Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
File: 50ul5zTP81BoFBYlRVZuMxxyS8A.mft (raw, json)
Hash identifier: J1SuNyV34v436bwVcmyHatNsu9aRNYHSayjPG7lP5Z0=
Subject key identifier: 79:BD:23:C1:C0:E9:F3:BE:F3:DF:EB:81:FE:5C:D7:CE:A8:B2:5C:3B
Authority key identifier: E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0
Certificate issuer: /CN=e74ba5e734cff3506814162545566e331c724bc0
Certificate serial: 0197C9F1E45433803DC4C9A30B6E33DFB1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
Manifest number: 0E6C
Signing time: Wed 02 Jul 2025 07:02:42 +0000
Manifest this update: Wed 02 Jul 2025 07:02:42 +0000
Manifest next update: Thu 03 Jul 2025 07:02:42 +0000
Files and hashes: 1: 50ul5zTP81BoFBYlRVZuMxxyS8A.crl (hash: f9fQTiK7znaf3jMM57GxdBCGvGnY5Etam8aCRif5WtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:e4:54:33:80:3d:c4:c9:a3:0b:6e:33:df:b1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74ba5e734cff3506814162545566e331c724bc0
Validity
Not Before: Jul 2 07:02:42 2025 GMT
Not After : Jul 3 07:02:42 2025 GMT
Subject: CN=79bd23c1c0e9f3bef3dfeb81fe5cd7cea8b25c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:99:4b:1e:46:83:aa:74:51:92:1f:b7:80:
b4:c1:96:9f:74:ae:de:bc:34:00:8a:16:d8:fc:dc:
d4:a4:02:5c:8e:0d:d3:d1:51:ba:73:ad:66:f4:7d:
44:38:26:1c:a2:ba:4a:f6:39:66:55:1a:76:7b:44:
9e:4a:80:4d:ff:25:5e:a0:95:3e:67:31:9e:db:b1:
05:05:43:c0:0d:95:9a:ef:d7:9a:42:1c:48:44:d8:
e5:92:ee:53:ca:fb:60:84:94:40:c4:6c:84:2f:24:
5c:2d:7e:2a:02:aa:ee:ed:15:22:33:1f:00:4e:da:
fa:66:9e:c9:1d:b2:f9:44:ac:52:79:1f:d8:59:19:
7b:89:8e:44:cb:8f:54:53:99:21:e0:c5:c7:80:48:
4a:b9:6e:af:7e:44:5a:b5:18:76:a8:62:53:67:a8:
71:e8:c2:5c:8a:29:40:2a:54:b2:88:7b:e4:1b:93:
98:69:81:48:98:c6:d0:77:92:60:e6:ca:bd:74:5b:
f4:ee:96:2b:fc:f0:c9:a3:ac:da:5c:1e:6a:b3:00:
b5:fb:27:2d:45:09:f1:39:4a:33:e7:52:17:4f:7f:
3f:82:e2:b8:ea:d6:45:d2:a4:28:a1:a7:5a:6a:ca:
b7:f4:35:93:0a:f8:f6:88:77:8f:80:0e:de:4f:d8:
5f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BD:23:C1:C0:E9:F3:BE:F3:DF:EB:81:FE:5C:D7:CE:A8:B2:5C:3B
X509v3 Authority Key Identifier:
keyid:E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ba:b5:82:c9:25:f6:2a:19:75:2d:c3:77:6f:52:07:15:6c:
da:d4:92:79:21:e5:dd:f3:75:38:ef:a5:c9:9d:a3:f6:50:44:
7e:43:71:71:88:d8:b6:22:28:05:82:d3:15:7e:b6:d5:c4:79:
f8:84:eb:75:c4:a7:bd:62:b3:81:4e:fe:39:18:4e:27:38:4c:
c2:c9:12:bc:70:6d:82:05:b5:66:90:6f:5e:9b:22:31:e4:35:
22:88:73:42:93:06:d5:7a:84:79:fa:61:8f:b8:fd:bb:b8:05:
2b:fb:b3:61:ee:5d:de:36:b6:37:cb:66:db:29:51:56:97:93:
12:06:43:20:3c:1f:ba:b1:37:5e:d9:be:b3:ee:2a:ca:a8:3c:
49:9f:67:72:7e:39:c5:62:1e:7d:2b:9c:ea:78:1d:5f:58:d5:
96:c0:57:ce:7f:7d:be:67:41:6c:c4:43:ff:c8:1f:43:21:68:
16:55:5f:49:15:11:13:6a:6e:2b:d7:17:52:79:ae:f9:3e:36:
18:ef:16:1e:2a:26:b6:03:79:54:68:10:94:cc:e6:2e:f8:da:
d2:c9:a4:c6:2f:e1:33:a3:da:ed:36:f6:19:f8:99:04:60:73:
ab:b0:d8:8e:51:5b:2d:49:58:f5:f0:d0:6d:6c:2b:ed:73:fe:
c1:45:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:19:24 2025 by rpki-client