Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
File: 50ul5zTP81BoFBYlRVZuMxxyS8A.mft (raw, json)
Hash identifier: qsk5eXeOFGyodx+VP/hJpeUWTudve3E+ys9iXIfVovo=
Subject key identifier: 99:AA:C6:7F:68:1F:9D:2E:28:03:CE:04:5B:69:D9:00:25:BB:DA:F0
Authority key identifier: E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0
Certificate issuer: /CN=e74ba5e734cff3506814162545566e331c724bc0
Certificate serial: 019A71B7A7E3260BF183BAE86C2BA52FD408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
Manifest number: 0FCC
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: 50ul5zTP81BoFBYlRVZuMxxyS8A.crl (hash: wDCjT6dlAMVhfNSi+16U7TUjQlTE44QbtiKfGTdUc0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a7:e3:26:0b:f1:83:ba:e8:6c:2b:a5:2f:d4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74ba5e734cff3506814162545566e331c724bc0
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=99aac67f681f9d2e2803ce045b69d90025bbdaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:ae:84:08:53:fa:ec:4e:f2:d1:c1:f9:0c:
32:d4:42:ea:cb:65:c7:1b:d9:84:6f:32:7d:21:1b:
45:7b:7a:42:ab:3e:8c:61:80:93:4f:eb:ed:5f:e5:
fd:33:f8:c7:00:d1:93:9d:b0:95:dd:20:17:46:7d:
83:60:6e:52:89:e1:e9:65:8b:15:fa:73:59:3e:d5:
f5:89:88:7b:25:63:fc:50:f4:94:8b:5e:99:a4:ba:
11:10:86:e0:56:d9:4c:13:83:08:15:b1:18:41:46:
f2:90:d2:1a:f1:4b:f5:b0:7b:9d:68:26:38:47:df:
40:75:42:85:86:42:4c:a8:d8:63:60:a5:dc:99:8d:
5f:ee:8d:fb:28:3d:2e:51:e9:e4:5d:12:89:1b:37:
c3:7d:44:f0:49:be:07:87:0b:f6:cf:06:46:54:0c:
8e:4f:47:c2:24:c4:eb:ea:17:6a:ff:6c:85:f9:8b:
09:e5:bb:3b:df:31:8e:a7:f0:5d:5a:e9:1f:54:8a:
4a:09:21:e6:94:ba:5e:ba:e7:0f:76:82:6c:a4:40:
04:59:e8:20:10:21:3a:92:73:52:bb:33:17:8b:c1:
2b:e5:a6:57:77:08:a4:7f:1f:86:d8:c4:96:05:c4:
65:55:fb:15:80:f5:2d:36:f9:b8:b7:c6:d9:06:9d:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AA:C6:7F:68:1F:9D:2E:28:03:CE:04:5B:69:D9:00:25:BB:DA:F0
X509v3 Authority Key Identifier:
keyid:E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bb:cb:79:0e:f2:ca:39:c4:5c:6f:b4:24:60:9c:de:ec:c4:
9e:95:bc:23:06:63:5f:42:c4:54:ab:9a:06:f6:77:fa:ca:95:
d5:ca:db:1d:2d:5f:f1:8f:f0:1a:0e:41:97:1f:29:c7:8f:c2:
99:51:15:66:72:93:ec:71:01:d2:b4:14:4e:67:1b:2e:bd:b6:
63:d8:c5:36:ed:fb:92:5c:40:b5:6e:7d:b0:22:7d:f3:5d:41:
7a:ba:e5:91:63:96:70:1a:b1:6f:54:1e:b1:6c:59:b1:e3:34:
61:4f:59:16:6e:6c:12:57:bf:ff:bd:d9:c4:67:dc:01:d9:d0:
ae:85:a3:fd:15:76:49:12:26:51:ad:e2:8b:1a:b5:62:3a:7e:
91:00:79:76:23:24:c9:93:e7:6a:ef:ba:d8:19:f9:5d:71:96:
87:bb:7f:94:3c:d5:7e:93:2c:4b:87:69:0e:01:68:89:d4:6a:
1b:0b:06:f6:72:7a:c7:5b:75:c3:8e:5c:0a:d7:d8:4f:ab:78:
22:66:88:4f:39:b4:1f:e0:9d:5e:60:29:53:02:c4:ac:38:65:
75:cc:5d:92:38:c0:6b:a0:30:b8:64:cc:12:f4:2d:fb:1e:f0:
75:e1:dc:65:ad:5e:96:43:dd:0d:06:a8:5b:30:0b:6e:48:d3:
35:d9:cc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:46 2025 by rpki-client