Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
File: 50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json)
Hash identifier: EBHpr3aC+7EQTeFgYd9E7tR0rYDVzdndDqEU79sEPIw=
Subject key identifier: FB:34:15:C7:9C:42:CF:A3:CF:BF:12:B5:A2:71:46:19:CB:65:BD:0F
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Certificate issuer: /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial: 019673794C9C0EE9955098F8035965D7E310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
Manifest number: 0CD1
Signing time: Sat 26 Apr 2025 19:00:51 +0000
Manifest this update: Sat 26 Apr 2025 19:00:51 +0000
Manifest next update: Sun 27 Apr 2025 19:00:51 +0000
Files and hashes: 1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: gZafisIoQHcW7HPlYsLu3/9bZWy8PaQ+vOQ6011uuzs=)
2: FbdIrSoU0o1j3svdo45lLU5crQ8.roa (hash: ePZfK34nDhXAMqf0uiwurL97nW7VWI4tP25I7IkP7Oo=)
3: yZ3Po0hR1ZJyc1rv39YH9NNWuXs.roa (hash: 22bouj/6xCSX/ZXyHrbVMTQvQervlfTwQaA97vYRHBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:79:4c:9c:0e:e9:95:50:98:f8:03:59:65:d7:e3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
Validity
Not Before: Apr 26 19:00:51 2025 GMT
Not After : Apr 27 19:00:51 2025 GMT
Subject: CN=fb3415c79c42cfa3cfbf12b5a2714619cb65bd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:bb:3e:2c:e7:d4:d0:e1:3b:a4:3f:9f:08:
da:15:d8:92:69:3c:01:29:cb:c3:75:88:cd:12:79:
b2:91:cb:12:12:3e:ad:f1:ac:66:d6:0c:7e:cd:e2:
2c:6d:12:dc:89:69:c3:9a:ec:9f:94:20:df:d4:fb:
5c:9c:81:5d:a9:5a:76:9e:3c:1f:e9:a2:4c:35:8b:
70:10:3f:1e:d1:33:0b:03:91:3e:a9:34:a5:24:59:
38:57:1f:59:86:a6:16:6f:c4:1a:f6:18:32:7e:02:
4b:b7:8c:08:fa:c4:75:58:76:bd:27:0e:18:7f:80:
1b:3b:41:9f:86:fe:1c:06:45:21:00:8d:cf:d6:78:
5e:a9:7b:b9:43:25:94:fa:13:3b:8e:d0:48:07:0d:
33:a5:ad:c9:73:8f:84:86:2c:84:18:a5:66:2e:e8:
d9:79:0d:44:39:8c:52:5c:a5:8c:ea:f9:56:d9:de:
6f:f4:17:a3:07:b1:20:b2:78:ff:6e:ef:8b:88:af:
a4:64:84:5a:00:0c:7a:1d:d0:68:18:09:f0:61:22:
a9:33:4e:62:f9:08:8a:93:47:8e:f2:b1:68:21:03:
77:c9:0f:10:08:43:55:30:45:f0:05:c4:cd:d6:05:
71:e8:a7:e5:d5:b3:73:45:85:c5:9f:1e:86:25:1f:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:34:15:C7:9C:42:CF:A3:CF:BF:12:B5:A2:71:46:19:CB:65:BD:0F
X509v3 Authority Key Identifier:
keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:55:bf:36:b7:27:ff:fe:14:ad:05:64:15:ad:45:5c:66:7c:
21:a5:66:ef:bb:5b:eb:09:76:d3:b6:8f:90:11:d7:b9:fa:49:
83:de:db:ee:ba:10:f6:c2:30:a2:ad:46:de:f3:98:8d:17:49:
1b:5c:4c:27:ba:9f:9f:51:47:81:6a:89:d8:16:00:f1:68:8a:
75:a0:58:99:99:35:20:c0:d8:6d:13:64:b9:82:5f:2d:bd:d5:
f2:b8:cc:0c:cb:af:38:65:0f:8d:f4:b2:3f:2c:c3:bd:80:67:
76:2a:25:d3:46:62:45:d3:f5:7c:3a:ed:44:4e:5e:01:9e:fd:
99:43:03:b7:6b:5e:c4:7a:d5:64:1d:ae:06:d4:99:b6:60:bf:
23:cf:a7:97:0a:83:da:b8:23:81:79:07:4c:3a:08:cc:71:1b:
e3:8d:79:0b:f7:a5:ef:dd:44:f4:f0:15:e7:e0:07:95:43:ff:
91:4d:a8:20:4b:0c:63:15:69:54:b8:47:08:4d:72:7f:54:df:
e0:24:a5:9d:f6:06:a6:08:13:16:24:ef:4e:69:1d:b2:1c:0b:
f6:aa:a0:1a:28:d3:f8:8d:d5:1a:40:70:75:3b:3f:53:f0:07:
88:0c:8e:2b:68:4c:a9:36:34:c0:63:0e:d8:98:46:66:10:29:
05:9e:7a:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzeUycDumVUJj4A1ll1+MQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NDc4NTUwMDY4YmY3ODIyMDQwOGMyNWQ2MTJiYzJmYjAy
NDYwYzEwHhcNMjUwNDI2MTkwMDUxWhcNMjUwNDI3MTkwMDUxWjAzMTEwLwYDVQQD
EyhmYjM0MTVjNzljNDJjZmEzY2ZiZjEyYjVhMjcxNDYxOWNiNjViZDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLm7Pizn1NDhO6Q/nwjaFdiSaTwB
KcvDdYjNEnmykcsSEj6t8axm1gx+zeIsbRLciWnDmuyflCDf1PtcnIFdqVp2njwf
6aJMNYtwED8e0TMLA5E+qTSlJFk4Vx9ZhqYWb8Qa9hgyfgJLt4wI+sR1WHa9Jw4Y
f4AbO0Gfhv4cBkUhAI3P1nheqXu5QyWU+hM7jtBIBw0zpa3Jc4+EhiyEGKVmLujZ
eQ1EOYxSXKWM6vlW2d5v9BejB7Egsnj/bu+LiK+kZIRaAAx6HdBoGAnwYSKpM05i
+QiKk0eO8rFoIQN3yQ8QCENVMEXwBcTN1gVx6Kfl1bNzRYXFnx6GJR9srwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPs0FcecQs+jz78StaJxRhnLZb0PMB8GA1UdIwQY
MBaAFOdHhVAGi/eCIECMJdYSvC+wJGDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzkt
N2RhM2NkMjUzYmY2LzEvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82MzU1MTEtNzFmMy00ZjU3LTkxMzktN2RhM2NkMjUzYmY2
LzEvNTBlRlVBYUw5NElnUUl3bDFoSzhMN0FrWU1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlW/Nrcn
//4UrQVkFa1FXGZ8IaVm77tb6wl207aPkBHXufpJg97b7roQ9sIwoq1G3vOYjRdJ
G1xMJ7qfn1FHgWqJ2BYA8WiKdaBYmZk1IMDYbRNkuYJfLb3V8rjMDMuvOGUPjfSy
PyzDvYBndiol00ZiRdP1fDrtRE5eAZ79mUMDt2texHrVZB2uBtSZtmC/I8+nlwqD
2rgjgXkHTDoIzHEb4415C/el791E9PAV5+AHlUP/kU2oIEsMYxVpVLhHCE1yf1Tf
4CSlnfYGpggTFiTvTmkdshwL9qqgGijT+I3VGkBwdTs/U/AHiAyOK2hMqTY0wGMO
2JhGZhApBZ56IA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:43 2025 by rpki-client