Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
File: 50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json)
Hash identifier: joJm2kb/gUmTky6z5ofWKaX/pe0l2Pnkn27GCU/ATbg=
Subject key identifier: A7:D9:94:7C:B0:BB:83:2D:8A:28:87:BC:95:04:AF:48:1C:DF:D3:C5
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Certificate issuer: /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial: 019A4DE1A9083353AC4D758C7442A53F3F4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
Manifest number: 0ED0
Signing time: Tue 04 Nov 2025 08:00:25 +0000
Manifest this update: Tue 04 Nov 2025 08:00:25 +0000
Manifest next update: Wed 05 Nov 2025 08:00:25 +0000
Files and hashes: 1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: w96bD474s0fL0RnkEC4VYbFvIhVaYDUZOHE1eRXSQCY=)
2: yZ3Po0hR1ZJyc1rv39YH9NNWuXs.roa (hash: 22bouj/6xCSX/ZXyHrbVMTQvQervlfTwQaA97vYRHBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a9:08:33:53:ac:4d:75:8c:74:42:a5:3f:3f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
Validity
Not Before: Nov 4 08:00:25 2025 GMT
Not After : Nov 5 08:00:25 2025 GMT
Subject: CN=a7d9947cb0bb832d8a2887bc9504af481cdfd3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:df:5c:70:31:77:d1:81:76:b9:94:a5:3c:
d4:24:41:f8:91:ad:20:af:da:4d:8c:5f:e2:1e:66:
20:2f:94:69:72:1b:0c:b8:b6:ae:71:03:3a:d2:66:
73:9c:37:e5:95:63:aa:50:69:e0:05:5f:3a:5e:97:
3a:a1:c7:22:07:16:3a:5f:e7:b5:d2:a8:95:4c:1d:
7b:79:cc:0e:f7:24:fe:ee:1b:82:c3:0f:0e:bc:84:
3a:b4:d1:05:d3:c9:c8:8b:3b:29:d7:ec:57:86:36:
da:f8:34:92:fb:92:cb:e9:2a:f4:97:0c:4f:62:c8:
fd:74:1e:59:53:a2:ae:e9:12:c4:08:6a:a9:dd:71:
ad:00:cc:98:63:51:ba:8f:b2:c2:18:d0:5e:ce:34:
f5:58:23:c4:fe:cf:e5:70:2d:e6:1c:67:eb:59:fb:
34:cd:c8:04:8a:a5:dc:d7:30:c6:c4:89:08:99:33:
cf:85:a4:5d:72:fb:3e:62:64:47:f6:ed:9c:2c:ee:
b0:c0:f5:a2:62:c7:c3:1d:43:18:d7:ac:a7:f6:9c:
33:e0:60:b9:02:8b:8d:23:cf:86:de:81:cd:f7:4b:
7e:23:ff:50:1b:95:01:84:f3:a6:47:cf:69:7a:ed:
9c:29:c7:04:53:74:0e:54:41:87:5c:5c:da:4a:3c:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:94:7C:B0:BB:83:2D:8A:28:87:BC:95:04:AF:48:1C:DF:D3:C5
X509v3 Authority Key Identifier:
keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:7c:1e:7a:55:ee:74:43:66:d1:e5:e3:b7:e1:77:04:be:c5:
ef:37:02:f4:be:c4:a9:9d:76:67:92:93:88:b2:8f:c2:ca:94:
4e:c5:c5:1c:f3:ce:3c:ad:6f:43:d8:18:42:ff:40:4d:e1:a2:
06:6e:2b:de:a2:07:0c:9f:e1:1a:28:1e:58:d0:53:85:b6:c5:
17:c1:dd:dd:30:dc:e2:23:05:76:8a:d1:06:92:9a:11:3a:43:
7b:ce:e3:df:65:15:00:17:56:3f:c3:47:b1:7f:c5:e8:93:ca:
b6:f1:e7:2d:2d:32:30:f9:2c:c8:a2:b1:58:88:3b:a8:f1:30:
0d:92:97:a6:3d:ce:28:2d:ba:50:6e:0b:cd:67:42:96:4f:e3:
6d:6b:f7:54:0f:f8:c3:32:1f:de:1c:15:c6:5c:aa:5f:f3:ff:
f1:87:8c:40:e0:4f:30:b9:32:4a:37:f3:dc:bf:97:59:2f:15:
c2:01:77:f0:20:f3:e7:ef:13:05:8f:f2:ba:89:ed:fc:1b:57:
4a:73:56:f3:a3:24:2a:4f:7a:0a:07:a4:e7:c4:cb:20:b6:36:
59:90:85:08:66:34:51:30:88:9c:1b:14:1a:ab:a6:37:59:c5:
e7:82:ee:81:e6:45:32:3d:7e:bf:3d:0c:41:cb:14:b1:f4:77:
cf:78:2c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:29 2025 by rpki-client