
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier: 8aN9dUJyh7w0mgF8axOA1VqwAhENRM+dkW89bBFASzY=
Subject key identifier: 9A:32:53:AB:03:A7:88:EB:CE:7C:0A:BF:DB:9D:B5:AA:9C:EA:95:7D
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial: 01982AEDF6A5746DD8265E43F30F4A4E1E76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number: 0E25
Signing time: Mon 21 Jul 2025 03:01:34 +0000
Manifest this update: Mon 21 Jul 2025 03:01:34 +0000
Manifest next update: Tue 22 Jul 2025 03:01:34 +0000
Files and hashes: 1: 31BQV3QAlmQzRsLUDQbTCf9Ts0c.roa (hash: f5KyFjaDpcu5Ry6iCP+PpIAQgbWGNkKpf4ok3qoVBRQ=)
2: 3AEqC5MBKsUSJPKumrvs8Im8c9o.roa (hash: D78tSUGZBxIx3iz83nRMiDYhqRD43nH1bdGS66Ruaho=)
3: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: u4uf4QF4klSxe3o8WRDQhKQaTCVNC2SKXEVksntABms=)
4: i7f3Os5SqwUidTwtNEfR_Ylz3QE.roa (hash: Jdo1W7QOzxfUxrWm3qhdLrJjsKXCupCbNIYoEy3U06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 03:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:ed:f6:a5:74:6d:d8:26:5e:43:f3:0f:4a:4e:1e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Validity
Not Before: Jul 21 03:01:34 2025 GMT
Not After : Jul 22 03:01:34 2025 GMT
Subject: CN=9a3253ab03a788ebce7c0abfdb9db5aa9cea957d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b8:62:b4:6b:70:86:33:6e:50:33:f8:99:bc:
70:a9:a2:77:c9:f8:98:44:29:5a:1f:23:27:c5:86:
cb:2a:3c:3d:a2:b1:df:d5:19:4a:c5:7d:0f:00:96:
00:e5:43:68:da:e4:35:38:90:e5:ac:40:d9:32:0c:
67:59:0a:15:36:eb:98:5e:8c:f7:53:6a:7d:43:f6:
39:28:20:19:3d:64:3a:59:f0:9d:af:8d:85:1f:95:
55:dc:04:8c:9e:7d:39:6c:90:ea:99:a5:b5:6f:97:
e8:99:e9:62:15:6d:dd:87:58:87:39:6b:33:9a:c1:
28:03:d6:7f:3a:26:ca:ab:03:e9:3e:fd:0c:52:73:
69:5f:9c:1a:c9:57:e7:5a:5a:8c:55:99:f3:70:e3:
ad:06:3b:7c:6a:59:56:24:69:9d:3f:c9:e0:b4:11:
5b:65:9a:29:18:05:b9:3f:03:d8:70:66:57:28:a7:
ca:ba:68:d6:5f:1e:c1:73:52:ff:da:37:66:aa:51:
18:87:a8:f5:d1:e6:ec:3f:20:6a:0f:bf:d3:05:31:
22:c0:47:fa:68:46:23:b9:a9:df:e0:3e:29:96:87:
4f:08:97:86:8f:e3:ca:8c:b4:79:02:d0:48:e9:7c:
e9:8d:41:42:da:a5:19:d5:6e:a7:e0:65:41:c3:b2:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:32:53:AB:03:A7:88:EB:CE:7C:0A:BF:DB:9D:B5:AA:9C:EA:95:7D
X509v3 Authority Key Identifier:
keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b9:79:98:d3:07:6c:f4:1c:5b:ba:5f:29:8f:1c:5d:8b:94:
87:1b:24:c9:37:77:10:7d:41:8a:df:d0:38:c1:13:be:93:6a:
fe:2d:c7:e0:68:3b:f4:ae:f3:b0:7c:c3:53:e6:e5:09:63:0e:
9b:96:90:1c:12:d1:16:ec:79:40:66:6b:68:bf:07:31:88:38:
e1:78:5d:dc:33:54:e1:34:45:7e:9d:33:1b:db:3c:38:6e:19:
96:27:d3:58:02:46:64:3f:c8:ef:75:0c:06:3f:d7:fc:ff:88:
f2:7b:21:24:95:5f:03:bb:b9:90:b8:1d:65:e5:4a:2b:e2:85:
a1:af:d8:5f:1b:29:92:49:9d:63:7a:1f:79:bb:a8:21:9f:65:
73:8e:63:63:58:93:54:10:b9:46:20:1a:51:a0:d0:5d:b0:f7:
06:00:54:a3:37:34:7b:08:d2:3c:cd:2e:32:cd:89:4e:6e:4d:
e4:87:b7:2f:eb:aa:dd:f7:71:d7:b9:1e:18:10:a2:71:f3:68:
34:db:26:59:8e:47:5f:49:f7:ca:cd:81:d6:c9:26:3a:05:84:
28:4f:0f:2a:cc:a2:10:c5:64:76:28:e5:fc:f5:54:58:20:c1:
32:53:8b:df:fe:44:96:fe:90:9d:b4:58:88:b2:35:e3:34:81:
db:6f:c2:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:40:05 2025 by rpki-client