Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
File: 0UTELhyjA3u29UHx4UBPZiw2mTg.mft (raw, json)
Hash identifier: nAhdMUf3LVoOnxZIx1+XOsqduyZOOZlPSbjjH9xiQG0=
Subject key identifier: 52:F9:38:39:FC:B5:66:21:70:E2:CE:D9:1E:D1:70:66:9C:9B:19:86
Authority key identifier: D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
Certificate issuer: /CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Certificate serial: 019A4E4FC5C7987A10B67211C29C7856803E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
Manifest number: 0D88
Signing time: Tue 04 Nov 2025 10:00:42 +0000
Manifest this update: Tue 04 Nov 2025 10:00:42 +0000
Manifest next update: Wed 05 Nov 2025 10:00:42 +0000
Files and hashes: 1: 0UTELhyjA3u29UHx4UBPZiw2mTg.crl (hash: jaaISH8+5aAyXnmJIC4qO4j7ROiJivIisNI8NSKOzbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:c5:c7:98:7a:10:b6:72:11:c2:9c:78:56:80:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d144c42e1ca3037bb6f541f1e1404f662c369938
Validity
Not Before: Nov 4 10:00:42 2025 GMT
Not After : Nov 5 10:00:42 2025 GMT
Subject: CN=52f93839fcb5662170e2ced91ed170669c9b1986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:77:e8:ed:ed:67:04:ec:9c:1d:6c:a6:5c:
25:86:95:4e:6a:f9:7f:69:43:7d:a7:dc:5b:67:ab:
5d:3f:c3:39:1a:c1:12:69:21:8e:aa:8f:00:96:96:
92:7f:c7:6c:cc:7e:b9:5a:49:f0:8a:4e:49:2d:1b:
66:c2:c0:5f:0d:2f:f7:87:e4:9c:06:0a:c3:f3:b4:
6a:bb:38:4d:bd:af:c5:bb:45:f7:f8:44:33:41:ab:
46:6f:55:d0:13:15:b8:7a:d9:ff:f0:fc:fc:7d:4b:
dd:d5:3b:ac:a0:4a:63:a7:ac:c6:88:32:2e:df:ba:
5e:3f:8c:d8:19:9c:72:09:b8:b6:f5:9b:97:f8:75:
58:94:dd:dc:90:68:ea:48:7c:02:a5:06:1d:4c:ab:
41:fe:0f:73:4a:46:b5:ff:09:72:cf:c9:79:d3:a2:
ea:17:2f:d1:0b:b2:05:01:e7:10:5e:b9:f7:40:18:
25:56:89:68:0e:a2:9d:92:d6:a2:e7:31:f0:b2:ca:
88:28:f8:8a:fa:a0:e4:6f:e0:92:dc:5f:fc:1a:22:
12:74:73:34:57:5b:f2:46:82:fc:4a:dc:44:64:db:
9d:2a:28:86:e4:e4:7e:0d:3b:25:e3:fe:8f:22:15:
cd:4a:d0:b7:7a:5a:98:8b:eb:7d:6f:9c:15:bc:32:
00:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F9:38:39:FC:B5:66:21:70:E2:CE:D9:1E:D1:70:66:9C:9B:19:86
X509v3 Authority Key Identifier:
keyid:D1:44:C4:2E:1C:A3:03:7B:B6:F5:41:F1:E1:40:4F:66:2C:36:99:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0UTELhyjA3u29UHx4UBPZiw2mTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/9543a5-4dc5-4c07-b2ea-6a2f4a1087f9/1/0UTELhyjA3u29UHx4UBPZiw2mTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e4:4c:14:f4:84:21:57:1e:f5:6c:db:6c:a7:1d:10:f8:a1:
8b:38:28:75:bb:f9:cb:7d:15:5c:9f:9a:7d:e0:e2:b4:1b:24:
05:17:e8:dd:44:a7:c9:81:1c:75:d4:1c:56:45:6b:63:33:0b:
8d:82:72:e6:4b:f6:8a:34:63:47:f5:a7:3c:aa:0d:b0:f1:68:
65:e6:51:8b:fb:7b:c2:46:46:5f:9e:d2:88:6f:6e:ca:fd:0a:
9d:e2:3a:93:d1:cf:a5:af:c7:27:c6:38:21:d0:92:76:6f:ff:
ba:a5:86:e5:c6:86:81:fe:1c:1f:6e:bb:ad:5b:e2:5f:dd:b1:
3e:27:c1:09:ad:52:bc:c6:ad:62:79:8f:e9:a9:a6:76:da:5a:
bd:1f:35:be:cc:f6:45:1d:cb:04:40:5c:e0:84:9f:38:b7:39:
f6:d1:57:b1:0c:13:28:d4:e7:c9:01:a1:74:03:56:df:1a:f8:
41:f5:52:43:fb:2c:0a:d5:d2:5c:0e:75:8a:5b:e3:82:11:b6:
e7:55:7f:d8:85:2b:ce:9c:3b:83:09:57:40:a9:d3:61:e1:70:
e3:e3:b0:68:e7:95:05:e4:73:cd:df:7c:9c:15:29:7a:93:54:
36:68:90:44:3d:4e:53:82:ff:71:fd:9b:98:ce:0e:92:a3:77:
97:10:ad:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT8XHmHoQtnIRwpx4VoA+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNDRjNDJlMWNhMzAzN2JiNmY1NDFmMWUxNDA0ZjY2MmMz
Njk5MzgwHhcNMjUxMTA0MTAwMDQyWhcNMjUxMTA1MTAwMDQyWjAzMTEwLwYDVQQD
Eyg1MmY5MzgzOWZjYjU2NjIxNzBlMmNlZDkxZWQxNzA2NjljOWIxOTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NN36O3tZwTsnB1splwlhpVOavl/
aUN9p9xbZ6tdP8M5GsESaSGOqo8AlpaSf8dszH65Wknwik5JLRtmwsBfDS/3h+Sc
BgrD87RquzhNva/Fu0X3+EQzQatGb1XQExW4etn/8Pz8fUvd1TusoEpjp6zGiDIu
37peP4zYGZxyCbi29ZuX+HVYlN3ckGjqSHwCpQYdTKtB/g9zSka1/wlyz8l506Lq
Fy/RC7IFAecQXrn3QBglVoloDqKdktai5zHwssqIKPiK+qDkb+CS3F/8GiISdHM0
V1vyRoL8StxEZNudKiiG5OR+DTsl4/6PIhXNStC3elqYi+t9b5wVvDIA8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL5ODn8tWYhcOLO2R7RcGacmxmGMB8GA1UdIwQY
MBaAFNFExC4cowN7tvVB8eFAT2YsNpk4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEt
NmEyZjRhMTA4N2Y5LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC85NTQzYTUtNGRjNS00YzA3LWIyZWEtNmEyZjRhMTA4N2Y5
LzEvMFVURUxoeWpBM3UyOVVIeDRVQlBaaXcybVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReRMFPSE
IVce9WzbbKcdEPihizgodbv5y30VXJ+afeDitBskBRfo3USnyYEcddQcVkVrYzML
jYJy5kv2ijRjR/WnPKoNsPFoZeZRi/t7wkZGX57SiG9uyv0KneI6k9HPpa/HJ8Y4
IdCSdm//uqWG5caGgf4cH267rVviX92xPifBCa1SvMatYnmP6ammdtpavR81vsz2
RR3LBEBc4ISfOLc59tFXsQwTKNTnyQGhdANW3xr4QfVSQ/ssCtXSXA51ilvjghG2
51V/2IUrzpw7gwlXQKnTYeFw4+OwaOeVBeRzzd98nBUpepNUNmiQRD1OU4L/cf2b
mM4OkqN3lxCt7g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:35 2025 by rpki-client