Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier: hAabsncryYdfEZ7Kj4k6OcoylX36R1sQ51ydFghi7xI=
Subject key identifier: CD:9D:C8:09:8D:68:67:BC:17:9C:DF:1B:F1:0A:94:71:F6:B2:2D:6C
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial: 019A7113154408FC2988B830DB46BC82B7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number: 0D9A
Signing time: Tue 11 Nov 2025 04:01:07 +0000
Manifest this update: Tue 11 Nov 2025 04:01:07 +0000
Manifest next update: Wed 12 Nov 2025 04:01:07 +0000
Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: vVf4PAGFh9/bQR17Ih85f2vfrt3ujyR8KQ6jYiiyiIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:15:44:08:fc:29:88:b8:30:db:46:bc:82:b7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Validity
Not Before: Nov 11 04:01:07 2025 GMT
Not After : Nov 12 04:01:07 2025 GMT
Subject: CN=cd9dc8098d6867bc179cdf1bf10a9471f6b22d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:72:02:bb:16:ca:d6:eb:37:f2:7c:d8:42:02:
cd:d4:e8:4d:6e:fc:9b:d0:84:e4:a4:ea:ec:0e:55:
fe:90:d9:32:17:96:7c:d6:17:29:eb:29:ee:b4:d2:
59:9e:e0:d9:f7:d0:d2:b0:09:e7:72:a5:e5:b6:72:
3b:10:d8:e9:f7:aa:9b:1f:16:7f:1f:6e:1c:97:24:
2f:a1:98:e5:5e:0c:81:55:3b:5f:9d:36:80:9e:db:
52:8c:06:16:f6:d1:66:0b:96:24:a2:71:ec:02:99:
52:24:a2:1e:ac:aa:ab:4a:0f:5f:d4:16:b1:e3:33:
96:43:7c:d3:69:0d:2c:6f:b3:ca:6b:27:04:79:d6:
af:f5:04:8a:fa:bc:5e:32:37:e9:27:da:2b:21:b0:
8b:58:84:13:06:e6:ad:81:6f:7f:c9:f8:16:02:b7:
d0:e5:db:b3:4b:bb:6f:32:cb:c5:49:e1:0b:9d:29:
d2:b3:b5:e3:9a:5e:8b:39:51:81:a0:4e:1d:62:88:
f0:38:62:7e:21:1a:fe:7a:ae:e5:ab:86:06:b3:d9:
00:82:9b:11:88:1a:d6:ab:7d:c6:64:45:07:83:10:
08:f7:1c:ca:27:19:a2:28:96:25:f4:c2:ae:a6:2f:
a3:e3:da:aa:99:01:b8:7c:42:c4:0e:e3:5f:5f:00:
51:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9D:C8:09:8D:68:67:BC:17:9C:DF:1B:F1:0A:94:71:F6:B2:2D:6C
X509v3 Authority Key Identifier:
keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:31:d6:78:90:80:8e:fd:02:01:d6:30:96:6c:a3:c5:27:d9:
64:fd:df:5e:7a:26:9c:ce:43:ec:be:d9:be:3e:44:cb:0a:99:
aa:2e:b3:e6:ac:85:4d:43:cc:cc:57:98:73:5d:58:7f:c9:15:
f4:bc:fb:27:30:64:42:10:5c:7e:ec:ff:8b:ad:11:5c:20:43:
1d:0a:39:d2:ab:30:3e:34:86:8f:65:59:2d:ef:18:4f:97:ec:
e9:69:cf:f7:6c:bd:ea:bc:9f:82:a8:c8:e5:54:58:97:25:36:
ef:bc:60:73:a8:84:56:02:5d:00:d2:a2:93:d7:f7:1d:4f:b1:
bc:f9:f2:a9:dc:96:26:28:6c:2f:3e:b1:2b:80:fc:e9:9f:b3:
fa:70:49:ce:42:42:e6:23:6f:d0:f6:cd:65:6f:a5:a2:50:76:
5b:76:08:c4:5d:c2:d6:a4:3d:a2:94:30:79:2b:4e:b5:8f:71:
ce:5d:af:5d:83:db:65:e9:8b:e1:8c:2d:a7:91:81:7d:b8:8a:
85:04:6c:b5:6d:b0:6d:5a:51:4c:5c:b8:73:e5:d4:9a:c9:d3:
f9:9b:bd:63:94:55:37:7d:63:db:e8:ac:5f:60:a2:34:a3:a8:
36:bb:20:c4:8e:38:43:4f:99:2f:06:f9:aa:61:9b:5f:a3:cc:
78:1b:fb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:07 2025 by rpki-client