Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier: pYkMlWsOpnIx5aKiiJVCa+NyXfKwrjUeAVNsO63jnic=
Subject key identifier: CD:A6:C3:A5:35:B1:CC:46:9C:79:E7:C3:42:1B:A0:D5:B4:D2:0A:66
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial: 0196729D21C8732599F47E4000F508288E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number: 0D41
Signing time: Sat 26 Apr 2025 15:00:22 +0000
Manifest this update: Sat 26 Apr 2025 15:00:22 +0000
Manifest next update: Sun 27 Apr 2025 15:00:22 +0000
Files and hashes: 1: 31BQV3QAlmQzRsLUDQbTCf9Ts0c.roa (hash: f5KyFjaDpcu5Ry6iCP+PpIAQgbWGNkKpf4ok3qoVBRQ=)
2: 3AEqC5MBKsUSJPKumrvs8Im8c9o.roa (hash: D78tSUGZBxIx3iz83nRMiDYhqRD43nH1bdGS66Ruaho=)
3: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: 7jR5v04Bpe8nABeP1qvehl08R2Tb/3PmDqHe7/S7o3w=)
4: i7f3Os5SqwUidTwtNEfR_Ylz3QE.roa (hash: Jdo1W7QOzxfUxrWm3qhdLrJjsKXCupCbNIYoEy3U06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:9d:21:c8:73:25:99:f4:7e:40:00:f5:08:28:8e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Validity
Not Before: Apr 26 15:00:22 2025 GMT
Not After : Apr 27 15:00:22 2025 GMT
Subject: CN=cda6c3a535b1cc469c79e7c3421ba0d5b4d20a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:86:ec:5d:8a:4d:b2:40:c2:87:b2:7e:7d:4f:
5c:03:f2:d8:7d:23:cc:f1:cc:76:72:db:ba:a4:8b:
6b:11:aa:e0:77:05:a2:88:e2:ee:20:10:72:fb:0d:
28:9e:c6:63:14:0a:5a:7a:87:18:07:73:95:22:b9:
4e:dc:d4:f6:73:fe:b2:ed:ec:be:d7:6b:4e:95:8b:
9a:bd:83:9b:61:f6:f8:26:04:a1:a9:1c:58:48:97:
05:de:59:39:84:68:d0:bc:5f:83:1f:71:0f:f9:44:
21:17:2b:99:67:58:31:fb:56:c6:e3:f2:1a:7f:c6:
d1:5d:2f:ae:49:ed:b8:96:81:99:1f:2a:09:5a:c4:
0f:e5:31:b1:d0:0a:db:52:82:b0:cb:d2:03:99:1b:
f9:b9:c2:6e:a8:ac:d0:92:19:23:86:80:cf:6f:4c:
c7:45:7c:56:e2:59:97:63:98:38:10:17:34:e3:71:
9d:09:05:56:0f:2f:bd:3d:7a:b3:82:d5:54:4c:93:
d9:ec:b4:ea:33:79:b9:cc:c1:38:5e:09:d6:da:d3:
0b:ce:b4:3d:44:13:36:37:70:5d:bf:e6:05:f7:b5:
4b:8c:74:96:1c:5d:93:1e:57:85:37:46:14:82:c1:
88:7c:65:49:3a:c4:8c:6d:df:38:06:e6:74:56:ee:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A6:C3:A5:35:B1:CC:46:9C:79:E7:C3:42:1B:A0:D5:B4:D2:0A:66
X509v3 Authority Key Identifier:
keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:00:f5:98:b3:09:78:94:0b:94:a7:62:02:43:44:5b:b7:ff:
c6:16:ee:4d:d4:7c:da:d1:53:bd:05:b0:b1:57:f4:f1:05:4b:
1c:ca:9b:cb:af:e4:e0:54:24:64:a8:a4:f0:0f:17:d1:c6:ed:
5a:e9:3f:4b:e5:7e:72:07:a1:85:30:fe:f6:ce:75:df:8f:6c:
45:52:25:44:8d:96:7a:c8:94:c3:5a:a2:5d:84:ca:20:3b:31:
fe:1d:10:d6:3a:21:63:2c:6a:3d:c3:82:00:f2:10:70:01:a8:
80:ea:cc:ff:5c:c9:ba:87:2a:f2:72:71:9f:e6:68:3f:b7:61:
b6:20:25:2a:04:67:c2:78:98:f5:97:56:6f:51:f0:65:2c:bd:
ee:75:bb:0e:83:ed:95:33:7a:ba:8a:05:4a:5d:40:ac:76:89:
90:ef:9e:c0:94:83:4b:c2:58:68:ad:8b:5d:a0:92:df:14:86:
07:fd:a4:66:ef:3e:f8:4f:41:cf:1b:33:db:ac:14:f8:e1:37:
3b:4e:9b:c7:9e:f0:db:bc:2a:ee:23:12:6d:b0:d8:52:7d:39:
52:a1:eb:2f:85:e9:fd:18:2c:a3:af:95:f2:20:30:52:2f:bf:
b7:97:b6:ec:54:9a:49:1b:5d:3b:16:b1:82:56:3e:f2:b9:b2:
79:cc:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:30:39 2025 by rpki-client