Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier: j4/7z30EjBdWpUBbVS1tmNwI5HhgmJmYHQu4CoXXM4o=
Subject key identifier: 4E:04:6A:7A:FD:51:A4:A7:B2:97:06:5C:2F:EA:B4:C8:AC:7D:A1:F4
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial: 01988B7D99CD84F432F7BE3C3C705303A3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number: 0E57
Signing time: Fri 08 Aug 2025 21:02:00 +0000
Manifest this update: Fri 08 Aug 2025 21:02:00 +0000
Manifest next update: Sat 09 Aug 2025 21:02:00 +0000
Files and hashes: 1: 31BQV3QAlmQzRsLUDQbTCf9Ts0c.roa (hash: f5KyFjaDpcu5Ry6iCP+PpIAQgbWGNkKpf4ok3qoVBRQ=)
2: 3AEqC5MBKsUSJPKumrvs8Im8c9o.roa (hash: D78tSUGZBxIx3iz83nRMiDYhqRD43nH1bdGS66Ruaho=)
3: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: iJBFUvYsB6gUVeyZTAS1XkjY8Udoca35NWHzbmKElNs=)
4: i7f3Os5SqwUidTwtNEfR_Ylz3QE.roa (hash: Jdo1W7QOzxfUxrWm3qhdLrJjsKXCupCbNIYoEy3U06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:99:cd:84:f4:32:f7:be:3c:3c:70:53:03:a3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Validity
Not Before: Aug 8 21:02:00 2025 GMT
Not After : Aug 9 21:02:00 2025 GMT
Subject: CN=4e046a7afd51a4a7b297065c2feab4c8ac7da1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:15:a0:4d:ec:18:29:43:5b:7e:8b:39:9c:c0:
db:6e:5a:3b:71:ef:50:1b:34:75:0a:31:93:d8:60:
dc:dc:76:b4:db:4d:6a:12:c8:cb:94:5a:24:87:f6:
89:06:f9:f0:a7:9f:cf:d1:17:70:a4:8a:c4:b5:1a:
97:b0:a7:b1:2f:88:d0:cc:09:6c:e4:a4:5a:f4:a0:
61:15:99:2a:0f:7d:17:a7:30:d2:f3:bc:a3:e3:c8:
1b:bc:5b:ab:f5:ec:6b:3b:17:ee:cb:95:2d:a1:2a:
52:be:b1:1a:c7:e6:aa:11:04:a8:9b:99:15:d4:19:
99:3b:cc:6d:28:82:ae:5e:c8:05:9c:71:58:67:c0:
80:52:47:6b:c0:f3:cb:ad:bf:ba:ad:81:2d:ef:41:
3d:c4:e8:02:81:b2:5e:6e:67:ea:bd:b8:d8:41:ca:
76:79:46:f0:e2:9d:e7:01:db:86:8e:d4:c9:52:07:
51:2b:6c:e2:cd:63:e5:3a:fa:6f:97:84:e8:57:ee:
d6:90:93:41:5f:f5:dc:f8:ed:dc:60:58:7d:ed:dd:
69:e1:f2:49:0b:62:b9:3d:c9:31:8d:b9:68:b8:98:
f9:45:c3:ed:f4:5c:24:0e:b1:22:b8:63:55:b1:db:
32:57:74:29:9f:e4:29:25:47:59:ef:ce:9a:9c:2c:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:04:6A:7A:FD:51:A4:A7:B2:97:06:5C:2F:EA:B4:C8:AC:7D:A1:F4
X509v3 Authority Key Identifier:
keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:c1:c4:16:32:f8:f6:78:eb:27:10:a9:e4:81:7b:2e:33:
15:31:f7:b4:48:37:8a:0a:07:38:67:48:0d:4f:29:c2:e8:31:
c6:11:5e:ec:0a:0b:0a:1e:82:4a:ab:49:e6:e8:95:33:b2:41:
4d:fc:2c:ba:06:95:f3:7a:ea:67:37:75:91:eb:e9:f4:ca:89:
0b:f2:c4:85:60:b9:a3:a4:bb:66:23:90:07:a2:8e:ce:95:24:
86:97:09:62:38:2e:68:91:5b:42:ed:72:51:28:af:05:d4:fd:
44:86:8a:ab:f9:aa:0f:ad:8b:7a:a1:93:96:49:ae:3e:ec:93:
06:c6:55:e8:46:3d:ee:07:67:c1:a9:9d:a9:9f:6b:80:56:75:
58:98:e5:4c:5e:13:d5:a1:d9:0d:2c:b0:fc:58:13:3d:27:83:
c5:01:6d:71:86:c5:d6:29:72:34:ca:a4:86:ec:8b:c4:07:fd:
56:11:0b:03:c6:20:9c:02:8f:3b:b8:01:6d:18:e3:2e:44:15:
7b:06:c3:18:49:bc:af:42:40:94:2a:e1:e6:1e:8d:24:88:b7:
e1:96:f9:db:33:5d:bd:8a:17:5d:e8:5f:2c:66:24:31:ca:19:
b8:ba:54:3b:32:af:67:87:c3:8b:36:4c:0f:50:f0:67:3d:d4:
91:a0:93:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:53:50 2025 by rpki-client