Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
File: 5oS0UXk_YkGGF7yTT16CUT_Daok.mft (raw, json)
Hash identifier: 0hmGqvqLY1VjFyOeUxuhXXrUe9JxoITdILQVSDi3X/g=
Subject key identifier: C8:E1:8A:1A:15:D5:6C:29:20:53:3D:A1:72:81:2E:49:40:FB:C7:70
Authority key identifier: E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
Certificate issuer: /CN=e684b451793f62418617bc934f5e82513fc36a89
Certificate serial: 0197B5C529DA879F472176473E47B1E0D6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
Manifest number: 14C1
Signing time: Sat 28 Jun 2025 09:01:26 +0000
Manifest this update: Sat 28 Jun 2025 09:01:26 +0000
Manifest next update: Sun 29 Jun 2025 09:01:26 +0000
Files and hashes: 1: 5oS0UXk_YkGGF7yTT16CUT_Daok.crl (hash: 8qBNNXtMCjSaXnGgkq6S6a7WmHxuAvj6F6vC/lgG9Dg=)
2: VxHZXRxJTRxl_GAJfXRGk4eUbgQ.roa (hash: h1782ABvZxcb8lHBxbC/bEHNiNxIT1YjharjivSSmh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:29:da:87:9f:47:21:76:47:3e:47:b1:e0:d6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e684b451793f62418617bc934f5e82513fc36a89
Validity
Not Before: Jun 28 09:01:26 2025 GMT
Not After : Jun 29 09:01:26 2025 GMT
Subject: CN=c8e18a1a15d56c2920533da172812e4940fbc770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:b4:ab:ae:b1:2a:83:63:a5:2d:11:7b:e2:
6d:10:c7:aa:13:71:67:8b:0c:4e:68:d4:ac:e0:ae:
5d:84:06:2e:1e:cd:83:3b:e3:fb:32:09:ef:25:fd:
71:06:31:df:f5:19:57:fa:ae:4a:15:c8:af:16:c8:
7a:7a:a5:35:55:eb:57:b3:40:0c:ce:a1:bc:64:27:
1e:29:ee:fc:1e:b2:b8:54:08:54:e8:b3:65:8c:5a:
08:52:33:8c:1a:35:c3:27:c9:42:7f:21:9f:40:10:
93:ce:79:83:17:05:2b:07:f2:ff:b3:ee:39:36:1f:
c9:f3:64:b3:ad:bd:b6:fc:da:8c:01:4d:d3:12:64:
4d:e6:29:1f:37:ef:0f:45:7b:ba:1b:97:30:cd:ee:
09:d4:e0:66:1d:03:ff:3f:43:22:8f:bf:94:4b:16:
7e:49:d6:87:1d:d9:28:4a:24:a4:d1:8b:3c:3c:55:
ac:8a:71:4b:70:de:be:48:65:07:e9:30:97:20:9c:
de:7d:9b:94:42:b7:41:96:a1:33:8b:e0:24:36:db:
a6:25:5f:4d:10:ae:8f:7d:ff:b7:58:48:b1:15:ad:
da:18:f8:d6:71:f9:20:3a:84:46:7f:c7:7b:7e:8b:
89:e2:96:74:00:6a:59:83:2c:9c:f4:42:e0:bb:b7:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E1:8A:1A:15:D5:6C:29:20:53:3D:A1:72:81:2E:49:40:FB:C7:70
X509v3 Authority Key Identifier:
keyid:E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:5c:0b:60:b2:5e:b9:47:af:44:29:14:7c:eb:c8:d0:ab:1a:
95:52:a2:43:3c:f1:fb:a8:36:ba:cc:34:4a:f6:73:93:18:2a:
c1:32:b9:ed:10:d5:77:f4:5f:12:53:e3:af:a2:ff:98:5c:04:
e9:f4:75:e4:30:0e:15:eb:cc:db:1a:a3:0a:9b:1e:4a:8e:a0:
2b:3d:73:0f:60:be:60:3e:48:5e:3f:e9:d3:08:0b:85:50:7f:
8b:99:fa:63:23:d7:ec:66:af:16:3a:65:00:79:d4:56:90:08:
30:8f:c2:78:13:0e:fd:c4:7a:ef:7d:0b:c0:57:2c:d7:73:b8:
f8:db:72:d4:50:9c:bd:44:a6:ac:31:44:db:4b:05:8f:e6:e6:
e2:3e:7a:54:c8:f1:be:bc:98:29:26:c5:72:68:17:5d:00:d8:
4c:90:71:04:33:b5:db:e7:1e:2d:05:e9:d8:c5:d6:a9:15:44:
38:ee:b4:05:12:cc:8d:5c:81:b0:d8:32:10:22:ed:da:29:12:
b5:fb:5a:15:fa:07:6c:6e:8a:aa:26:9c:b4:47:22:ce:11:b2:
25:f8:7a:02:86:d3:56:0a:62:3f:dc:d7:eb:b2:2a:6f:79:4f:
d2:fb:6c:1a:dc:99:63:ad:a6:1c:d1:34:29:4c:cf:a9:f3:5f:
16:c4:b5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:41 2025 by rpki-client