Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
File: 50ul5zTP81BoFBYlRVZuMxxyS8A.mft (raw, json)
Hash identifier: ooTYVvBOyZY50xXR0f20yV9FiJ8iLCthIRsZjPyWhUQ=
Subject key identifier: 6A:8E:75:39:68:6C:6A:47:88:85:75:DB:8E:9B:5C:92:86:61:33:D9
Authority key identifier: E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0
Certificate issuer: /CN=e74ba5e734cff3506814162545566e331c724bc0
Certificate serial: 01965CF1C321E6493F9CBD85C70DE63A82CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
Manifest number: 0DAF
Signing time: Tue 22 Apr 2025 10:01:10 +0000
Manifest this update: Tue 22 Apr 2025 10:01:10 +0000
Manifest next update: Wed 23 Apr 2025 10:01:10 +0000
Files and hashes: 1: 50ul5zTP81BoFBYlRVZuMxxyS8A.crl (hash: GNIlFSPsITMZR53QfGriPT3RMSMoex0/4h9kBIIL8Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:c3:21:e6:49:3f:9c:bd:85:c7:0d:e6:3a:82:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74ba5e734cff3506814162545566e331c724bc0
Validity
Not Before: Apr 22 10:01:10 2025 GMT
Not After : Apr 23 10:01:10 2025 GMT
Subject: CN=6a8e7539686c6a47888575db8e9b5c92866133d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:75:00:ed:af:47:6c:b7:90:ce:a0:64:c9:
2b:c7:fa:c8:76:04:f1:c6:44:ea:bb:67:c9:d3:1f:
a2:d6:86:49:00:1d:a1:a6:f8:6b:9f:fc:1f:7d:f1:
4a:f8:db:f8:82:24:66:88:4e:50:3f:ee:9b:bf:6f:
db:c8:a9:f4:3b:56:fa:5b:3b:78:cf:e6:60:cc:65:
c7:2c:c9:ba:23:c5:ee:21:60:e7:63:fd:f3:ad:ff:
6c:fa:b9:b1:ac:8e:d2:b3:93:2f:5b:c6:61:d4:8d:
63:89:c0:b6:8d:7d:61:c6:04:3b:fa:1c:ca:6a:24:
18:c1:59:60:90:ae:6e:4f:dd:44:2f:3e:93:ee:28:
fc:06:2c:8e:eb:97:2b:08:b6:93:f2:86:0d:98:e8:
70:35:6b:6c:21:58:7d:c8:ac:6e:b4:f9:b6:4b:5f:
25:1f:30:d7:0f:44:91:c1:30:0e:5b:ae:28:f6:b8:
48:80:86:ca:bd:94:69:f3:87:1f:15:86:33:44:f7:
86:79:83:ec:13:b2:aa:8f:cc:8c:3c:f0:a2:2c:f1:
c9:39:ce:f2:12:42:86:f8:19:ae:e5:6f:24:d3:38:
ca:c2:9a:14:13:22:34:e6:1b:72:78:e2:da:0a:d5:
25:ea:f2:82:c3:76:ab:dd:73:51:8f:c3:60:d0:fe:
97:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8E:75:39:68:6C:6A:47:88:85:75:DB:8E:9B:5C:92:86:61:33:D9
X509v3 Authority Key Identifier:
keyid:E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cb:cf:57:21:29:bb:6c:b2:96:f8:3d:22:9e:85:59:0e:61:
cd:13:80:89:15:64:58:e7:ab:a7:2b:17:ed:0a:fa:a7:89:da:
cd:df:83:b1:75:64:ad:bc:10:b1:f5:e4:e7:5b:8a:bb:12:0b:
cc:e8:6c:36:61:5a:97:ef:46:a1:e4:9e:41:15:b1:7e:6a:70:
57:1f:57:8a:ef:35:ae:fb:d5:d4:df:0e:2b:f8:2d:2e:90:89:
65:a2:b6:22:4f:d1:8c:08:c6:16:5c:1a:9e:5c:3c:02:7a:a0:
85:e5:81:a1:ee:9b:4c:0c:6b:30:e5:35:9b:48:fc:15:1b:2f:
bb:86:dd:a6:d0:86:35:9f:8a:87:52:1c:28:94:43:19:de:dc:
7b:7b:9d:29:d1:ca:28:cf:4e:7f:0c:07:0a:97:1e:41:2b:ed:
6e:ca:98:f3:d5:a7:9d:a5:03:75:77:38:ef:a8:0f:5d:76:67:
1d:1e:30:7e:1e:4c:80:26:74:9b:ae:9b:a1:9f:4a:b0:96:68:
bd:9a:e2:8a:b5:f7:53:fe:3c:39:07:9c:f3:86:74:4e:9d:07:
2f:2a:1a:96:19:a2:22:47:b9:ed:7a:43:85:04:3a:6e:6d:e3:
79:4e:93:64:d4:9c:be:e0:7e:c3:a5:d1:88:72:08:4a:68:dc:
c9:82:a7:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZc8cMh5kk/nL2Fxw3mOoLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NGJhNWU3MzRjZmYzNTA2ODE0MTYyNTQ1NTY2ZTMzMWM3
MjRiYzAwHhcNMjUwNDIyMTAwMTEwWhcNMjUwNDIzMTAwMTEwWjAzMTEwLwYDVQQD
Eyg2YThlNzUzOTY4NmM2YTQ3ODg4NTc1ZGI4ZTliNWM5Mjg2NjEzM2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJx1AO2vR2y3kM6gZMkrx/rIdgTx
xkTqu2fJ0x+i1oZJAB2hpvhrn/wfffFK+Nv4giRmiE5QP+6bv2/byKn0O1b6Wzt4
z+ZgzGXHLMm6I8XuIWDnY/3zrf9s+rmxrI7Ss5MvW8Zh1I1jicC2jX1hxgQ7+hzK
aiQYwVlgkK5uT91ELz6T7ij8BiyO65crCLaT8oYNmOhwNWtsIVh9yKxutPm2S18l
HzDXD0SRwTAOW64o9rhIgIbKvZRp84cfFYYzRPeGeYPsE7Kqj8yMPPCiLPHJOc7y
EkKG+Bmu5W8k0zjKwpoUEyI05htyeOLaCtUl6vKCw3ar3XNRj8Ng0P6XmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqOdTlobGpHiIV1246bXJKGYTPZMB8GA1UdIwQY
MBaAFOdLpec0z/NQaBQWJUVWbjMcckvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xMTRkNDItZWNiZS00Nzk2LThiM2Qt
YWU1YzI3MmQ0NTQxLzEvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xMTRkNDItZWNiZS00Nzk2LThiM2QtYWU1YzI3MmQ0NTQx
LzEvNTB1bDV6VFA4MUJvRkJZbFJWWnVNeHh5UzhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsvPVyEp
u2yylvg9Ip6FWQ5hzROAiRVkWOerpysX7Qr6p4nazd+DsXVkrbwQsfXk51uKuxIL
zOhsNmFal+9GoeSeQRWxfmpwVx9Xiu81rvvV1N8OK/gtLpCJZaK2Ik/RjAjGFlwa
nlw8AnqgheWBoe6bTAxrMOU1m0j8FRsvu4bdptCGNZ+Kh1IcKJRDGd7ce3udKdHK
KM9OfwwHCpceQSvtbsqY89WnnaUDdXc476gPXXZnHR4wfh5MgCZ0m66boZ9KsJZo
vZriirX3U/48OQec84Z0Tp0HLyoalhmiIke57XpDhQQ6bm3jeU6TZNScvuB+w6XR
iHIISmjcyYKn1Q==
-----END CERTIFICATE-----
Generated at Tue Apr 22 18:51:14 2025 by rpki-client