Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
File: 50eFUAaL94IgQIwl1hK8L7AkYME.mft (raw, json)
Hash identifier: nLVHGvMbCuyd9cQGoEFlsyn0C2j1SQ9eknsshw7050c=
Subject key identifier: 3C:C2:E0:47:65:96:A2:76:E5:CC:34:8B:6E:18:D9:48:B9:EC:98:87
Authority key identifier: E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
Certificate issuer: /CN=e7478550068bf78220408c25d612bc2fb02460c1
Certificate serial: 0198733DBB639DBDE9D7068F2A5957C4B334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
Manifest number: 0DDA
Signing time: Mon 04 Aug 2025 04:01:22 +0000
Manifest this update: Mon 04 Aug 2025 04:01:22 +0000
Manifest next update: Tue 05 Aug 2025 04:01:22 +0000
Files and hashes: 1: 50eFUAaL94IgQIwl1hK8L7AkYME.crl (hash: MRwrZhUeUozQ3vO/N+sJktncvRpc+LYzPOoeZpy5jNE=)
2: FbdIrSoU0o1j3svdo45lLU5crQ8.roa (hash: ePZfK34nDhXAMqf0uiwurL97nW7VWI4tP25I7IkP7Oo=)
3: yZ3Po0hR1ZJyc1rv39YH9NNWuXs.roa (hash: 22bouj/6xCSX/ZXyHrbVMTQvQervlfTwQaA97vYRHBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:bb:63:9d:bd:e9:d7:06:8f:2a:59:57:c4:b3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7478550068bf78220408c25d612bc2fb02460c1
Validity
Not Before: Aug 4 04:01:22 2025 GMT
Not After : Aug 5 04:01:22 2025 GMT
Subject: CN=3cc2e0476596a276e5cc348b6e18d948b9ec9887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:10:2a:a9:63:76:7a:15:a8:94:3b:c4:d4:
bf:28:00:75:b6:ba:e6:18:9f:f7:b8:5f:c1:bf:4b:
8e:8e:6d:58:af:be:f8:2a:ad:92:eb:9a:ae:d7:72:
f2:3a:80:36:a0:9e:53:76:3a:66:52:d8:97:11:f8:
69:55:e7:71:40:e3:9d:61:d9:ce:ac:26:de:09:0e:
4b:c0:6b:a3:4d:84:d4:9f:e1:72:b4:83:74:5f:fa:
6b:92:b9:7f:82:a2:97:0a:0b:36:01:e0:9d:a3:e1:
81:6f:d9:f8:71:c3:c5:21:8e:e8:90:57:3b:c8:24:
a4:fe:11:ea:36:ef:d5:26:f9:43:3d:37:e1:9e:8b:
83:38:aa:8f:86:81:7e:72:20:6e:15:e5:57:08:45:
2c:80:13:cb:d2:01:22:74:8b:39:4f:0b:c4:87:d0:
71:50:ec:3f:cf:9d:80:06:57:2f:11:c6:e5:e9:83:
dd:71:61:7f:58:bb:4c:e2:a8:18:34:1a:81:ed:53:
63:cb:bb:18:3b:39:f1:e7:45:a2:c6:da:87:b3:2f:
b0:d1:26:49:91:01:74:1f:7c:9c:a2:bc:6a:df:4f:
40:14:02:fa:c2:1c:ef:38:bd:fe:58:47:af:79:f4:
41:62:6d:bb:c4:cc:e2:95:64:40:6c:7a:06:bc:82:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C2:E0:47:65:96:A2:76:E5:CC:34:8B:6E:18:D9:48:B9:EC:98:87
X509v3 Authority Key Identifier:
keyid:E7:47:85:50:06:8B:F7:82:20:40:8C:25:D6:12:BC:2F:B0:24:60:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50eFUAaL94IgQIwl1hK8L7AkYME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/635511-71f3-4f57-9139-7da3cd253bf6/1/50eFUAaL94IgQIwl1hK8L7AkYME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:1f:63:50:77:2a:f6:31:f9:c1:03:75:5d:fa:e6:7b:62:95:
71:f6:40:62:8e:ac:2f:e6:99:01:8f:02:fa:d9:69:b8:2b:4b:
01:f7:c5:8a:97:2b:6c:0e:15:fd:13:8c:05:7f:56:13:7d:5e:
9d:c6:85:81:08:8a:02:fa:06:77:fc:bc:80:2d:38:b8:72:a0:
d4:16:b1:75:a1:56:3e:bb:16:73:90:b0:10:1f:5a:67:07:0f:
1b:dc:27:49:87:e8:fc:c2:0c:db:cc:37:0e:a2:38:51:8e:f1:
78:77:45:ef:8b:94:45:1b:fd:b3:16:ef:50:a4:86:0c:b4:90:
48:dc:91:fc:80:02:b9:4c:33:96:98:40:cb:bb:fd:b9:c1:83:
8f:62:7d:11:7e:7b:16:5d:48:a3:d3:98:d1:bc:e2:4d:99:9b:
47:4d:59:46:74:cd:2c:e5:d7:12:aa:b8:7d:b9:39:00:05:c1:
08:18:7c:32:4b:1d:71:a2:8a:1f:e8:30:fa:72:dd:9f:cf:02:
9f:04:45:95:f5:36:56:e1:53:02:2c:97:61:bc:97:1d:b6:94:
a8:0e:10:0a:b9:65:f3:25:06:1e:91:af:13:a1:76:18:bb:a4:
e8:c0:27:1e:91:d8:37:b0:7a:b9:9f:6c:46:f4:19:2a:86:5d:
ae:a0:bb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:48 2025 by rpki-client