Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
File: 50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json)
Hash identifier: kvVcfMOf5AGg63SzmrrLOY6WSMQmmq0W5qQlPo7mIII=
Subject key identifier: C5:C8:51:66:90:14:F9:C9:F6:01:D2:A1:4E:77:4D:BC:C0:D7:09:18
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Certificate issuer: /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial: 0196451FB70D2C51D5BC13579893D52AA53C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
Manifest number: 0CB9
Signing time: Thu 17 Apr 2025 19:00:28 +0000
Manifest this update: Thu 17 Apr 2025 19:00:28 +0000
Manifest next update: Fri 18 Apr 2025 19:00:28 +0000
Files and hashes: 1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: XWsKOB0FO2yRwUYocCtnoOpPQ54eZ0h9LM7kHlGFNg0=)
2: FbdIrSoU0o1j3svdo45lLU5crQ8.roa (hash: ePZfK34nDhXAMqf0uiwurL97nW7VWI4tP25I7IkP7Oo=)
3: yZ3Po0hR1ZJyc1rv39YH9NNWuXs.roa (hash: 22bouj/6xCSX/ZXyHrbVMTQvQervlfTwQaA97vYRHBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:b7:0d:2c:51:d5:bc:13:57:98:93:d5:2a:a5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
Validity
Not Before: Apr 17 19:00:28 2025 GMT
Not After : Apr 18 19:00:28 2025 GMT
Subject: CN=c5c851669014f9c9f601d2a14e774dbcc0d70918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:fb:a9:c6:ac:b2:3d:ec:07:d2:c7:ad:b6:
f4:29:07:6d:35:ec:78:67:b9:45:4b:84:84:83:c9:
e1:ea:3f:43:d5:83:4a:54:57:d7:3f:a3:0d:9f:6c:
e8:bd:9d:84:2f:50:92:11:22:6e:cd:15:b6:2c:7d:
09:8c:55:33:22:dc:fe:78:02:69:ae:83:2a:a4:4b:
50:77:d4:7d:dd:f8:55:63:96:72:f6:17:3e:f4:7c:
b9:ea:c1:bf:88:78:38:a1:e5:23:16:b0:b2:0e:b9:
65:14:0c:ed:bc:56:52:8a:f0:2b:74:65:53:0a:b3:
f6:a1:7e:be:ff:c6:b3:3c:b7:8a:77:72:a1:2c:4f:
43:f4:10:2b:82:4f:1f:91:85:a6:38:f5:a0:27:21:
08:d9:dd:98:7e:6e:fe:d7:52:b7:02:3c:77:d3:e1:
37:f6:8a:e7:fa:1b:29:54:90:7c:1d:77:5c:cd:08:
5e:96:89:99:9c:ab:fc:80:2c:9a:7e:01:38:20:ef:
92:b8:48:d3:ae:fb:22:74:16:d3:96:d5:a5:2b:b7:
14:c1:9f:ee:bc:c3:29:59:07:dd:fc:e9:cb:cd:46:
bf:65:76:4f:1a:14:76:6f:f3:e5:e2:5f:0a:ff:8b:
30:97:7c:b3:44:af:ce:36:4c:ac:d6:d6:db:57:87:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C8:51:66:90:14:F9:C9:F6:01:D2:A1:4E:77:4D:BC:C0:D7:09:18
X509v3 Authority Key Identifier:
keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:45:9b:fe:08:9c:48:0d:3f:06:6b:77:0a:2d:4c:e0:5b:ff:
44:26:04:9d:d0:9c:4d:65:cb:10:82:e0:9a:f4:a3:6b:e8:e9:
2a:b3:6b:81:3b:66:47:05:57:0c:a7:89:a6:d5:80:f6:8f:70:
db:ea:af:01:c8:62:48:24:a6:9a:b8:cd:f7:ea:d1:b5:36:f8:
9b:0c:90:3d:7e:e7:51:46:a1:9f:fa:cb:3e:ce:92:75:dc:5d:
c7:af:6f:19:aa:25:e5:47:27:38:c8:57:f4:46:e5:27:ed:4d:
3d:92:29:7b:90:79:be:38:c1:7a:e3:88:8d:29:94:a9:04:4f:
bd:6a:f2:f6:2f:d3:13:99:a3:8b:6e:fe:de:c9:49:85:f8:97:
55:4a:54:5d:79:93:f3:ec:99:71:38:27:35:56:1d:df:28:f8:
16:4d:81:8a:ef:97:cb:aa:51:77:80:21:d6:55:7c:17:7c:08:
0e:24:c9:fb:b8:9b:6c:60:35:98:54:d6:54:ba:73:a6:f2:d4:
0d:84:da:ee:35:32:6b:58:7d:b6:64:d4:cc:ec:7f:97:f0:3f:
25:0d:23:cf:64:e8:a2:65:9b:c1:8e:21:4e:09:94:8d:7b:4b:
f7:78:08:67:d9:6f:9e:0a:26:4d:d0:2b:84:58:3f:2d:9e:d0:
c1:33:98:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:28 2025 by rpki-client