Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
File: 5oS0UXk_YkGGF7yTT16CUT_Daok.mft (raw, json)
Hash identifier: EQ0Z3ksSPPI2Z4HTFD76dPAG7XmrkAcmG3vFeYc7obA=
Subject key identifier: 3A:64:07:1E:D8:C7:5E:14:C5:80:74:53:C0:FF:E8:A2:18:18:A6:A5
Authority key identifier: E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
Certificate issuer: /CN=e684b451793f62418617bc934f5e82513fc36a89
Certificate serial: 0198D773A3A195E324D50834CDF54C7EAACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
Manifest number: 1557
Signing time: Sat 23 Aug 2025 15:02:16 +0000
Manifest this update: Sat 23 Aug 2025 15:02:16 +0000
Manifest next update: Sun 24 Aug 2025 15:02:16 +0000
Files and hashes: 1: 5oS0UXk_YkGGF7yTT16CUT_Daok.crl (hash: KUGauh+eoC8+Boi0o+zKHViK392bp2JPLDvR6WFmVI0=)
2: VxHZXRxJTRxl_GAJfXRGk4eUbgQ.roa (hash: h1782ABvZxcb8lHBxbC/bEHNiNxIT1YjharjivSSmh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:a3:a1:95:e3:24:d5:08:34:cd:f5:4c:7e:aa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e684b451793f62418617bc934f5e82513fc36a89
Validity
Not Before: Aug 23 15:02:16 2025 GMT
Not After : Aug 24 15:02:16 2025 GMT
Subject: CN=3a64071ed8c75e14c5807453c0ffe8a21818a6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bf:e0:90:4e:4a:fd:1b:6a:ce:4d:1b:ac:af:
87:7b:f2:02:e5:ee:2f:a3:c7:90:89:03:dc:de:b4:
cd:e4:58:ff:f0:5f:75:6c:c5:6d:46:19:95:3e:34:
ac:da:f5:31:0d:e6:b2:c6:6b:87:4e:2f:c4:52:ae:
9a:67:19:ff:dd:b1:39:ad:8f:a7:5f:12:4e:46:32:
be:80:a3:99:e2:96:ec:76:ea:4d:20:a7:b1:89:14:
a9:4b:77:05:59:6b:a9:5d:ad:cb:a5:e6:8c:e2:67:
59:e2:5a:f0:4f:27:79:2b:ad:ad:c9:43:75:bb:5a:
7b:3a:bd:e7:7e:55:4e:b9:3a:e5:eb:34:8c:3f:57:
bc:e6:2e:12:ff:81:34:5f:ce:be:d7:ce:ac:ed:b8:
b2:76:af:23:ca:d3:1d:ad:d9:e4:c1:08:5d:8c:48:
6b:53:13:28:65:e2:7d:ef:8f:fb:13:c2:e2:bf:5d:
c9:f0:05:f0:e9:f2:65:fd:0d:6b:3b:b3:1b:c4:ae:
4f:2d:fe:bb:2c:b9:6e:67:1b:67:13:5e:04:01:45:
67:68:e6:14:ae:89:30:69:0f:80:51:6c:c3:10:2e:
68:bf:a9:f6:d2:a2:1e:73:61:73:d4:ab:f9:8b:8b:
b1:28:ce:54:a0:f3:55:b0:f6:53:cc:38:9a:b7:c6:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:64:07:1E:D8:C7:5E:14:C5:80:74:53:C0:FF:E8:A2:18:18:A6:A5
X509v3 Authority Key Identifier:
keyid:E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4b:5d:b9:ea:13:d1:a7:00:76:bf:30:cb:98:34:ec:e5:64:
92:30:3c:65:8b:87:d1:94:4c:0f:f9:ae:72:18:cb:0a:da:9e:
08:8d:3b:f6:2d:8e:2f:16:38:3b:74:e3:9d:d4:a4:7e:69:df:
99:14:4c:d1:f1:a1:e9:4f:64:c7:9e:99:61:d2:e4:4c:c9:2b:
13:ab:da:71:16:65:94:37:6f:07:b2:c4:b6:57:ec:65:e6:93:
07:4b:3e:26:66:0a:70:28:82:f1:53:7a:8a:fb:00:c8:59:48:
c3:9d:b1:da:24:c3:b3:a8:c7:64:c5:1c:ee:68:6d:3b:c8:61:
2c:12:0d:7c:87:ed:fa:af:b2:be:93:88:2b:f7:44:05:cc:36:
12:29:25:92:a4:05:19:ac:b2:2e:ea:b2:8e:1b:17:80:ff:52:
6f:0d:b7:0a:6a:f8:d5:c7:bb:2d:2c:dd:76:e1:c7:3d:67:47:
9b:ce:0e:da:90:8c:6c:9f:29:bf:aa:db:2d:e9:45:94:29:d3:
a2:70:4b:a4:d0:1d:35:f6:9e:b6:73:af:e5:ad:41:d9:6c:4c:
70:55:08:72:29:14:0b:3e:22:1b:36:7d:83:f5:b7:54:ff:4e:
b5:3d:94:15:60:93:08:da:0b:e7:b6:32:b4:4a:68:f7:00:f2:
3e:67:8c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:42 2025 by rpki-client