60:DA:F1
X509v3 Authority Key Identifier:
keyid:5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:97:cb:88:65:df:69:99:3f:33:ad:35:e8:82:e5:c2:00:17:
8a:94:27:1e:99:37:ed:47:48:70:32:ae:62:87:ee:c3:6e:c6:
aa:fd:04:12:22:38:47:90:57:97:9b:f1:02:97:9e:31:85:a5:
6b:f3:ec:bd:2e:a8:13:43:2d:9b:d9:d7:93:f7:44:f3:a1:0a:
a3:c6:ef:33:b3:25:ca:50:50:07:46:a1:a7:4b:f2:2a:f4:53:
20:57:e1:53:85:3d:70:ec:b6:d0:02:4e:f3:d3:2a:77:44:4b:
95:9b:37:c7:08:27:e2:9a:b5:09:4a:0a:c4:e4:c2:d0:ca:74:
ec:46:da:00:47:f6:80:ef:83:ed:3d:4b:06:6f:1f:08:65:68:
46:db:20:aa:ec:f4:1d:a6:61:8e:92:aa:24:d0:2c:00:d0:84:
c5:4e:49:45:a0:b4:66:4a:4c:ca:2b:7e:c0:30:ca:8e:ff:90:
ba:e1:4b:76:4d:61:de:10:94:9d:46:81:aa:89:66:27:85:00:
02:4a:d3:9b:64:1a:d2:6d:df:09:12:c7:36:4e:3c:ba:6f:15:
f3:36:7d:d2:83:f8:4d:6d:40:fe:45:c0:99:12:03:da:8f:ce:
c4:bc:cb:d7:4f:91:c9:52:99:66:fb:c9:7b:53:0a:da:12:c7:
a5:f2:56:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:49 2025 by rpki-client