
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
File: W5Mah05ojyfJWsrY29Md9pjyEX0.mft (raw, json)
Hash identifier: Wxvb4h+cuLwQku6iiKyaSyiO+mJyTUqoTOa4NwaEWSc=
Subject key identifier: C5:4D:8A:BF:12:0B:F3:98:2A:DE:C0:42:C9:C7:E3:C9:60:CE:78:7F
Authority key identifier: 5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D
Certificate issuer: /CN=5b931a874e688f27c95acad8dbd31df698f2117d
Certificate serial: 01988054AD332DFE91D8F0AAF1B01F8C5968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
Manifest number: 2D
Signing time: Wed 06 Aug 2025 17:01:29 +0000
Manifest this update: Wed 06 Aug 2025 17:01:29 +0000
Manifest next update: Thu 07 Aug 2025 17:01:29 +0000
Files and hashes: 1: T_aE1VBzRFBW86cu7jRpCvqMP_0.roa (hash: Br23NBG7MwrWwFTa8s2oq/DVFkGOhwRXNYpcFdJ00mE=)
2: W5Mah05ojyfJWsrY29Md9pjyEX0.crl (hash: 7CiXtyeahcFRctYH3zKUoMdmA8/z24cxD90Sm7eJJYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:ad:33:2d:fe:91:d8:f0:aa:f1:b0:1f:8c:59:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b931a874e688f27c95acad8dbd31df698f2117d
Validity
Not Before: Aug 6 17:01:29 2025 GMT
Not After : Aug 7 17:01:29 2025 GMT
Subject: CN=c54d8abf120bf3982adec042c9c7e3c960ce787f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9b:7b:79:e8:23:64:20:d2:82:c8:cc:82:13:
34:4c:b5:fa:f9:e3:0f:c1:00:e2:95:cb:cf:0f:83:
e7:33:e0:19:cf:ca:25:cd:b4:3f:4e:27:b6:58:37:
ea:60:5c:ef:6c:1d:47:4e:86:4d:5c:b0:f5:37:80:
a8:6c:45:a9:65:f7:eb:de:fb:20:26:61:f2:da:57:
48:8d:5e:21:83:b6:6d:e3:11:d1:8f:68:49:fb:f1:
bc:c8:fd:f2:ff:62:e2:82:22:66:ca:98:ac:3c:c2:
4a:40:92:b2:54:be:90:62:63:46:4d:22:58:9f:8f:
d6:10:9a:b4:2f:78:cd:6b:c9:2c:45:e6:f5:ed:2c:
2e:ba:7a:2b:f8:6e:e5:b5:ae:11:0d:ba:d7:64:73:
6e:c9:2e:ad:87:e3:66:49:76:19:0f:f7:42:78:62:
34:50:14:eb:6d:a6:e2:a6:75:4f:04:f9:49:24:d2:
46:f1:be:3b:00:be:a3:46:60:c9:62:a2:9c:b2:99:
24:10:b9:3b:7a:42:2d:b6:ac:8d:d4:8b:46:23:10:
59:e2:5c:78:ac:d4:64:fb:30:0b:d2:fe:b0:2f:a3:
a8:59:bb:31:05:c1:64:9b:cc:a5:61:60:3a:72:f8:
39:67:7b:a2:85:5b:3d:ce:99:0e:a2:dd:7a:90:e8:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:4D:8A:BF:12:0B:F3:98:2A:DE:C0:42:C9:C7:E3:C9:60:CE:78:7F
X509v3 Authority Key Identifier:
keyid:5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:db:72:32:4e:cc:64:f4:c4:78:42:4f:01:30:5b:86:5b:90:
86:08:1a:04:36:5f:22:41:70:b3:74:24:30:ab:4c:f3:4d:c8:
c2:e1:58:5d:44:52:28:8b:7e:5a:9b:36:10:02:e3:74:fb:3a:
d0:cf:c5:8e:5f:2a:70:7f:0b:5c:71:00:be:f5:64:8e:ed:1f:
e7:2e:32:ca:10:17:48:d9:30:f3:f4:0c:a5:90:e0:23:1c:34:
73:f5:96:f8:23:18:ad:56:e2:ee:e0:2a:3d:9c:9f:c0:54:0f:
2c:3e:31:bb:85:f9:21:87:d0:fc:77:b3:87:07:f1:ae:78:6a:
e8:95:d5:d9:6b:d5:49:8c:ab:08:9d:0a:43:21:bb:7f:b3:fe:
47:b0:dc:68:25:9d:21:40:d6:f6:8f:cf:f1:7d:0e:96:af:e5:
83:fb:15:a1:97:ab:ca:94:b0:52:9c:cf:9b:42:ec:c4:0f:41:
bb:b6:93:af:33:ec:e5:30:cf:d9:9b:a3:23:79:f7:13:8d:91:
f4:29:37:67:1d:74:1f:ca:f4:14:47:a4:75:bb:94:7e:a2:58:
ba:2a:17:bb:63:7a:32:22:8b:26:7a:d5:26:7e:c4:5c:8e:05:
a8:a8:ee:32:49:c3:d8:2e:1f:7e:78:96:e2:07:0d:5d:64:e6:
80:fd:bc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:18:54 2025 by rpki-client