Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier: v82ZCDiCnHYPxXWyvlrn/RNCZRzZeOpTiKyk8Johckw=
Subject key identifier: D0:D6:B8:4F:64:04:CD:49:24:02:BA:55:9A:65:92:EA:80:0C:86:D3
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial: 0198D5BBE68AFE49886792A7B133ED1E08F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number: 0CC5
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: opFSzMhwwrHh+fCfn5qS0YSRTageJh72FzBemGUYXWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e6:8a:fe:49:88:67:92:a7:b1:33:ed:1e:08:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=d0d6b84f6404cd492402ba559a6592ea800c86d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:17:d5:dd:76:20:56:3b:91:89:81:78:97:
03:ad:73:62:01:4b:56:89:dd:cd:f4:2d:6e:74:70:
76:d4:85:f9:76:f1:4b:e7:3a:23:4f:f3:48:94:58:
94:b9:ce:53:a5:85:78:74:6e:8f:a9:72:4b:dd:6c:
a4:a2:b3:e8:2a:cc:53:c9:eb:d1:60:fb:fb:21:da:
2a:6d:ec:7e:58:73:32:e7:53:17:06:1b:5a:47:e4:
62:53:46:90:23:6c:b8:9e:e8:63:43:9b:ed:af:b4:
a3:2b:98:09:28:ce:b5:10:2e:eb:76:6f:b5:f5:9e:
70:18:29:4f:ec:89:59:56:2f:09:84:42:25:5b:2f:
a9:3c:ca:e4:ac:66:1c:75:25:49:a1:2a:1f:fa:39:
2e:dd:5b:26:18:4b:2c:13:67:16:e4:b5:f3:c6:14:
a1:85:a1:b8:0a:98:38:6b:b9:a7:32:22:0c:e7:dd:
24:b8:e7:78:26:ac:cd:11:8b:60:38:21:e3:51:c5:
56:08:00:62:d1:ee:fb:6f:b7:33:c5:c2:0c:ac:58:
76:cd:9c:05:a6:88:2d:92:3d:ef:8e:57:1f:65:2f:
d2:df:29:d9:ab:11:1d:9c:27:bd:99:fd:8b:7e:62:
9e:82:f4:08:80:a2:8c:74:b7:60:0c:7c:3c:63:91:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D6:B8:4F:64:04:CD:49:24:02:BA:55:9A:65:92:EA:80:0C:86:D3
X509v3 Authority Key Identifier:
keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1d:76:f8:20:4c:ed:5c:3c:c5:93:65:89:4b:60:a3:2c:cc:
19:72:d9:56:15:1f:23:88:92:6a:a9:6d:58:4e:52:8b:ea:cf:
e0:72:72:ee:cf:de:0b:a6:f9:2e:05:9b:bd:42:09:90:9b:c3:
9e:d2:7c:14:6b:2a:1c:e4:31:fb:b2:73:e9:bf:b9:11:42:9b:
96:85:5b:e5:59:0c:2c:0b:6a:7f:dd:02:17:75:17:04:bd:63:
46:fb:ee:80:d0:83:5e:b5:5e:dd:6a:58:70:e8:93:c1:d4:6c:
4b:79:34:af:77:cb:f9:10:f8:79:91:a2:f5:8d:4b:a3:f6:3d:
70:84:0f:5b:56:11:a5:07:65:79:90:dc:7e:46:72:2f:20:1a:
0d:dd:77:15:ce:2b:8d:ec:1f:bf:5f:2f:d3:4a:0a:98:88:e0:
1e:a7:8f:05:22:40:f9:6b:56:c6:80:62:25:34:8c:4b:85:01:
35:91:cc:89:4c:b2:bb:66:b4:86:ef:07:cf:e2:8c:15:09:4c:
d1:cb:a1:b8:a8:dc:38:f2:29:2c:ea:16:97:39:c1:e7:70:ba:
4b:94:60:3f:88:22:fb:c6:d3:17:dc:a6:8f:23:1f:be:94:57:
55:72:8b:13:76:cf:9f:2b:af:ec:4f:f8:bf:85:1a:a3:ed:be:
39:28:3e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:06 2025 by rpki-client