Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
File: 5oS0UXk_YkGGF7yTT16CUT_Daok.mft (raw, json)
Hash identifier: is+Pk2Cw+/BSdoSzjcjLvAGBEj9I0udkc4euSFJO5Qk=
Subject key identifier: 81:4E:3E:A4:D6:53:4D:14:AA:74:E9:6E:A7:43:FE:BC:5D:E0:C7:45
Authority key identifier: E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
Certificate issuer: /CN=e684b451793f62418617bc934f5e82513fc36a89
Certificate serial: 019874F501CE863EE647BD5ECAB3B6CD38FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
Manifest number: 1524
Signing time: Mon 04 Aug 2025 12:01:10 +0000
Manifest this update: Mon 04 Aug 2025 12:01:10 +0000
Manifest next update: Tue 05 Aug 2025 12:01:10 +0000
Files and hashes: 1: 5oS0UXk_YkGGF7yTT16CUT_Daok.crl (hash: s9YES+8ZfopDwK6t61OJ/Ed6uc5ms0uz+SVubE9vTM4=)
2: VxHZXRxJTRxl_GAJfXRGk4eUbgQ.roa (hash: h1782ABvZxcb8lHBxbC/bEHNiNxIT1YjharjivSSmh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:01:ce:86:3e:e6:47:bd:5e:ca:b3:b6:cd:38:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e684b451793f62418617bc934f5e82513fc36a89
Validity
Not Before: Aug 4 12:01:10 2025 GMT
Not After : Aug 5 12:01:10 2025 GMT
Subject: CN=814e3ea4d6534d14aa74e96ea743febc5de0c745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:35:55:4e:e6:21:65:6e:8d:c2:39:5d:75:
63:19:d7:13:79:4d:66:31:b0:35:e5:28:29:7c:b2:
3a:96:82:b5:41:c1:9a:16:56:e1:78:b9:3a:94:e3:
17:1a:28:b0:ef:ca:11:8d:24:6a:9b:9b:ef:21:7e:
43:c6:63:62:d0:f6:03:a0:2e:f3:aa:8a:06:d6:ee:
61:a0:04:6a:d2:58:6a:86:31:24:be:3f:8c:88:18:
c4:5b:2b:91:03:ce:f3:93:ef:a2:5b:1e:6a:f4:d7:
82:9f:e3:02:cf:f1:ff:83:5b:17:c3:7b:db:e6:50:
c8:8c:6c:9e:ee:4a:1e:8c:82:7f:a1:dd:08:a4:8a:
d8:f6:e3:ab:99:c7:58:e5:79:12:fd:3a:e2:02:8c:
db:aa:a9:d2:fe:6a:e7:ab:ee:f9:dd:56:7f:a5:d3:
96:77:5e:58:27:b5:37:0b:bc:6e:f4:73:0f:75:23:
f6:b0:20:68:1f:c2:5e:9b:08:06:2b:90:67:11:5e:
f6:3b:9b:f8:a8:7a:8b:d2:62:02:47:fe:0f:c9:3e:
7a:b8:7a:49:0b:58:db:5d:4d:84:d4:a6:64:c6:83:
3e:26:85:21:bc:5e:af:70:cf:9a:1d:8d:bd:85:76:
c8:69:a4:a0:1d:2b:3a:79:13:73:f8:98:43:3a:d4:
6f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4E:3E:A4:D6:53:4D:14:AA:74:E9:6E:A7:43:FE:BC:5D:E0:C7:45
X509v3 Authority Key Identifier:
keyid:E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:d9:e6:4f:5d:82:50:bf:98:2f:9a:26:bf:61:4a:1d:47:0b:
02:41:35:d3:e1:da:cd:d2:2a:18:e8:f3:12:2b:f0:03:7c:38:
66:3c:92:82:57:eb:70:53:42:09:5f:b0:0b:12:26:be:5e:6c:
70:e9:44:a1:57:1b:1e:7f:61:7e:15:5e:c6:ec:74:b0:70:10:
55:c3:47:7b:54:de:36:f9:ac:97:27:9b:19:85:42:bc:6a:a8:
03:7c:f3:32:86:90:6f:af:d2:ec:20:24:6b:a7:cd:7d:c0:59:
4e:5f:4c:b9:70:11:1f:6e:84:21:e3:c8:9b:84:82:d0:7f:bc:
c8:c0:38:11:7a:27:9b:44:64:ce:4c:aa:f4:26:98:b5:6f:75:
e6:36:01:49:22:7a:3c:8d:12:90:d5:87:0f:f1:3f:d7:28:be:
e3:fe:f5:e5:f2:61:18:41:50:ef:d5:97:7f:86:e4:08:dc:f3:
f9:77:bf:5f:15:18:f1:e3:ad:90:ba:77:43:ec:52:81:e1:2b:
82:10:c4:52:ff:02:53:72:22:97:fd:89:c3:23:f4:6f:01:1b:
a8:96:5f:1a:b6:15:5e:57:34:d1:5e:df:3e:a1:d6:ad:9e:65:
82:25:0e:78:26:65:e4:ba:50:25:39:ac:aa:3f:1f:74:a2:70:
40:bd:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:15 2025 by rpki-client