Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier: Pkc5CnU9W4KK2up9hiUIZH5a6dEfoT9CKAjQmXpB56w=
Subject key identifier: 25:D6:D4:2F:FC:3F:65:EA:CE:A3:25:3A:61:2F:E0:00:CD:06:48:77
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial: 019680FE173BD456CF3DF343A2B9EDF9E6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number: 0B90
Signing time: Tue 29 Apr 2025 10:00:57 +0000
Manifest this update: Tue 29 Apr 2025 10:00:57 +0000
Manifest next update: Wed 30 Apr 2025 10:00:57 +0000
Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: LT1zDKVWyDHIiJ252eUcKeoeDKh48dES9SX+fkxieyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fe:17:3b:d4:56:cf:3d:f3:43:a2:b9:ed:f9:e6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Validity
Not Before: Apr 29 10:00:57 2025 GMT
Not After : Apr 30 10:00:57 2025 GMT
Subject: CN=25d6d42ffc3f65eacea3253a612fe000cd064877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:11:03:d6:d0:c2:91:c9:64:1c:78:f2:89:21:
3a:a1:fb:81:7c:6c:a1:b2:a0:02:69:91:1c:ef:00:
f0:62:1c:08:fe:f5:a5:1f:be:39:86:78:2b:1a:25:
3e:5f:ea:c8:3e:d3:58:e2:a6:be:f2:ff:db:ee:1e:
a5:09:5a:e0:22:bc:bd:13:29:ea:7a:e6:78:54:65:
75:66:1a:fc:87:38:6e:6d:11:55:df:12:b2:00:92:
8f:f9:88:70:b3:56:26:e4:86:94:91:02:df:82:42:
af:fd:aa:89:a4:b1:33:f0:70:e5:f7:9a:65:ef:10:
49:a9:9f:5d:f8:96:04:ee:0e:61:d1:7f:96:a3:86:
e2:24:ed:1f:c3:e1:25:16:9e:32:fd:d5:26:d4:a9:
47:3c:1e:26:30:18:a0:bb:5d:40:5f:bb:24:f3:a5:
73:44:2b:2b:f8:52:54:f5:77:a4:b3:93:ab:c1:01:
06:07:a6:8d:85:74:78:12:a8:f8:a6:14:2f:c1:41:
ca:0d:6b:f5:53:89:dd:01:7b:61:22:21:8f:a2:a3:
d4:7d:4f:07:6b:36:36:86:94:d3:e8:24:db:a8:e8:
c5:80:44:57:64:31:52:82:dc:81:18:58:64:32:a9:
45:90:c5:2d:10:7a:8f:8a:ea:3d:f5:bf:41:cd:9d:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D6:D4:2F:FC:3F:65:EA:CE:A3:25:3A:61:2F:E0:00:CD:06:48:77
X509v3 Authority Key Identifier:
keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a4:31:77:22:fa:c3:a7:19:fa:8c:e6:73:aa:6a:9e:e3:97:
dd:42:37:0e:9e:ce:6a:92:e5:d1:8e:6a:fa:19:9f:5d:d6:68:
bc:21:0e:09:6a:3d:4d:c0:45:6c:2b:20:a5:bc:8c:1f:84:88:
4f:90:2d:b4:d0:1d:f0:b7:c7:20:da:7a:0c:16:c1:8c:ce:ff:
2a:7b:d6:ab:0e:51:fc:2f:2c:ab:a1:51:cb:f1:4c:94:1e:ce:
88:6b:d8:b7:a6:0a:a5:7b:29:45:6c:c5:03:d4:6b:80:6b:03:
a9:d0:0e:0a:80:d8:2b:9d:8f:63:da:87:42:bf:ac:26:af:ad:
d0:17:bd:cc:14:ce:b5:9c:98:09:c1:57:dc:1c:ec:55:96:c0:
fa:57:3b:2f:0e:23:79:d3:d8:d2:6e:b0:79:2f:04:05:7a:44:
b7:cf:f2:33:c7:cc:0b:e8:37:93:40:85:5f:10:8e:a6:93:f9:
58:2a:3b:15:10:5b:fa:bc:47:ee:6a:46:c1:c2:63:67:50:4a:
27:31:ad:1b:9e:8c:87:41:b1:f3:8a:10:bb:61:a8:b5:4c:5e:
d6:db:07:a0:a3:7d:2b:12:32:c1:d1:80:8d:50:53:f6:68:e7:
bf:bb:84:5d:0f:9a:29:14:e5:49:6b:ce:c7:95:76:8c:d8:1d:
ab:e6:29:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaA/hc71FbPPfNDornt+ebNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNDRjNDJlMWNhMzAzN2JiNmY1NDFmMWUxNDA0ZjY2MmMz
Njk5MzgwHhcNMjUwNDI5MTAwMDU3WhcNMjUwNDMwMTAwMDU3WjAzMTEwLwYDVQQD
EygyNWQ2ZDQyZmZjM2Y2NWVhY2VhMzI1M2E2MTJmZTAwMGNkMDY0ODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xED1tDCkclkHHjyiSE6ofuBfGyh
sqACaZEc7wDwYhwI/vWlH745hngrGiU+X+rIPtNY4qa+8v/b7h6lCVrgIry9Eynq
euZ4VGV1Zhr8hzhubRFV3xKyAJKP+Yhws1Ym5IaUkQLfgkKv/aqJpLEz8HDl95pl
7xBJqZ9d+JYE7g5h0X+Wo4biJO0fw+ElFp4y/dUm1KlHPB4mMBigu11AX7sk86Vz
RCsr+FJU9Xeks5OrwQEGB6aNhXR4Eqj4phQvwUHKDWv1U4ndAXthIiGPoqPUfU8H
azY2hpTT6CTbqOjFgERXZDFSgtyBGFhkMqlFkMUtEHqPiuo99b9BzZ15bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXW1C/8P2XqzqMlOmEv4ADNBkh3MB8GA1UdIwQY
MBaAFNFExC4cowN7tvVB8eFAT2YsNpk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEt
NmEyZjRhMTA4N2Y5LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEtNmEyZjRhMTA4N2Y5
LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6QxdyL6
w6cZ+ozmc6pqnuOX3UI3Dp7OapLl0Y5q+hmfXdZovCEOCWo9TcBFbCsgpbyMH4SI
T5AttNAd8LfHINp6DBbBjM7/KnvWqw5R/C8sq6FRy/FMlB7OiGvYt6YKpXspRWzF
A9RrgGsDqdAOCoDYK52PY9qHQr+sJq+t0Be9zBTOtZyYCcFX3BzsVZbA+lc7Lw4j
edPY0m6weS8EBXpEt8/yM8fMC+g3k0CFXxCOppP5WCo7FRBb+rxH7mpGwcJjZ1BK
JzGtG56Mh0Gx84oQu2GotUxe1tsHoKN9KxIywdGAjVBT9mjnv7uEXQ+aKRTlSWvO
x5V2jNgdq+YpBg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 15:41:20 2025 by rpki-client