Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
File: 50Du0o8tmU6yuDHLjvxkcDBtdGE.mft (raw, json)
Hash identifier: ReFTH7cvW75qq+aqsHU+GZWiuUHOnDtvZcEQRJKKGto=
Subject key identifier: 26:CD:08:01:F9:7C:9B:83:69:82:74:8E:9A:2F:1F:08:18:BE:CF:6A
Authority key identifier: E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
Certificate issuer: /CN=e740eed28f2d994eb2b831cb8efc6470306d7461
Certificate serial: 0196884970717695EEDFE6049469C01240A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
Manifest number: 0D2E
Signing time: Wed 30 Apr 2025 20:00:36 +0000
Manifest this update: Wed 30 Apr 2025 20:00:36 +0000
Manifest next update: Thu 01 May 2025 20:00:36 +0000
Files and hashes: 1: 50Du0o8tmU6yuDHLjvxkcDBtdGE.crl (hash: WIDBbofhVjnGeAf1VTDlub3Ke70WqHMhSMk/5mADMgs=)
2: nIb9hACkrzkR8YbAdKP9wDLbBJc.roa (hash: GZXAKYA4rdv87pCnOscB54KXgGj+TJ2DGRrncRH4Kpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:70:71:76:95:ee:df:e6:04:94:69:c0:12:40:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e740eed28f2d994eb2b831cb8efc6470306d7461
Validity
Not Before: Apr 30 20:00:36 2025 GMT
Not After : May 1 20:00:36 2025 GMT
Subject: CN=26cd0801f97c9b836982748e9a2f1f0818becf6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:b6:64:f7:25:cc:4c:4a:ba:bd:6f:5b:8b:
21:e4:2f:73:1d:f7:83:02:8e:b6:50:22:f6:56:98:
6d:fd:d2:a5:48:83:9c:04:2a:33:4f:6f:18:54:92:
9d:89:32:d0:8a:32:2b:df:ec:2d:2e:10:fe:8c:03:
f8:fc:d6:19:f8:19:50:c7:c5:4f:fa:52:d8:2f:d4:
dd:8b:e0:02:ab:bf:74:4f:e9:2c:de:4a:4a:63:87:
83:f5:5f:df:61:7c:e1:ac:ba:db:3e:09:77:d8:da:
64:b0:81:4b:fa:ec:f9:c9:e0:90:01:09:62:98:95:
7c:1a:cc:42:11:4d:27:d0:b8:3c:e6:6e:85:0e:a9:
2c:58:c9:7a:ff:85:c6:55:ce:94:15:00:7c:d4:4c:
60:04:af:66:98:66:3f:9a:7a:2d:23:f5:dd:5a:8d:
ef:3f:9a:2c:74:fc:79:14:26:84:6b:d1:c8:6b:6e:
e0:a0:7e:44:37:78:63:47:7f:a0:6b:4a:55:b2:28:
2e:81:af:6c:77:01:bf:bc:f8:98:cf:4f:ea:d9:66:
6e:9a:db:5c:27:b7:98:b3:86:bf:40:b3:38:4f:8c:
bc:6a:33:44:bf:d7:6f:d3:d2:ec:56:93:9a:a9:c9:
ad:48:6e:e9:f3:e9:68:a7:fc:a6:b2:58:bf:7b:cc:
98:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CD:08:01:F9:7C:9B:83:69:82:74:8E:9A:2F:1F:08:18:BE:CF:6A
X509v3 Authority Key Identifier:
keyid:E7:40:EE:D2:8F:2D:99:4E:B2:B8:31:CB:8E:FC:64:70:30:6D:74:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50Du0o8tmU6yuDHLjvxkcDBtdGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4d200d-eae5-44da-8ee3-09595e9cd6c2/1/50Du0o8tmU6yuDHLjvxkcDBtdGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8b:36:27:db:09:79:89:38:ae:4f:49:9c:87:00:b5:61:fd:
46:90:0a:6e:a0:73:96:2d:a3:92:84:63:c0:cc:56:c9:98:07:
b0:0d:f6:0f:05:9f:32:58:b7:49:b2:f7:91:10:1d:f9:4d:ea:
57:15:33:15:86:65:0b:22:20:7d:69:a3:a2:48:30:c9:b2:97:
88:6a:ff:87:41:56:fd:06:43:5e:9d:28:b3:66:d5:40:24:e1:
eb:54:96:ff:32:56:73:09:d4:55:44:17:b7:f4:34:02:f7:57:
a8:f9:43:56:a1:96:53:b9:bb:d2:25:9c:e9:d0:e3:71:cf:7b:
73:bc:09:aa:65:ee:4a:c0:15:00:f0:30:ad:00:a2:66:91:55:
5a:63:46:cd:23:e1:5b:13:07:17:99:80:b3:82:66:df:92:eb:
b1:94:14:fc:b2:8a:b8:0e:15:22:d9:1a:92:bf:6a:39:bf:c4:
39:2f:6a:60:d2:69:46:de:85:3e:ec:6c:f4:fd:0a:f2:a5:64:
53:2f:48:ed:06:5c:e2:e4:68:1b:6d:72:dc:bf:1b:da:12:a2:
6f:ed:f9:48:df:63:14:f9:0a:d1:7a:ad:36:ab:9a:18:57:4a:
ab:d3:a1:68:b4:26:e6:99:9a:b4:51:10:24:6f:10:ba:5e:6d:
56:62:27:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:29:05 2025 by rpki-client