Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
File: 50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json)
Hash identifier: IBlfOhQwrrLANjzDnuRaU2hkkCAZNNCfjqnckXHERG0=
Subject key identifier: 65:DE:49:29:AE:6A:8C:83:C1:61:55:97:7A:E4:8B:D7:15:DF:BB:0D
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Certificate issuer: /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial: 019749D5E635B7D1B63BB5F134EFBC589C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
Manifest number: 0D40
Signing time: Sat 07 Jun 2025 10:00:44 +0000
Manifest this update: Sat 07 Jun 2025 10:00:44 +0000
Manifest next update: Sun 08 Jun 2025 10:00:44 +0000
Files and hashes: 1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: RiKK7TMZ887jGqyWNo0ISngdTt+LB03sDkhH98rouyk=)
2: FbdIrSoU0o1j3svdo45lLU5crQ8.roa (hash: ePZfK34nDhXAMqf0uiwurL97nW7VWI4tP25I7IkP7Oo=)
3: yZ3Po0hR1ZJyc1rv39YH9NNWuXs.roa (hash: 22bouj/6xCSX/ZXyHrbVMTQvQervlfTwQaA97vYRHBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:e6:35:b7:d1:b6:3b:b5:f1:34:ef:bc:58:9c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
Validity
Not Before: Jun 7 10:00:44 2025 GMT
Not After : Jun 8 10:00:44 2025 GMT
Subject: CN=65de4929ae6a8c83c16155977ae48bd715dfbb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:43:69:3b:0d:f3:e6:2c:49:97:8c:ec:6d:
ba:dd:4c:70:a5:d3:41:81:25:94:f2:a1:f2:02:ee:
c7:71:bd:bb:80:f4:e0:38:29:2b:67:b2:1a:2e:88:
3b:63:8d:17:1f:78:4b:3a:a3:c0:83:4e:e9:26:af:
3c:74:60:af:86:af:ac:e6:22:62:94:2a:69:db:05:
4d:b9:14:d4:5b:5d:a5:b4:b7:96:3a:b4:4a:a9:1d:
7d:f1:bf:34:6d:02:0b:23:dd:4f:63:07:70:eb:96:
2c:ec:a3:fb:77:48:41:fd:16:af:82:49:89:8c:59:
41:a4:cb:87:2d:b4:7e:de:6d:29:7c:b8:fb:db:56:
80:73:51:87:6e:8c:fd:4a:71:b6:64:61:1c:94:17:
d4:1a:bf:c8:8e:60:2f:1a:d6:e9:ac:28:17:b5:6e:
2d:e5:76:b6:8c:38:18:2e:50:5d:29:18:91:f9:79:
52:4f:37:d4:27:a9:9f:28:9c:33:e7:74:37:6c:80:
3b:90:d4:e0:e6:4b:b3:a9:11:50:d1:b0:10:84:48:
c0:d8:ad:bc:6a:1e:5a:7b:de:f4:48:b8:7f:9b:7c:
25:79:5e:1c:c7:d2:c5:4c:16:b4:8e:f0:83:39:bf:
3a:9e:99:a5:b0:d6:09:f1:78:51:b8:4e:b2:07:90:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DE:49:29:AE:6A:8C:83:C1:61:55:97:7A:E4:8B:D7:15:DF:BB:0D
X509v3 Authority Key Identifier:
keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:df:92:df:a9:83:c7:5c:04:fa:05:7d:fd:37:68:cc:eb:10:
9c:12:c0:76:30:21:12:af:78:00:97:ab:05:f9:49:0d:90:bb:
e3:74:e7:73:80:4c:ca:9e:f1:d2:d6:55:16:e8:80:7f:a9:a2:
b6:1e:a9:8b:09:64:65:88:88:6f:fa:d4:0a:f6:b2:34:07:38:
22:8f:8c:71:22:ae:db:6f:77:07:55:d2:b7:ae:b9:03:00:bb:
94:1e:c2:b6:26:ff:a8:97:61:74:fb:3d:4d:e4:b7:de:01:0d:
b0:89:30:48:24:41:76:99:ca:76:05:3c:34:f5:a0:a3:70:39:
8c:07:28:1a:00:34:95:9b:13:a1:5d:d3:db:db:ce:56:0e:fe:
fc:90:01:67:a7:2d:1a:3c:a4:4b:0b:2b:3e:b2:c8:fe:65:78:
04:45:43:61:0c:00:70:3c:fb:4c:7d:76:0d:d7:3e:22:37:35:
98:10:06:5f:8d:72:09:c7:c3:a7:a9:50:fd:0d:4b:e4:19:c2:
79:95:38:c0:d0:cd:98:d8:87:26:4a:35:f3:d4:7a:20:3a:15:
8e:e6:35:5a:21:42:2c:79:a8:1f:25:e0:6d:e8:cf:4b:27:ce:
e6:dd:c1:cb:65:2b:20:02:4b:b6:72:d4:fb:57:d1:aa:a1:64:
6a:b2:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:04:07 2025 by rpki-client