Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier: Uh0gwy+XI/hhazsw2m3xVifxLtjDofRFCWJ30OpsTqE=
Subject key identifier: F0:9E:93:25:28:4B:E6:08:25:4F:FF:74:45:1F:AF:93:AA:DC:91:D5
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial: 01989FA88D0C40BCA5DFD57726733273E7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number: 0CA9
Signing time: Tue 12 Aug 2025 19:01:20 +0000
Manifest this update: Tue 12 Aug 2025 19:01:20 +0000
Manifest next update: Wed 13 Aug 2025 19:01:20 +0000
Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: N6zm/LsDUx1d+GlrTtecMo84AhVJDwNdjubTWibHccg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:a8:8d:0c:40:bc:a5:df:d5:77:26:73:32:73:e7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Validity
Not Before: Aug 12 19:01:20 2025 GMT
Not After : Aug 13 19:01:20 2025 GMT
Subject: CN=f09e9325284be608254fff74451faf93aadc91d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:05:86:2c:f2:78:a4:ce:72:9f:7a:d9:18:
14:48:0f:ad:24:ee:d5:28:51:b7:43:e9:7c:09:18:
d9:c8:8f:37:59:8b:c3:83:31:7a:9b:cb:d1:09:70:
22:b6:c3:d8:9b:2a:48:59:74:80:13:8c:b6:c6:f7:
32:fd:fb:fd:a6:d8:dc:c6:6c:c3:cd:ab:e8:6b:a7:
ec:f6:e9:c3:f2:2a:ec:79:d2:8f:e8:95:a0:cc:e1:
7b:20:b9:8e:73:84:80:1b:8a:e5:db:59:a4:2a:f9:
21:21:8e:3e:06:7c:73:18:0a:66:08:8b:97:a4:4e:
42:f0:35:c5:90:6d:6d:9a:38:4f:7d:62:b9:b9:16:
3c:a9:5c:c7:df:9c:fc:c3:a0:b9:90:94:41:cc:dc:
e8:b9:70:c6:df:78:6d:cc:5b:72:40:8f:ca:a5:24:
ea:a9:cf:e6:37:33:c8:34:85:a8:3b:6c:3b:d6:2d:
3d:55:58:d1:21:3f:ca:a5:fb:37:88:61:35:41:4e:
3d:eb:ed:81:02:34:78:5d:90:f2:89:0b:63:ab:db:
85:96:3a:ba:14:f3:50:68:ae:1e:9f:98:7e:82:38:
6c:06:11:e4:f3:78:39:31:8a:3d:c0:11:5f:38:ad:
63:d9:7f:a9:e1:8e:34:4a:1e:dc:27:72:4f:92:f8:
af:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9E:93:25:28:4B:E6:08:25:4F:FF:74:45:1F:AF:93:AA:DC:91:D5
X509v3 Authority Key Identifier:
keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:62:5e:9e:3b:46:cd:45:b0:ea:3a:10:f3:6e:11:92:8d:56:
18:61:4e:93:2e:9f:35:ec:8b:a0:44:5c:72:31:01:65:f7:a9:
6b:5d:e5:23:9f:e1:f3:10:bf:3a:6a:0e:c3:7e:75:5a:46:a2:
19:71:b3:22:f2:34:14:58:79:eb:40:2e:25:0c:67:df:8b:42:
2a:a9:8a:58:cb:0b:6c:47:84:36:86:57:2d:a5:3b:b2:bc:5f:
06:67:36:b2:42:31:2a:5b:6c:0e:15:0d:13:61:c5:0b:9e:da:
2b:72:e8:48:4e:17:f3:30:b7:10:7d:db:ae:97:1a:7d:40:28:
f3:09:a8:cd:e9:35:c6:0e:ed:68:7b:0e:17:be:5c:ab:df:fc:
01:18:06:eb:65:43:3b:0e:21:86:d0:e1:48:76:e6:88:18:af:
d3:49:9d:63:c0:cb:2a:bd:c7:b5:c6:23:c1:10:08:a9:b9:09:
89:a2:b8:91:39:b6:e4:78:09:6a:0a:b8:e8:99:25:1f:52:31:
e6:71:fa:0c:67:88:e5:ea:e8:31:93:ee:35:7d:82:0b:84:6b:
bd:05:ae:37:b1:5d:8f:5c:91:5e:f1:89:77:9e:1a:23:98:9d:
80:a8:ec:65:34:24:54:93:1d:f6:05:4d:a8:10:5c:ec:d7:93:
56:f5:d8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:59 2025 by rpki-client