Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
File: 50Du0o8tmU6yuDHLjvxkcDBtdGE.mft (raw, json)
Hash identifier: 8osQm4DRdk937oDQ+Im5LSc+xbdq5RS7gQv/nnUFc6M=
Subject key identifier: 11:62:A8:4A:7B:2C:C4:7C:75:6C:05:6B:56:EE:44:C6:9F:09:60:92
Authority key identifier: E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
Certificate issuer: /CN=e740eed28f2d994eb2b831cb8efc6470306d7461
Certificate serial: 0196865B13318899210E2846E22FA95628E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
Manifest number: 0D2D
Signing time: Wed 30 Apr 2025 11:00:37 +0000
Manifest this update: Wed 30 Apr 2025 11:00:37 +0000
Manifest next update: Thu 01 May 2025 11:00:37 +0000
Files and hashes: 1: 50Du0o8tmU6yuDHLjvxkcDBtdGE.crl (hash: xVwsCqla+kwutkvZLXOSFLXRhbdcm9VVd/xe3tQb1Zs=)
2: nIb9hACkrzkR8YbAdKP9wDLbBJc.roa (hash: GZXAKYA4rdv87pCnOscB54KXgGj+TJ2DGRrncRH4Kpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:13:31:88:99:21:0e:28:46:e2:2f:a9:56:28:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e740eed28f2d994eb2b831cb8efc6470306d7461
Validity
Not Before: Apr 30 11:00:37 2025 GMT
Not After : May 1 11:00:37 2025 GMT
Subject: CN=1162a84a7b2cc47c756c056b56ee44c69f096092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b8:97:65:6f:2e:fa:50:93:89:ad:1a:80:7e:
bd:c3:07:9f:90:fd:d2:bf:14:e2:4d:ba:72:0d:ac:
36:79:c9:77:cf:10:50:16:1c:c1:a3:96:c3:f0:f1:
b1:b1:64:4a:9b:32:a4:2c:f9:ea:f1:53:f9:04:fb:
5e:35:10:2b:41:bc:8d:65:a4:7e:7e:28:f5:73:0d:
e2:5b:af:3d:6a:50:6a:ee:90:a6:bb:d2:bd:fe:31:
36:6e:cd:90:87:1d:0c:b2:99:f8:46:17:a4:9e:af:
e7:8f:41:7c:2d:bf:5e:78:58:51:df:5e:8a:cb:d9:
1d:bb:59:ab:61:97:d0:d2:f6:f9:bd:ae:ae:f5:27:
58:81:a7:22:9f:84:82:34:2a:79:54:9a:92:27:59:
8c:1f:16:bb:70:20:c2:ad:83:e2:42:c5:00:39:8c:
92:56:82:f3:4a:10:6f:97:8e:6f:ba:16:7f:a6:31:
e0:94:f1:9a:8b:82:c7:8c:3f:1f:77:9d:b2:0e:ec:
e8:c5:7c:40:6f:e9:a5:b7:be:0b:fc:56:9a:d4:82:
e9:8a:25:20:78:a5:79:a4:62:3a:5c:bf:f1:2d:ed:
cd:95:b8:75:ea:d3:b2:72:2a:71:86:2b:d4:c8:b2:
88:d1:f4:04:11:b6:31:21:f5:3d:7c:c9:09:e6:4e:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:62:A8:4A:7B:2C:C4:7C:75:6C:05:6B:56:EE:44:C6:9F:09:60:92
X509v3 Authority Key Identifier:
keyid:E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8b:9a:a5:b9:29:3f:c9:0f:3a:ec:6a:e8:c8:96:bc:87:80:
45:24:f5:53:23:62:b4:ab:1d:fc:a6:c7:2f:2d:be:07:94:a2:
ec:dd:d2:8c:fb:93:2b:1f:6b:47:5a:fa:5e:d3:a7:9d:b7:eb:
a4:23:f4:c6:d2:ce:4d:b0:59:f0:27:d5:23:00:e4:97:a5:43:
d4:32:c3:c6:67:2c:63:ef:ac:6e:e5:d9:65:86:69:67:81:52:
86:22:f5:b9:e9:0f:bc:72:a3:91:05:23:5c:eb:76:e3:e8:52:
ce:0a:da:4b:7e:16:e2:95:59:19:a5:56:cc:11:a2:9a:20:81:
c8:dc:df:39:2a:2d:1a:1a:33:fe:6d:66:20:aa:c7:1f:c8:5f:
58:a3:c2:d3:c3:76:ba:b3:70:6d:97:ec:f5:6a:33:63:f5:3d:
9d:f5:39:dc:9b:8f:52:f1:56:c3:74:2e:14:80:b5:6f:8d:ca:
3f:8d:ce:de:f2:f1:46:bd:a8:e6:8f:1b:cc:de:32:13:51:7a:
1d:9f:03:8b:b9:11:42:c3:e8:51:c6:a5:ec:fa:06:b6:f0:b3:
94:16:e6:28:f8:f0:bc:9d:e2:f8:46:91:3e:74:df:46:13:a8:
af:26:53:bd:c6:08:24:97:85:98:8b:a5:f0:d5:7f:11:58:1a:
22:a7:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:23:17 2025 by rpki-client