Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
File: 50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json)
Hash identifier: Wjio4iHCkHBUWJAE9z5ywbHXtxhM2KHuquAx/qmCWdg=
Subject key identifier: 04:21:C4:24:14:90:5C:2C:D3:FB:E4:FC:8D:5D:BE:11:8F:5D:96:CC
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Certificate issuer: /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial: 01984AAEE9BCA249BFBE3C3876D1A4B3E760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
Manifest number: 0DC5
Signing time: Sun 27 Jul 2025 07:00:33 +0000
Manifest this update: Sun 27 Jul 2025 07:00:33 +0000
Manifest next update: Mon 28 Jul 2025 07:00:33 +0000
Files and hashes: 1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: sysva8j817inhDigqHWDl0UGg3F9nY88wFgGG+TU64U=)
2: FbdIrSoU0o1j3svdo45lLU5crQ8.roa (hash: ePZfK34nDhXAMqf0uiwurL97nW7VWI4tP25I7IkP7Oo=)
3: yZ3Po0hR1ZJyc1rv39YH9NNWuXs.roa (hash: 22bouj/6xCSX/ZXyHrbVMTQvQervlfTwQaA97vYRHBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e9:bc:a2:49:bf:be:3c:38:76:d1:a4:b3:e7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
Validity
Not Before: Jul 27 07:00:33 2025 GMT
Not After : Jul 28 07:00:33 2025 GMT
Subject: CN=0421c42414905c2cd3fbe4fc8d5dbe118f5d96cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:c5:2c:5e:50:e8:6a:6f:7f:3f:d2:44:24:
75:92:19:55:76:84:22:7d:c0:40:2e:f3:bc:e8:fe:
52:cc:3a:bb:b9:ee:ae:55:1f:f5:1b:ae:b6:4a:10:
7a:35:20:09:7f:25:17:d3:bc:b1:56:c4:1b:c0:93:
af:51:db:b4:24:fe:7b:7d:28:83:9b:3a:32:3f:df:
a0:05:44:68:6a:2a:96:97:8d:2f:a1:4b:28:9e:63:
39:97:44:fc:7a:f7:2b:f0:5f:0f:44:49:61:0e:ae:
77:3a:b1:4c:32:08:ea:5f:ab:83:f8:13:0d:49:40:
2c:6f:36:67:05:d5:db:93:a6:79:18:af:88:32:57:
27:1e:65:90:b2:dc:38:96:7a:74:f7:76:52:3c:93:
d3:e8:7e:70:e8:68:ed:94:4a:e7:2f:df:ea:a3:2a:
0c:f3:6d:38:77:ed:ba:79:8a:4d:ff:c4:74:84:59:
c6:d2:c1:3c:6d:f4:1f:a8:78:9f:66:83:7c:e8:eb:
c2:65:8a:7b:bf:25:50:53:1b:b8:7c:10:51:f9:f1:
f9:36:a1:c5:f0:65:55:a1:a7:9d:b3:ab:3b:b2:56:
82:95:f0:7e:fc:0d:de:d6:15:26:1b:ed:50:13:00:
eb:69:87:82:e1:d7:67:e7:c0:01:25:eb:1f:d1:be:
03:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:21:C4:24:14:90:5C:2C:D3:FB:E4:FC:8D:5D:BE:11:8F:5D:96:CC
X509v3 Authority Key Identifier:
keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:89:b2:54:52:8b:cd:4f:22:0c:7a:4b:57:23:5b:64:16:4a:
00:31:c6:c1:5a:d7:1d:44:71:81:95:80:ca:ed:97:c0:70:df:
a9:d4:64:d8:b9:c4:49:f3:c6:1d:a8:4e:72:20:6a:cf:15:5c:
c7:15:3d:1b:0b:57:d2:0a:ae:d6:61:df:19:97:56:d6:2b:90:
02:fb:cb:aa:7f:84:7a:79:fb:b1:5d:85:97:d2:fb:d6:30:2d:
56:1e:7f:d1:4b:51:9b:10:03:6c:72:01:62:e1:d4:03:48:94:
0e:35:51:fe:0c:40:ca:5d:59:d1:ab:c8:4b:f4:1f:a5:95:2b:
2d:ee:22:49:6b:88:73:25:a2:33:26:86:54:d7:9c:f8:da:7d:
05:76:29:b8:ad:84:f7:eb:50:35:9f:7e:76:ce:e1:2a:b9:91:
76:18:88:be:71:4e:e1:25:41:00:37:2b:45:91:c1:f7:21:f8:
df:6f:f7:b1:ae:f0:10:c6:3b:24:c4:2f:97:c6:b3:7b:de:c8:
e5:9e:26:ea:e3:48:06:65:df:ed:44:b7:98:06:f3:36:cf:5e:
e9:73:51:48:c6:4b:95:bd:17:5d:ed:b9:86:19:85:d4:bf:07:
ed:30:09:bd:33:f0:0a:ec:33:66:f6:0a:1b:41:74:a2:73:77:
a8:e9:bc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:58:22 2025 by rpki-client