
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
File: 50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json)
Hash identifier: n/ODV11AEOqStPxlrLSGfj9SeTqdSOliITTGwJmw73w=
Subject key identifier: ED:19:AE:90:D6:C4:2C:DA:BA:BF:E9:69:E9:2D:83:2E:C2:A8:12:9F
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Certificate issuer: /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial: 01976E87521397EF7DEF0D27CC0747E2452A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
Manifest number: 0D53
Signing time: Sat 14 Jun 2025 13:00:51 +0000
Manifest this update: Sat 14 Jun 2025 13:00:51 +0000
Manifest next update: Sun 15 Jun 2025 13:00:51 +0000
Files and hashes: 1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: 3gIbOTBfEuTNWms7RcU1G8V2J0ZxnGJGVO0c+6lSPT0=)
2: FbdIrSoU0o1j3svdo45lLU5crQ8.roa (hash: ePZfK34nDhXAMqf0uiwurL97nW7VWI4tP25I7IkP7Oo=)
3: yZ3Po0hR1ZJyc1rv39YH9NNWuXs.roa (hash: 22bouj/6xCSX/ZXyHrbVMTQvQervlfTwQaA97vYRHBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:52:13:97:ef:7d:ef:0d:27:cc:07:47:e2:45:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
Validity
Not Before: Jun 14 13:00:51 2025 GMT
Not After : Jun 15 13:00:51 2025 GMT
Subject: CN=ed19ae90d6c42cdababfe969e92d832ec2a8129f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:ec:1f:f2:17:19:7c:af:ac:4e:8b:fd:00:
87:90:5a:60:21:0f:7d:65:ca:13:98:fa:0e:0f:6d:
ba:ce:c5:f6:3d:cc:49:1d:dd:f7:81:43:64:dc:a8:
23:91:2d:50:19:3b:09:8e:7a:cd:f8:e6:4f:d0:c0:
3f:5c:b6:aa:ee:18:bc:77:bb:ad:7c:71:aa:a1:b7:
8c:d1:29:30:3c:78:81:62:47:e4:44:c2:2c:16:18:
e8:e5:2c:a0:23:92:14:f0:b0:05:59:50:41:d9:06:
c9:6e:02:ae:97:fa:bf:eb:4d:fb:c0:75:3c:ca:c3:
cd:03:35:85:11:2e:67:5e:b2:76:f7:b2:27:fe:5b:
f3:86:58:be:02:30:29:b1:3c:85:38:a3:9d:44:57:
6c:13:6d:ac:08:a3:a9:49:ab:e7:ee:9b:0b:58:2b:
13:48:ff:32:c8:9d:ba:f4:e3:26:a0:c6:88:57:17:
83:ba:8c:57:04:56:81:11:3f:02:4b:dd:a2:e0:3d:
8d:a8:82:df:57:64:7f:a0:4c:a5:67:3b:97:33:90:
8c:8f:f9:87:1e:48:eb:cf:8e:3b:e4:9c:41:97:c4:
c7:bc:65:88:63:6d:65:56:25:d5:25:81:2f:fd:db:
f9:75:72:f8:25:ea:79:cb:3b:5e:e7:85:c3:00:f9:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:19:AE:90:D6:C4:2C:DA:BA:BF:E9:69:E9:2D:83:2E:C2:A8:12:9F
X509v3 Authority Key Identifier:
keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:dc:e1:95:ae:40:f5:63:f5:3e:66:64:ab:b8:36:15:a6:e4:
6d:3c:c9:2e:95:69:55:7e:2d:ca:ec:c5:93:29:b5:a9:02:58:
8b:5d:99:aa:23:c4:f4:b5:c1:3e:93:77:42:73:b9:c8:bc:23:
c3:52:f8:9b:a7:bd:23:9d:63:cf:7e:0d:4e:61:fc:27:c1:8a:
b5:19:04:ba:e4:c4:e3:1a:b5:7a:fb:f2:3a:e4:82:16:6c:83:
e2:92:3a:72:75:a8:00:20:dd:e8:39:f4:cd:b6:dd:15:b5:06:
1c:59:30:67:6a:0f:d5:4b:70:33:ca:bb:32:63:66:4d:0f:0d:
bc:56:4c:55:9c:ed:3c:a1:28:cc:39:07:7a:d2:e6:79:f2:c7:
b5:70:ab:1e:ff:f4:c8:3f:2a:09:0e:a2:40:bb:73:6a:ce:1c:
e2:8c:8d:87:09:1c:2f:04:a4:12:8e:27:e6:57:09:73:14:d2:
5e:7a:d6:30:02:c2:1a:91:d9:3f:53:9e:05:41:17:ee:6e:f6:
a4:33:d7:5f:8b:dc:a8:a1:79:c7:09:06:65:45:9b:d0:c3:c4:
4f:f3:e2:ed:64:83:d1:16:34:b3:6a:ca:5f:3a:3c:f3:24:3b:
f5:d6:98:7b:ff:2a:50:2b:76:b7:1b:cd:52:29:62:3b:60:c9:
88:22:87:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:15:03 2025 by rpki-client