Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier: SsuzjQBc2vTdDbhUpfpupj/y0BzY5pNmA9NtGY/ch6k=
Subject key identifier: DB:7D:EA:65:63:25:5A:4D:9E:E0:49:88:62:EE:FB:01:98:1E:92:E6
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial: 019A4D73EAE1323418A2A731371A5C9E3661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number: 0F40
Signing time: Tue 04 Nov 2025 06:00:33 +0000
Manifest this update: Tue 04 Nov 2025 06:00:33 +0000
Manifest next update: Wed 05 Nov 2025 06:00:33 +0000
Files and hashes: 1: 31BQV3QAlmQzRsLUDQbTCf9Ts0c.roa (hash: f5KyFjaDpcu5Ry6iCP+PpIAQgbWGNkKpf4ok3qoVBRQ=)
2: 3AEqC5MBKsUSJPKumrvs8Im8c9o.roa (hash: D78tSUGZBxIx3iz83nRMiDYhqRD43nH1bdGS66Ruaho=)
3: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: jXkN5V30KKuu7UpL9+lxkOf7EEG/cWvegNaFD9nj+Yo=)
4: i7f3Os5SqwUidTwtNEfR_Ylz3QE.roa (hash: Jdo1W7QOzxfUxrWm3qhdLrJjsKXCupCbNIYoEy3U06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ea:e1:32:34:18:a2:a7:31:37:1a:5c:9e:36:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Validity
Not Before: Nov 4 06:00:33 2025 GMT
Not After : Nov 5 06:00:33 2025 GMT
Subject: CN=db7dea6563255a4d9ee0498862eefb01981e92e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:03:48:ed:d5:15:83:69:30:56:c7:01:f8:
fd:71:42:e5:7c:aa:c4:52:84:cc:67:d4:b9:fe:ab:
8a:ae:6d:0e:7f:c9:10:13:5e:aa:fc:d8:f6:84:96:
f0:40:81:2d:22:3b:44:d9:2c:f2:d1:b0:d1:65:1e:
76:c1:c8:19:df:6e:00:22:80:cd:52:11:7f:fd:f2:
97:8d:d4:1e:89:66:5c:d4:32:f9:e5:bf:17:4a:97:
bc:81:6c:1d:d4:0f:a5:63:b1:25:f8:d5:d2:89:7b:
56:c1:4e:11:99:0c:b8:c5:55:ae:90:57:12:e6:b2:
b8:c4:86:68:ec:6a:e3:44:29:32:79:cf:b9:4d:ea:
e6:c4:95:fa:a5:bd:ae:56:a1:0c:76:90:78:5c:33:
c4:d6:52:0a:0a:9c:34:36:af:34:b2:f8:0f:44:7a:
79:e0:ce:04:3b:ca:09:82:67:d1:b0:5b:60:2f:2c:
ed:1f:00:63:54:72:91:68:c5:30:62:30:a5:53:e0:
be:0a:8d:77:7e:78:64:c0:6f:d9:af:b0:7e:e8:57:
89:a8:24:d5:14:04:9c:e4:e3:20:73:88:7e:1d:52:
c3:d4:42:b6:31:8c:1a:d5:42:ff:9a:56:77:38:12:
99:a0:9b:45:a4:25:84:09:76:90:4b:27:7b:59:5e:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7D:EA:65:63:25:5A:4D:9E:E0:49:88:62:EE:FB:01:98:1E:92:E6
X509v3 Authority Key Identifier:
keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0c:a2:a6:a8:85:64:99:38:7a:fc:8c:c9:b9:71:94:97:ab:
79:b3:b3:f3:fb:9c:aa:37:29:a3:d2:42:73:7f:ec:8d:d7:aa:
8a:cb:82:43:47:dd:d4:6d:be:67:9b:ca:fe:be:7a:d4:20:be:
0b:c9:f7:0e:16:62:54:42:4e:81:5c:a9:65:4c:d7:1f:dc:ae:
55:b5:f4:8a:51:fb:ba:fa:ae:c5:c0:17:f5:b8:e9:d8:f9:97:
60:46:7f:5e:5b:06:4a:01:2e:24:e4:a3:d5:ec:e2:16:a5:2f:
42:16:35:23:0f:9d:77:a6:1a:4f:2e:f6:02:d5:46:2f:fb:36:
78:9b:ff:fa:b7:e4:bc:05:5d:af:89:cb:45:39:48:59:b8:50:
2d:50:fa:e9:d9:00:9e:0d:37:7b:25:8c:55:d5:83:de:90:65:
83:f7:11:87:c6:ae:91:00:87:eb:02:13:26:1f:b9:65:83:da:
c4:e0:0d:50:6d:69:bc:34:50:43:d4:2d:9b:8b:3b:85:5d:8f:
16:c2:66:1a:2c:65:a7:d5:bb:93:10:a2:9a:af:ab:99:e6:60:
a7:71:7b:3a:f3:78:03:11:63:d3:44:1c:3a:71:80:c2:05:a3:
5f:b0:2c:69:73:b0:f3:f0:bd:11:03:ee:43:8d:52:81:3e:92:
61:41:3a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:40 2025 by rpki-client