Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier: qkvzxHh+IcELD955WHtYMgdVqThvG8Z0es9x0SSDpRg=
Subject key identifier: A7:A0:2E:C7:0F:49:C3:95:5E:C6:BE:E0:87:B8:94:99:C0:DE:D9:AB
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial: 019739875D240BBCA29B3DA7E4510530E2BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number: 0DA8
Signing time: Wed 04 Jun 2025 06:01:01 +0000
Manifest this update: Wed 04 Jun 2025 06:01:01 +0000
Manifest next update: Thu 05 Jun 2025 06:01:01 +0000
Files and hashes: 1: 31BQV3QAlmQzRsLUDQbTCf9Ts0c.roa (hash: f5KyFjaDpcu5Ry6iCP+PpIAQgbWGNkKpf4ok3qoVBRQ=)
2: 3AEqC5MBKsUSJPKumrvs8Im8c9o.roa (hash: D78tSUGZBxIx3iz83nRMiDYhqRD43nH1bdGS66Ruaho=)
3: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: wxE5p8Jjd3mn8Vv2CPDVo3Qb6JZQAJgioz7V854xzLQ=)
4: i7f3Os5SqwUidTwtNEfR_Ylz3QE.roa (hash: Jdo1W7QOzxfUxrWm3qhdLrJjsKXCupCbNIYoEy3U06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:87:5d:24:0b:bc:a2:9b:3d:a7:e4:51:05:30:e2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Validity
Not Before: Jun 4 06:01:01 2025 GMT
Not After : Jun 5 06:01:01 2025 GMT
Subject: CN=a7a02ec70f49c3955ec6bee087b89499c0ded9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:a4:19:33:aa:32:69:7a:84:d2:f8:4a:6e:
c8:c9:c1:db:07:f0:23:8c:d0:87:d2:eb:2d:d2:c9:
ed:5f:4a:06:0f:57:d2:7f:33:86:52:42:e8:47:6b:
3c:5a:1c:18:0e:fe:86:9c:56:8b:c9:07:bf:cc:44:
73:ab:bd:72:e0:10:f5:cb:25:43:cd:0b:bc:bf:84:
bb:d9:45:47:09:1f:33:61:1a:4a:a7:31:cc:c8:59:
45:d9:4d:d0:70:99:c0:3a:e7:fd:84:aa:db:9e:00:
30:a9:e4:9e:7c:fe:38:7a:5e:c0:1d:9d:8d:9c:fb:
df:5f:01:ec:0e:43:98:6f:19:6f:d5:80:7d:1d:af:
9c:3a:5b:b8:e0:55:9e:55:d2:23:cd:62:e8:8f:68:
c7:00:23:89:7d:97:12:23:4a:14:21:6f:95:01:5a:
e4:f3:de:c3:f8:cf:69:46:66:55:d0:ea:4c:c5:aa:
1d:1c:ba:98:d5:30:8f:76:1f:11:c8:ac:0d:53:a2:
a6:63:84:af:b6:97:b2:0d:73:70:73:76:6e:d1:eb:
05:20:d8:f6:d2:ae:df:90:bd:ac:05:5e:70:ce:00:
5a:8f:94:80:92:e3:8c:1d:67:99:14:de:4b:e7:af:
86:56:81:8c:7a:21:9f:b9:8f:a2:39:66:bc:52:0e:
20:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A0:2E:C7:0F:49:C3:95:5E:C6:BE:E0:87:B8:94:99:C0:DE:D9:AB
X509v3 Authority Key Identifier:
keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4a:8e:a2:9f:f7:5b:9d:de:0e:9e:ff:2e:5d:d4:4b:f4:50:
6b:bf:71:5e:86:17:5c:31:49:48:7a:06:68:53:c2:c0:c9:52:
cd:02:53:58:a8:04:2e:12:2d:f5:09:84:27:b3:1b:bf:04:78:
e5:ee:ef:07:80:a7:f7:88:f6:6b:03:9d:df:4e:c7:a0:29:7d:
da:2f:44:73:f9:97:f0:69:24:08:bd:da:40:e4:50:88:f9:b5:
05:5b:9f:cc:d9:04:cf:a1:48:5e:9c:5e:15:76:1b:d4:5e:a4:
72:15:97:a9:a6:8d:2c:bd:ac:31:a2:ef:a3:05:d1:b7:ef:4a:
e9:bc:b1:66:20:e5:e8:9f:db:6f:a7:50:f4:1b:90:7c:24:0b:
c1:0c:f7:7d:08:45:e8:a7:c2:e2:ca:37:a4:0a:00:31:f6:8a:
27:16:92:54:d4:bc:92:ce:5b:5f:07:a0:7d:15:09:53:3c:1f:
bc:e6:75:67:ba:f2:2f:2b:02:24:07:4d:64:eb:17:ea:fd:ff:
c9:fd:52:13:af:5e:4c:b1:09:26:56:7f:ca:38:93:7f:31:c3:
49:ce:f2:d0:21:19:6f:2d:c8:36:84:75:b8:b6:ad:7c:b2:22:
d6:d9:9e:bc:83:08:e8:4d:9e:a7:6c:3e:c2:6a:1b:a5:3c:f6:
71:eb:3e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:24:39 2025 by rpki-client