Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier: gGnM91q2ERthfOSdBq+nhCM8LorlpV6Tpx+ztvz3VLY=
Subject key identifier: 95:99:1F:96:5F:AF:24:70:92:2D:8C:28:AE:87:A9:48:83:CC:F4:E2
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial: 0199FD348C91CC77AA9842438E8F33362B79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number: 0D5E
Signing time: Sun 19 Oct 2025 16:01:43 +0000
Manifest this update: Sun 19 Oct 2025 16:01:43 +0000
Manifest next update: Mon 20 Oct 2025 16:01:43 +0000
Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: W2F7lJxfVqoes4Sg2cbz1ge/SbmVCwQYoAc25NA6/l4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:8c:91:cc:77:aa:98:42:43:8e:8f:33:36:2b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Validity
Not Before: Oct 19 16:01:43 2025 GMT
Not After : Oct 20 16:01:43 2025 GMT
Subject: CN=95991f965faf2470922d8c28ae87a94883ccf4e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c4:ba:32:5f:6c:87:2b:7e:e3:8f:0a:21:98:
af:82:de:8a:b6:7d:94:c6:29:34:58:cc:b2:35:82:
3a:b4:92:88:75:ea:40:49:05:8b:8c:74:fa:f7:d9:
16:e3:32:a5:1a:12:9e:a2:48:66:e2:dd:ed:23:d6:
8d:cf:7b:b8:e1:2b:68:bc:d3:08:c3:05:b9:de:36:
40:f0:ef:5b:3c:f1:7e:02:d3:0a:af:de:02:b5:29:
ca:ca:a9:5c:17:66:b5:96:fd:32:7e:a5:3e:14:27:
22:a9:a8:a8:64:37:7f:8d:7b:e5:93:ec:d7:d1:ee:
67:30:3f:5d:ab:3a:af:d7:a3:f7:0e:b0:a2:69:55:
d3:1e:cc:64:9d:58:32:48:f4:b4:81:5e:57:9b:7c:
9c:6c:49:d4:21:01:f9:25:3d:95:81:1d:ef:13:49:
13:63:cc:fe:0d:2c:4e:f2:48:38:33:16:24:2e:c0:
57:50:8e:ae:48:85:79:a8:27:af:46:c3:30:03:0e:
14:6a:75:43:d5:e0:7f:40:38:83:0d:67:cb:12:12:
bf:38:af:41:0d:4e:aa:f2:cd:2e:d2:e6:0c:55:80:
5f:b8:ec:83:4d:26:9f:5b:e2:c7:a6:bd:68:67:cd:
d4:c3:91:d9:f8:43:ab:03:ec:1d:d0:f0:13:f5:1c:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:99:1F:96:5F:AF:24:70:92:2D:8C:28:AE:87:A9:48:83:CC:F4:E2
X509v3 Authority Key Identifier:
keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ea:44:e2:21:ea:a8:e1:39:dc:c2:ca:31:d5:bd:d7:f9:89:
13:d0:15:d4:7e:61:fe:7a:17:f3:57:66:7c:7d:39:8a:ba:0a:
90:c3:3e:55:ce:08:8e:33:a9:4b:e6:85:fa:88:10:11:64:d9:
21:25:7f:4a:84:cf:27:5e:f4:d0:61:85:fa:fd:b4:f3:05:05:
2c:a0:33:bd:64:b4:2e:ea:ca:4e:2f:e6:8f:c1:8a:1d:69:dd:
7c:8e:28:e2:17:8e:5d:a9:4d:3c:1f:a0:f0:e3:d6:35:bb:34:
a7:dd:97:13:25:b6:b8:3a:50:e0:20:82:c2:f4:c8:06:f1:56:
c8:e6:0e:29:ba:81:f4:fc:e9:20:dd:52:d0:54:b7:78:f4:6a:
d7:40:29:12:e7:22:34:91:ad:b6:08:a4:bd:ff:26:14:03:55:
c6:33:37:1e:da:9d:00:48:49:6c:2d:53:5b:ac:43:a9:f3:70:
11:08:fd:c9:4c:ed:23:0a:e5:1d:70:5d:eb:53:54:0d:23:4a:
42:7c:5b:1e:23:f9:7d:52:3a:b7:f4:72:e8:50:cb:7d:c9:dd:
9f:1c:90:f7:64:67:f5:50:ae:ac:ae:8a:4b:28:6c:04:26:e3:
86:4d:b1:4d:8c:81:06:d3:33:93:67:e7:16:64:f9:e9:7e:2d:
3a:ad:6d:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9NIyRzHeqmEJDjo8zNit5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNDRjNDJlMWNhMzAzN2JiNmY1NDFmMWUxNDA0ZjY2MmMz
Njk5MzgwHhcNMjUxMDE5MTYwMTQzWhcNMjUxMDIwMTYwMTQzWjAzMTEwLwYDVQQD
Eyg5NTk5MWY5NjVmYWYyNDcwOTIyZDhjMjhhZTg3YTk0ODgzY2NmNGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsS6Ml9shyt+448KIZivgt6Ktn2U
xik0WMyyNYI6tJKIdepASQWLjHT699kW4zKlGhKeokhm4t3tI9aNz3u44StovNMI
wwW53jZA8O9bPPF+AtMKr94CtSnKyqlcF2a1lv0yfqU+FCciqaioZDd/jXvlk+zX
0e5nMD9dqzqv16P3DrCiaVXTHsxknVgySPS0gV5Xm3ycbEnUIQH5JT2VgR3vE0kT
Y8z+DSxO8kg4MxYkLsBXUI6uSIV5qCevRsMwAw4UanVD1eB/QDiDDWfLEhK/OK9B
DU6q8s0u0uYMVYBfuOyDTSafW+LHpr1oZ83Uw5HZ+EOrA+wd0PAT9Rz9pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWZH5ZfryRwki2MKK6HqUiDzPTiMB8GA1UdIwQY
MBaAFNFExC4cowN7tvVB8eFAT2YsNpk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEt
NmEyZjRhMTA4N2Y5LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEtNmEyZjRhMTA4N2Y5
LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+pE4iHq
qOE53MLKMdW91/mJE9AV1H5h/noX81dmfH05iroKkMM+Vc4IjjOpS+aF+ogQEWTZ
ISV/SoTPJ1700GGF+v208wUFLKAzvWS0LurKTi/mj8GKHWndfI4o4heOXalNPB+g
8OPWNbs0p92XEyW2uDpQ4CCCwvTIBvFWyOYOKbqB9PzpIN1S0FS3ePRq10ApEuci
NJGttgikvf8mFANVxjM3HtqdAEhJbC1TW6xDqfNwEQj9yUztIwrlHXBd61NUDSNK
QnxbHiP5fVI6t/Ry6FDLfcndnxyQ92Rn9VCurK6KSyhsBCbjhk2xTYyBBtMzk2fn
FmT56X4tOq1t1g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:14 2025 by rpki-client