Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
File: 50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json)
Hash identifier: x6hL1i/JBTfWoNRkr7IFqWlwFBWV8kTAjzS0izkDZQ0=
Subject key identifier: 05:37:01:CE:D9:98:59:43:4B:ED:F8:2D:F0:D4:D2:3E:CD:4C:49:D6
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Certificate issuer: /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial: 0197B7EA27064FC9AB7400DEEC0B6700B2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
Manifest number: 0D79
Signing time: Sat 28 Jun 2025 19:01:05 +0000
Manifest this update: Sat 28 Jun 2025 19:01:05 +0000
Manifest next update: Sun 29 Jun 2025 19:01:05 +0000
Files and hashes: 1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: V3qST4h9hhFSbLf5wQKCcAbwevqaB9iiqFflExDc4Ds=)
2: FbdIrSoU0o1j3svdo45lLU5crQ8.roa (hash: ePZfK34nDhXAMqf0uiwurL97nW7VWI4tP25I7IkP7Oo=)
3: yZ3Po0hR1ZJyc1rv39YH9NNWuXs.roa (hash: 22bouj/6xCSX/ZXyHrbVMTQvQervlfTwQaA97vYRHBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:27:06:4f:c9:ab:74:00:de:ec:0b:67:00:b2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
Validity
Not Before: Jun 28 19:01:05 2025 GMT
Not After : Jun 29 19:01:05 2025 GMT
Subject: CN=053701ced99859434bedf82df0d4d23ecd4c49d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:7d:0d:60:39:0c:d3:42:5c:98:d7:cf:95:
34:0b:bd:7c:53:cf:ba:b6:a6:48:35:9f:a0:92:02:
2c:6e:37:6d:f1:49:95:54:52:bd:c7:a4:68:2e:81:
7d:b4:a4:90:3b:f2:62:de:33:8f:96:7b:58:36:87:
a2:6a:49:e4:6f:16:25:4b:30:90:0c:b9:56:bd:b2:
eb:64:d2:d1:83:2d:c0:e5:5f:3f:b8:81:1b:eb:69:
d6:71:de:f1:b2:9d:86:0a:80:76:ac:20:87:83:9f:
73:52:b5:65:08:69:bd:1b:ff:3d:a2:cd:96:61:77:
c6:6e:9e:53:cf:58:e8:2f:9e:f1:01:45:c4:db:d3:
c4:ff:b5:92:40:8f:7d:00:58:60:23:83:bc:ea:1b:
32:76:96:61:d5:c0:a1:2a:ec:7a:59:b3:70:41:73:
ad:d1:38:92:81:ab:c1:21:53:10:6f:53:63:5b:72:
0d:77:f4:67:18:2a:1b:c7:f9:53:76:3e:a9:cf:24:
35:ff:4d:e5:88:49:42:d4:76:ab:6f:f6:10:4b:de:
75:92:20:11:25:1d:ef:a6:f0:e3:96:f2:66:e7:93:
66:56:34:33:37:8d:ad:de:35:98:fa:2e:f3:26:4e:
4e:8b:72:e4:bf:ff:c6:b8:0f:77:18:e7:eb:63:dc:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:37:01:CE:D9:98:59:43:4B:ED:F8:2D:F0:D4:D2:3E:CD:4C:49:D6
X509v3 Authority Key Identifier:
keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f0:24:66:ad:8f:e2:02:15:1b:1c:ca:d3:fa:30:ae:92:b5:
66:13:77:da:c3:82:14:b5:c4:bb:54:04:86:79:74:d9:cb:65:
d7:cf:4a:95:04:d3:b6:f9:ce:b2:dc:a0:a6:76:0d:cd:79:04:
f6:48:c1:8e:ab:b3:e5:ce:3f:ae:7a:3b:c0:7f:c0:60:c6:d9:
b1:10:d7:17:22:dd:f4:83:cb:44:a5:64:5a:1e:85:da:f3:03:
20:c8:e9:35:b6:75:b9:10:aa:73:f3:c3:a4:b0:bf:f2:53:6a:
7a:63:b9:c0:94:b7:2e:8e:ea:3f:e1:b3:d9:25:65:bc:de:d4:
5c:fe:22:2a:44:78:c5:ff:b1:d8:df:c6:6c:b6:d1:34:0a:ee:
f3:68:3c:ef:f8:a2:ed:16:22:e0:2a:bf:a5:28:5d:15:40:b2:
d4:c4:ce:93:02:c6:c7:0a:b6:fb:b1:2e:13:f5:80:ce:19:0e:
bd:87:35:da:68:b6:b5:9f:95:f7:83:41:8b:af:54:ec:16:52:
d4:a7:31:b3:6f:14:a6:b9:86:50:6d:8c:3e:22:36:e2:6a:c1:
5e:34:d8:08:65:39:6c:92:81:d1:8c:15:30:e0:33:ef:ef:e3:
65:4e:a2:91:8c:7f:4d:c4:d1:0c:dc:90:8e:16:34:fb:d0:8a:
96:ce:fd:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:22:07 2025 by rpki-client