Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
File: 5oS0UXk_YkGGF7yTT16CUT_Daok.mft (raw, json)
Hash identifier: gyFmfszcF2I3vXxAv9c6OCNAcjdyol8nkFRcAcJfAX8=
Subject key identifier: A0:A1:68:62:8F:10:A1:49:87:D7:EB:41:D4:B5:54:88:9E:EA:03:77
Authority key identifier: E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
Certificate issuer: /CN=e684b451793f62418617bc934f5e82513fc36a89
Certificate serial: 01974B8D61038BAB62CD228704D6CD61E3C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
Manifest number: 148A
Signing time: Sat 07 Jun 2025 18:00:45 +0000
Manifest this update: Sat 07 Jun 2025 18:00:45 +0000
Manifest next update: Sun 08 Jun 2025 18:00:45 +0000
Files and hashes: 1: 5oS0UXk_YkGGF7yTT16CUT_Daok.crl (hash: nNtDxcIWKyp96/N8xmG9Wb9ATgZX/b20WUwl8HEsLHw=)
2: VxHZXRxJTRxl_GAJfXRGk4eUbgQ.roa (hash: h1782ABvZxcb8lHBxbC/bEHNiNxIT1YjharjivSSmh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:61:03:8b:ab:62:cd:22:87:04:d6:cd:61:e3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e684b451793f62418617bc934f5e82513fc36a89
Validity
Not Before: Jun 7 18:00:45 2025 GMT
Not After : Jun 8 18:00:45 2025 GMT
Subject: CN=a0a168628f10a14987d7eb41d4b554889eea0377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:20:ac:b2:16:d9:13:eb:49:c1:67:2e:ad:
95:7a:0e:63:5c:56:7c:b1:14:af:2e:00:5c:d7:16:
30:c1:d9:26:f7:0e:f0:66:df:72:0a:f8:e1:af:b1:
e4:01:b9:29:26:35:5b:cd:ad:b6:99:2e:64:26:3f:
ce:40:2e:95:20:c4:49:dc:5d:b3:26:57:a1:fd:be:
dc:87:84:9b:0e:1a:4c:e9:5b:ef:72:82:4b:8f:03:
f6:ea:5b:50:cc:b5:e8:cd:e4:1b:1b:c1:c5:c5:90:
b5:fd:e3:b2:69:f2:3b:29:94:ab:80:50:d2:73:3b:
78:58:69:29:7e:0c:fe:3d:86:bf:32:b1:3c:06:e1:
6b:06:9f:87:39:92:2d:03:99:86:44:61:df:36:7c:
18:b0:c3:c6:fa:91:0c:9e:e9:c9:8b:f8:95:30:b4:
94:28:af:58:84:f0:33:ab:63:2c:29:31:b6:b5:4a:
57:7c:2c:a8:88:3c:c8:2f:db:98:0f:ae:fb:7a:8a:
c7:29:fa:0e:d3:0c:25:70:71:c3:2c:a8:46:ca:52:
1e:02:f3:d9:76:5d:aa:9d:9a:7c:ef:14:ee:fa:5b:
8b:7d:6e:96:ec:e2:1f:91:93:05:5e:a2:7d:6d:fd:
8a:2a:c2:22:2e:f5:5a:49:10:fd:40:10:dd:e7:4a:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:A1:68:62:8F:10:A1:49:87:D7:EB:41:D4:B5:54:88:9E:EA:03:77
X509v3 Authority Key Identifier:
keyid:E6:84:B4:51:79:3F:62:41:86:17:BC:93:4F:5E:82:51:3F:C3:6A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oS0UXk_YkGGF7yTT16CUT_Daok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c54f32-258e-4bb3-b8d5-71b709ef5f5b/1/5oS0UXk_YkGGF7yTT16CUT_Daok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:83:ef:44:59:6d:73:5a:53:ef:9d:71:d8:c1:58:f3:bc:aa:
5c:b5:f2:18:f6:e6:21:af:41:ad:d0:12:c8:18:c8:91:f5:37:
2a:20:94:9d:0d:96:1f:1a:3a:d1:3e:d4:52:19:15:c5:c6:74:
53:19:3e:ee:4c:ee:bd:d0:00:f1:c9:78:74:4e:12:8b:e6:bc:
76:78:ae:e3:e5:59:ac:ce:60:40:8f:5f:b8:c4:22:69:2b:f6:
c9:4c:9e:ee:bd:82:d0:ff:f7:b8:0c:29:09:bc:9f:0b:65:d7:
d6:bb:32:0f:a8:df:0f:3d:c5:5d:f8:e1:07:06:1f:61:b4:a4:
5b:2d:ed:0f:1d:30:6e:73:3e:9d:ae:02:00:0d:c0:55:e6:2d:
85:76:4c:e4:b8:70:6e:ca:8c:38:54:35:f2:54:f4:0e:3a:d3:
86:e7:29:3d:6e:07:0a:78:a7:59:e3:7e:8e:fa:4a:c6:1a:f6:
a6:e1:d5:8f:6d:41:5c:d8:af:da:3e:4d:2e:22:06:1e:3e:e2:
76:86:d1:87:91:24:3f:80:7b:b2:d9:42:46:74:a4:de:30:4f:
ff:40:18:a3:8d:47:33:33:9d:7e:ca:0b:03:56:f6:33:97:8d:
c0:52:14:af:8c:8e:ab:8f:80:01:08:aa:41:52:a9:8f:f5:07:
b5:bc:ef:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:01:28 2025 by rpki-client