Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier: WwtT+tZhimpHRA7Zom11+aCliDYT7x/m9oqYBsJBSLM=
Subject key identifier: 32:2E:DA:F6:79:29:D1:35:EC:BF:D5:49:B1:97:4A:F8:58:F9:A5:9D
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial: 0197B7EA2718AC07FFCFCD8A3ED140F0FC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number: 0C31
Signing time: Sat 28 Jun 2025 19:01:05 +0000
Manifest this update: Sat 28 Jun 2025 19:01:05 +0000
Manifest next update: Sun 29 Jun 2025 19:01:05 +0000
Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: hKRAsjENegVg+WO2W0HWItu2klKmHPzMrq48aOUHbfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:27:18:ac:07:ff:cf:cd:8a:3e:d1:40:f0:fc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Validity
Not Before: Jun 28 19:01:05 2025 GMT
Not After : Jun 29 19:01:05 2025 GMT
Subject: CN=322edaf67929d135ecbfd549b1974af858f9a59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:7d:0d:0c:bf:d3:aa:b2:c7:0d:3e:ab:f7:
5a:9d:94:85:87:61:f6:94:0a:62:22:1e:2e:3b:67:
a8:b6:92:21:0b:6e:2c:9a:c0:e2:04:82:7a:77:12:
89:0d:74:54:92:72:ab:39:a2:38:7d:d1:0e:20:24:
ba:cc:86:dc:ab:44:86:f4:03:f4:15:ff:e3:62:bb:
01:ed:1f:99:e0:53:ce:e6:a1:7e:40:a4:1e:0d:ba:
f8:c9:06:53:80:09:aa:ed:2e:29:c5:f4:33:a3:bd:
af:1f:0b:50:ee:11:1c:2e:6b:b2:4d:23:0f:50:51:
e1:fa:2b:14:04:59:f6:12:19:5a:05:9a:00:6f:62:
07:2d:fa:c3:84:2e:30:bc:f7:b8:7f:b1:27:08:c9:
39:d9:b1:94:81:b4:64:35:28:e9:9a:d6:5a:02:e3:
b2:2e:45:3f:21:a6:ba:15:5b:68:9f:c1:9d:fe:5e:
a5:de:c6:49:e8:6a:4a:c5:08:30:f5:f8:ab:c6:9c:
14:7b:cf:81:73:eb:d0:16:e9:00:37:0c:13:b9:21:
05:72:f8:11:25:42:ee:1e:09:8b:e0:e0:f6:a1:c9:
ae:65:71:f8:21:ee:cc:92:82:2a:08:cd:81:5e:ae:
aa:c3:17:54:c7:5e:7a:2d:58:fc:38:2c:fa:35:4c:
e8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2E:DA:F6:79:29:D1:35:EC:BF:D5:49:B1:97:4A:F8:58:F9:A5:9D
X509v3 Authority Key Identifier:
keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c6:bd:8e:9d:d2:0d:84:3a:94:27:86:00:68:09:cf:0f:34:
ba:af:d2:2d:14:0d:8e:81:f9:bd:db:a6:d3:32:ac:b5:3b:9e:
22:e9:e7:d9:b6:71:e7:aa:ab:76:2d:c2:47:a3:95:05:be:02:
2f:0e:2c:29:7e:17:fe:20:54:57:3b:43:25:ec:87:3a:9a:12:
1b:cd:5c:86:e4:e6:fa:cc:70:87:a8:65:bf:09:45:19:b4:f0:
5d:68:6b:e3:6c:a7:4e:59:0b:09:c4:94:01:63:d9:27:88:55:
ec:96:94:65:28:89:54:a0:d2:f6:24:a7:35:3b:c4:dd:a9:1f:
4f:00:50:d5:be:e1:93:79:30:54:e0:16:b6:be:48:7f:f0:d0:
84:6c:b4:51:e9:ff:ba:eb:9b:c1:94:9c:7f:9e:8a:35:72:57:
44:e1:e1:00:46:e6:c7:c7:8a:e6:2d:f1:45:56:80:70:09:f5:
5d:18:2f:28:5e:30:ee:d9:89:95:a7:b5:de:07:88:35:2e:50:
be:20:ef:5d:13:b0:31:cc:0d:1b:8a:38:6b:8e:64:79:23:09:
2c:98:3a:73:5c:09:7a:69:df:2a:05:32:24:3f:0c:b1:01:9f:
a5:9c:90:ca:fb:ba:45:d1:ef:b1:90:ea:33:84:a2:8f:d7:15:
40:74:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:13 2025 by rpki-client