Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
File: 5oS0UXk_YkGGF7yTT16CUT_Daok.mft (raw, json)
Hash identifier: irefcOUiEca06vZQnLmqNjff6TGUPt7KeY9hHKSvwz0=
Subject key identifier: 22:2A:B2:BC:60:AC:23:EA:AD:3A:05:D8:D3:62:CB:6E:3C:75:44:61
Authority key identifier: E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
Certificate issuer: /CN=e684b451793f62418617bc934f5e82513fc36a89
Certificate serial: 01969FACF333FB4B064334EEC8F828C527FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
Manifest number: 1431
Signing time: Mon 05 May 2025 09:00:33 +0000
Manifest this update: Mon 05 May 2025 09:00:33 +0000
Manifest next update: Tue 06 May 2025 09:00:33 +0000
Files and hashes: 1: 5oS0UXk_YkGGF7yTT16CUT_Daok.crl (hash: CsfRNDbZYv5roxDHE0rMH/PEbfiC0Y3jf37UZF3EqlI=)
2: VxHZXRxJTRxl_GAJfXRGk4eUbgQ.roa (hash: h1782ABvZxcb8lHBxbC/bEHNiNxIT1YjharjivSSmh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ac:f3:33:fb:4b:06:43:34:ee:c8:f8:28:c5:27:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e684b451793f62418617bc934f5e82513fc36a89
Validity
Not Before: May 5 09:00:33 2025 GMT
Not After : May 6 09:00:33 2025 GMT
Subject: CN=222ab2bc60ac23eaad3a05d8d362cb6e3c754461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7e:5c:24:64:25:c4:65:0e:17:e7:40:3e:65:
38:0b:ac:1a:71:64:1d:72:cf:b9:42:41:71:47:1f:
4c:f0:dd:96:ff:03:29:de:d6:08:c6:ad:90:e4:31:
ba:eb:be:81:a0:71:77:19:bc:49:c0:4b:5c:a4:e7:
ad:91:a5:25:dd:e7:39:a8:67:c9:c7:6c:78:a3:7c:
7e:bb:3a:f3:5e:63:03:e9:45:4e:76:5d:13:a0:83:
a2:10:75:2d:d1:44:cf:23:66:69:29:05:3b:0f:66:
a3:d1:51:93:06:99:93:89:c4:60:49:2a:6e:c5:b6:
aa:f8:3e:19:b8:39:50:90:23:03:aa:78:43:28:c0:
59:fd:45:0c:88:90:85:59:45:dd:55:90:c2:71:8a:
be:f2:5d:1d:0b:ae:84:ef:f5:63:81:ac:c0:66:d5:
b3:ba:e7:be:bb:c2:a5:0b:79:2b:54:7d:e3:ad:83:
7d:61:d7:ef:c5:b0:4f:1f:a3:cb:3f:ca:4c:5d:94:
92:83:9f:88:87:26:f1:6f:07:96:95:cc:4d:92:04:
30:3c:f3:56:c6:e9:35:a4:01:5a:29:fd:93:14:3f:
96:7c:a2:89:0c:9a:7f:f5:c3:58:65:27:a1:be:df:
2c:a0:11:15:16:ef:58:7f:a8:24:9e:9e:22:6a:30:
a9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2A:B2:BC:60:AC:23:EA:AD:3A:05:D8:D3:62:CB:6E:3C:75:44:61
X509v3 Authority Key Identifier:
keyid:E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e8:67:6f:75:a5:0e:e3:e5:1a:cd:3c:c1:02:88:9f:0a:db:
87:9e:b8:44:d5:75:40:ce:7d:94:fc:d7:d2:91:7a:be:8c:c8:
79:65:84:a2:50:df:02:86:9d:62:95:63:90:7e:0d:f8:57:5a:
f7:24:dc:7f:d7:2f:e0:74:2c:f4:27:5f:e7:bb:04:bd:34:3e:
57:05:e7:b8:d7:9d:21:e9:c8:d0:8c:ac:a4:91:0a:be:a9:e5:
15:72:e1:cf:d1:5c:45:f5:5a:0f:a6:d6:5b:df:45:25:57:f3:
2c:8f:66:c6:84:a4:74:11:a9:bd:68:b7:8e:db:3b:2d:f6:d8:
c9:c4:59:04:7c:9a:d2:95:66:36:32:52:cf:a7:00:b3:d1:a1:
4a:81:10:4d:9c:55:f8:b3:45:28:ed:84:6e:2a:14:f1:e9:58:
67:3b:e5:30:04:0e:9a:b7:ec:22:8f:2a:94:ac:6b:60:fb:f2:
2c:6c:9b:72:fe:82:5a:e1:88:0c:31:29:bc:9f:59:11:ac:62:
dc:88:22:d8:70:4a:45:45:69:2c:4b:e4:19:1d:c2:4d:34:4b:
f8:85:43:dd:e1:a2:f8:dd:8a:1d:ba:ec:6e:93:41:8b:1d:6b:
68:74:76:69:97:8d:54:6b:8e:ee:e7:00:89:19:1d:81:c8:00:
78:ec:8f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:27:44 2025 by rpki-client