Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
File: 50Du0o8tmU6yuDHLjvxkcDBtdGE.mft (raw, json)
Hash identifier: +QyeODO8hdPXpY2JAWNZ4af+QU87185MfwbF9JVzU6o=
Subject key identifier: 9C:3B:8E:8E:F3:D4:64:77:44:E5:F6:67:E5:B4:98:ED:E1:45:40:81
Authority key identifier: E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
Certificate issuer: /CN=e740eed28f2d994eb2b831cb8efc6470306d7461
Certificate serial: 0196BE5C0D924765DF839F4FF892753A2F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
Manifest number: 0D4A
Signing time: Sun 11 May 2025 08:00:25 +0000
Manifest this update: Sun 11 May 2025 08:00:25 +0000
Manifest next update: Mon 12 May 2025 08:00:25 +0000
Files and hashes: 1: 50Du0o8tmU6yuDHLjvxkcDBtdGE.crl (hash: F+AiPhNfnNuLQSFCuD8tRtS6q0zwuhhnZfNmIqm7rRw=)
2: nIb9hACkrzkR8YbAdKP9wDLbBJc.roa (hash: GZXAKYA4rdv87pCnOscB54KXgGj+TJ2DGRrncRH4Kpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:0d:92:47:65:df:83:9f:4f:f8:92:75:3a:2f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e740eed28f2d994eb2b831cb8efc6470306d7461
Validity
Not Before: May 11 08:00:25 2025 GMT
Not After : May 12 08:00:25 2025 GMT
Subject: CN=9c3b8e8ef3d4647744e5f667e5b498ede1454081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:35:41:1a:cd:71:c5:f1:d8:77:f7:65:4a:6b:
b6:74:65:a8:db:98:71:2e:4a:b0:8a:d3:77:d4:60:
e9:42:d1:2c:e7:e8:42:c9:88:20:f3:2c:bb:14:a4:
36:00:81:87:3c:0d:12:26:78:4d:84:9c:5f:d5:bd:
ac:07:9c:63:3a:88:73:3d:40:cf:cd:c3:2e:ea:c0:
d1:bc:3a:a4:a0:1e:9d:74:ff:cb:cf:de:4b:3e:90:
d4:18:76:13:5a:5a:36:41:f5:36:3d:af:49:f6:a5:
1f:03:19:45:c0:0b:30:49:79:7d:5f:5a:93:38:20:
ac:28:4f:13:0e:8d:60:e5:bc:8e:85:1f:d2:d2:58:
34:a6:ed:d2:44:bd:cd:57:30:8d:a1:03:a6:ea:20:
86:7f:ea:cf:76:7b:13:bf:e2:52:b6:17:5d:86:98:
6e:df:97:d0:99:d9:29:40:74:1a:bc:c1:69:32:af:
a8:26:7e:4a:a4:1c:96:22:c5:9e:56:d3:93:62:7c:
52:1f:9d:ee:4d:02:d6:16:31:98:27:27:24:0e:c0:
50:0a:34:62:30:f8:46:24:63:82:60:82:16:ce:cf:
c2:7d:48:8d:9d:c2:8c:68:ef:14:2d:9e:26:c0:a7:
e8:cf:02:fa:5b:8e:33:96:8a:99:e5:04:b8:1e:fe:
6c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:3B:8E:8E:F3:D4:64:77:44:E5:F6:67:E5:B4:98:ED:E1:45:40:81
X509v3 Authority Key Identifier:
keyid:E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:59:d8:b2:15:7f:3f:26:a9:8b:da:fb:5c:42:bf:08:81:3c:
28:80:77:d3:88:c0:40:1d:7f:32:b0:e2:67:c3:94:bc:7e:06:
2b:21:07:32:67:ac:8f:c4:44:93:32:9b:79:c1:4c:06:d6:99:
bb:ef:3e:f8:49:60:5b:8b:62:02:7a:62:a7:13:0f:bf:25:67:
ec:d7:30:c1:04:13:2f:b0:86:9f:5c:5f:c5:d1:7d:c3:08:3d:
78:fe:35:36:aa:b3:16:60:57:ba:0c:4f:99:00:35:9f:4f:d0:
35:82:05:24:d7:ca:1e:82:47:13:31:9a:ce:98:f2:3d:73:81:
4a:73:40:e5:b4:f2:a0:a1:c4:95:f3:14:7d:07:e1:47:42:d8:
38:52:91:59:5d:4f:e8:ce:3e:93:b4:4b:77:74:35:81:40:68:
be:ce:c9:cb:73:2e:5e:7c:14:ae:f2:6e:23:1a:eb:de:d0:30:
82:3a:3e:8b:e4:f5:a6:04:bb:ec:ca:cd:18:4f:10:66:d9:d1:
20:0d:11:1b:7a:11:9b:06:dd:e4:0c:ac:50:6f:65:3c:ea:f9:
7c:d1:4e:7c:86:46:4f:c0:79:b3:12:f2:43:11:f4:98:d4:fa:
5c:c3:87:33:82:30:d0:d8:87:28:70:f4:67:d6:39:a4:95:5d:
00:a0:e1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 10:30:17 2025 by rpki-client