Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
File: W5WpStrToolscgdNZnwbYgdZWMs.mft (raw, json)
Hash identifier: T4ahiW+6ZKy+MId5H+iKjlmy3hUOZeOL032yYMq0/8A=
Subject key identifier: EE:C2:A6:63:F1:F3:20:AB:C8:61:DB:61:D9:87:7D:94:D8:EA:4B:92
Authority key identifier: 5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB
Certificate issuer: /CN=5b95a94adad3a2896c72074d667c1b62075958cb
Certificate serial: 01958C60CC70572B953898A688D9358D09FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
Manifest number: 0D5A
Signing time: Wed 12 Mar 2025 22:01:48 +0000
Manifest this update: Wed 12 Mar 2025 22:01:48 +0000
Manifest next update: Thu 13 Mar 2025 22:01:48 +0000
Files and hashes: 1: STQhTVEdoeGn3LGRCtz_IFAHWdM.roa (hash: lJA+P3xzpJoE/23kp+QFPprWwo01m1U/nvmFZ+Rh2tE=)
2: W5WpStrToolscgdNZnwbYgdZWMs.crl (hash: G2K2lw8pvVgWcTQLqxhCerkisiQn3qcS5QKGuG4Qyp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:cc:70:57:2b:95:38:98:a6:88:d9:35:8d:09:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b95a94adad3a2896c72074d667c1b62075958cb
Validity
Not Before: Mar 12 22:01:48 2025 GMT
Not After : Mar 13 22:01:48 2025 GMT
Subject: CN=eec2a663f1f320abc861db61d9877d94d8ea4b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ed:21:7f:34:ec:df:ef:57:61:3a:9b:ab:73:
a3:5f:d2:06:a8:bc:57:ab:ff:72:84:d4:7f:22:dd:
97:c6:4d:74:7f:f0:9e:b2:17:f1:1e:ed:9c:71:f9:
42:d0:58:40:67:ad:7e:c3:37:3b:7d:da:59:a9:da:
af:7c:13:c3:88:79:0c:7f:d9:af:ee:62:7e:c0:ae:
10:19:d2:6f:7c:e6:fc:f8:f4:6d:05:ff:6b:a2:20:
08:76:d7:af:67:2a:cc:64:70:ec:bd:fd:3e:ae:ab:
5b:3b:59:36:7c:32:db:2c:22:e3:8b:c5:ff:01:f0:
9c:bd:67:b3:48:ba:15:68:27:ac:ba:e4:37:d2:f1:
be:dd:be:e6:4a:9d:9e:fd:d1:8e:fc:c1:43:fa:42:
27:41:e1:dd:0d:8f:45:d1:3b:14:e6:c4:ff:d5:f8:
cb:72:bb:97:75:06:65:7d:62:09:3d:cc:8f:b6:2b:
a9:9c:55:99:55:ed:f7:16:03:5b:51:8e:f5:08:2c:
c4:8a:92:d5:8f:ef:5e:70:59:af:de:e9:60:29:6d:
15:95:fb:28:fe:40:66:b7:bf:30:b5:c4:95:9a:c9:
fd:64:91:8e:83:3e:7f:36:67:7b:4a:d1:3f:9d:66:
da:ab:65:e9:88:66:45:ab:80:d0:38:2d:55:c3:d7:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C2:A6:63:F1:F3:20:AB:C8:61:DB:61:D9:87:7D:94:D8:EA:4B:92
X509v3 Authority Key Identifier:
keyid:5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:18:a7:58:69:dc:c2:70:2f:20:3c:24:44:65:8a:f2:f9:8e:
19:03:ab:01:2c:45:1a:a4:95:62:04:59:6b:ef:f3:7e:6d:1f:
a5:2e:09:fe:26:3f:b9:ed:35:ad:fc:32:dc:bb:02:a6:8e:5b:
2d:99:70:d2:ff:c1:e6:39:97:a3:be:4e:b0:9d:0f:ea:8c:46:
42:21:bc:ee:16:80:82:a4:c2:3e:83:1b:d8:9e:b6:7f:2b:78:
85:63:ad:15:2f:1c:77:a9:72:7e:75:f1:67:17:81:00:e3:3b:
c5:ef:a5:a2:b1:50:d5:3e:ff:1e:71:91:25:58:b1:3e:da:52:
76:83:02:06:06:60:d9:37:33:b1:9c:7b:99:48:ad:7e:c9:47:
3d:28:a5:80:39:75:8d:81:ff:cb:61:5a:d6:1e:d4:50:28:53:
9c:03:46:2f:1f:65:38:b9:22:70:ee:a6:d8:7d:50:5b:5b:3b:
56:56:bc:2e:1a:64:6f:95:77:56:23:2e:0f:6f:17:6e:ef:41:
3a:fc:1c:3b:a7:cb:6f:af:06:c2:45:c8:7c:eb:cd:6d:ab:79:
08:11:1d:f0:8c:ba:85:5e:42:60:0b:31:ae:e1:21:e4:05:a0:
56:fa:5f:26:a3:39:da:ee:c8:11:be:d2:3e:a5:c4:0a:e1:d5:
34:f8:08:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWMYMxwVyuVOJimiNk1jQn6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOTVhOTRhZGFkM2EyODk2YzcyMDc0ZDY2N2MxYjYyMDc1
OTU4Y2IwHhcNMjUwMzEyMjIwMTQ4WhcNMjUwMzEzMjIwMTQ4WjAzMTEwLwYDVQQD
EyhlZWMyYTY2M2YxZjMyMGFiYzg2MWRiNjFkOTg3N2Q5NGQ4ZWE0YjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+0hfzTs3+9XYTqbq3OjX9IGqLxX
q/9yhNR/It2Xxk10f/CeshfxHu2ccflC0FhAZ61+wzc7fdpZqdqvfBPDiHkMf9mv
7mJ+wK4QGdJvfOb8+PRtBf9roiAIdtevZyrMZHDsvf0+rqtbO1k2fDLbLCLji8X/
AfCcvWezSLoVaCesuuQ30vG+3b7mSp2e/dGO/MFD+kInQeHdDY9F0TsU5sT/1fjL
cruXdQZlfWIJPcyPtiupnFWZVe33FgNbUY71CCzEipLVj+9ecFmv3ulgKW0Vlfso
/kBmt78wtcSVmsn9ZJGOgz5/Nmd7StE/nWbaq2XpiGZFq4DQOC1Vw9dppwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7CpmPx8yCryGHbYdmHfZTY6kuSMB8GA1UdIwQY
MBaAFFuVqUra06KJbHIHTWZ8G2IHWVjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84Mzk5MjUtMTU1NS00ZmY2LWJjNDYt
N2ZlYWI0OGVlZTYxLzEvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS84Mzk5MjUtMTU1NS00ZmY2LWJjNDYtN2ZlYWI0OGVlZTYx
LzEvVzVXcFN0clRvb2xzY2dkTlpud2JZZ2RaV01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhinWGnc
wnAvIDwkRGWK8vmOGQOrASxFGqSVYgRZa+/zfm0fpS4J/iY/ue01rfwy3LsCpo5b
LZlw0v/B5jmXo75OsJ0P6oxGQiG87haAgqTCPoMb2J62fyt4hWOtFS8cd6lyfnXx
ZxeBAOM7xe+lorFQ1T7/HnGRJVixPtpSdoMCBgZg2TczsZx7mUitfslHPSilgDl1
jYH/y2Fa1h7UUChTnANGLx9lOLkicO6m2H1QW1s7Vla8Lhpkb5V3ViMuD28Xbu9B
OvwcO6fLb68GwkXIfOvNbat5CBEd8Iy6hV5CYAsxruEh5AWgVvpfJqM52u7IEb7S
PqXECuHVNPgIiw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:37 2025 by rpki-client