Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier: BMd01+vpViicWDKh18uDJHUTlwET89J9KSHqECCvLbM=
Subject key identifier: E5:DA:C0:48:8D:66:7D:4A:C4:9D:00:A3:28:1F:2E:DF:63:14:3B:97
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial: 019922FA51390A7AD6DD5C59F80B88881DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number: 0CED
Signing time: Sun 07 Sep 2025 07:00:54 +0000
Manifest this update: Sun 07 Sep 2025 07:00:54 +0000
Manifest next update: Mon 08 Sep 2025 07:00:54 +0000
Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: dlI22n42xI14vQgFYlfiq1fhS1GzuGmEKl2B52IYkOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:51:39:0a:7a:d6:dd:5c:59:f8:0b:88:88:1d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Validity
Not Before: Sep 7 07:00:54 2025 GMT
Not After : Sep 8 07:00:54 2025 GMT
Subject: CN=e5dac0488d667d4ac49d00a3281f2edf63143b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d8:16:46:83:07:98:a6:af:1b:08:6d:2d:88:
d5:ff:93:4b:de:58:5d:da:1e:f2:bf:72:fc:2d:1c:
7c:70:46:02:01:9d:bd:fe:de:e0:f3:f5:fa:a2:f3:
66:7d:8a:80:7d:2d:d8:ce:6a:c1:95:3e:29:8b:62:
f1:b0:99:00:2d:9e:b8:2f:c9:97:9b:81:1c:e8:40:
c5:0f:e7:e9:3c:ca:23:5e:05:4e:1f:2d:69:4e:af:
bf:8b:04:ab:fe:f3:fd:47:c5:95:bb:95:d6:42:54:
1a:f3:fa:a5:45:a9:cf:92:89:c6:4b:4c:5c:b8:e8:
89:e6:51:f3:64:6a:d9:84:b2:cc:99:94:63:45:65:
8d:83:ff:2a:84:6f:9d:0b:76:c9:11:19:ad:e0:84:
43:22:9d:be:6d:43:33:cd:1a:f3:c9:47:ae:a9:e0:
f1:7a:96:ae:73:e6:02:3f:23:af:5f:d4:5b:fb:e4:
97:28:8e:26:0b:87:b1:93:11:00:e5:9b:63:df:0c:
e6:e5:d0:b6:c7:84:88:25:bd:cc:8e:dc:03:a3:56:
5a:90:09:ac:1b:57:e5:9b:c0:f7:3c:83:2b:29:15:
13:fd:51:60:05:cb:f3:e1:c8:08:22:c8:f5:37:c5:
b7:a6:e5:9a:3f:cc:9f:c2:4e:75:c7:8b:6a:03:82:
5d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DA:C0:48:8D:66:7D:4A:C4:9D:00:A3:28:1F:2E:DF:63:14:3B:97
X509v3 Authority Key Identifier:
keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:65:f6:8e:d9:38:0d:7a:b1:22:a9:da:68:fd:90:5d:d6:89:
86:a7:d4:c5:09:bf:48:a9:77:8f:48:6b:29:b7:d1:4b:fc:8c:
b3:53:44:c7:d0:b3:16:cf:1c:fc:9f:91:ee:97:cf:14:a9:68:
6c:a1:69:f2:4e:c6:46:63:60:36:4f:60:55:cb:1c:40:e3:b4:
44:b9:82:4e:c5:d1:12:1c:93:2f:7a:8c:f3:8e:23:25:bc:34:
f8:ce:ed:0a:a7:36:fc:d0:a1:18:8c:ec:75:db:56:a8:cd:b4:
e4:0f:c5:28:fe:02:37:8d:2a:ad:e7:a6:37:be:5e:29:64:f7:
3a:17:1f:2e:77:18:54:b4:4d:2b:b5:31:d1:1b:99:ed:78:68:
4d:36:41:3a:cf:54:82:ba:c9:e8:1e:08:cd:f9:3c:d4:77:fa:
fe:49:5f:2e:5d:6f:b3:aa:be:e0:6d:8a:48:e8:40:aa:38:df:
3e:2d:49:16:fb:a2:04:9a:d1:a9:44:20:79:fa:a1:df:3a:8a:
82:41:83:f7:83:f8:5e:87:02:c9:fb:e9:ff:d0:46:ac:c1:07:
fa:7f:5b:26:6e:36:9c:c5:37:4d:80:76:17:a7:f0:b7:93:49:
1c:8d:81:da:c5:af:cb:fa:85:79:0f:94:ca:74:83:d7:50:af:
a7:99:87:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+lE5CnrW3VxZ+AuIiB3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNDRjNDJlMWNhMzAzN2JiNmY1NDFmMWUxNDA0ZjY2MmMz
Njk5MzgwHhcNMjUwOTA3MDcwMDU0WhcNMjUwOTA4MDcwMDU0WjAzMTEwLwYDVQQD
EyhlNWRhYzA0ODhkNjY3ZDRhYzQ5ZDAwYTMyODFmMmVkZjYzMTQzYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tgWRoMHmKavGwhtLYjV/5NL3lhd
2h7yv3L8LRx8cEYCAZ29/t7g8/X6ovNmfYqAfS3YzmrBlT4pi2LxsJkALZ64L8mX
m4Ec6EDFD+fpPMojXgVOHy1pTq+/iwSr/vP9R8WVu5XWQlQa8/qlRanPkonGS0xc
uOiJ5lHzZGrZhLLMmZRjRWWNg/8qhG+dC3bJERmt4IRDIp2+bUMzzRrzyUeuqeDx
epauc+YCPyOvX9Rb++SXKI4mC4exkxEA5Ztj3wzm5dC2x4SIJb3MjtwDo1ZakAms
G1flm8D3PIMrKRUT/VFgBcvz4cgIIsj1N8W3puWaP8yfwk51x4tqA4JdwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXawEiNZn1KxJ0AoygfLt9jFDuXMB8GA1UdIwQY
MBaAFNFExC4cowN7tvVB8eFAT2YsNpk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEt
NmEyZjRhMTA4N2Y5LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEtNmEyZjRhMTA4N2Y5
LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlmX2jtk4
DXqxIqnaaP2QXdaJhqfUxQm/SKl3j0hrKbfRS/yMs1NEx9CzFs8c/J+R7pfPFKlo
bKFp8k7GRmNgNk9gVcscQOO0RLmCTsXREhyTL3qM844jJbw0+M7tCqc2/NChGIzs
ddtWqM205A/FKP4CN40qreemN75eKWT3OhcfLncYVLRNK7Ux0RuZ7XhoTTZBOs9U
grrJ6B4Izfk81Hf6/klfLl1vs6q+4G2KSOhAqjjfPi1JFvuiBJrRqUQgefqh3zqK
gkGD94P4XocCyfvp/9BGrMEH+n9bJm42nMU3TYB2F6fwt5NJHI2B2sWvy/qFeQ+U
ynSD11Cvp5mHGw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:04 2025 by rpki-client