Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier: 1mzOwBwgEzj4xKqA5fUr0nJsdR8bB6YIB5ZOblNSYxM=
Subject key identifier: 3C:69:AD:CD:BF:5D:E5:BD:0B:FB:ED:F5:FA:8C:A5:1B:98:92:89:0D
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial: 019916890AB7A2E60F5CFFB1B3B90E4D5325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number: 0E9F
Signing time: Thu 04 Sep 2025 21:01:43 +0000
Manifest this update: Thu 04 Sep 2025 21:01:43 +0000
Manifest next update: Fri 05 Sep 2025 21:01:43 +0000
Files and hashes: 1: 31BQV3QAlmQzRsLUDQbTCf9Ts0c.roa (hash: f5KyFjaDpcu5Ry6iCP+PpIAQgbWGNkKpf4ok3qoVBRQ=)
2: 3AEqC5MBKsUSJPKumrvs8Im8c9o.roa (hash: D78tSUGZBxIx3iz83nRMiDYhqRD43nH1bdGS66Ruaho=)
3: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: ZlLWBsb1Z72CjiWqvckkNH5DoxuKrIaXBLivei4ayRc=)
4: i7f3Os5SqwUidTwtNEfR_Ylz3QE.roa (hash: Jdo1W7QOzxfUxrWm3qhdLrJjsKXCupCbNIYoEy3U06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:89:0a:b7:a2:e6:0f:5c:ff:b1:b3:b9:0e:4d:53:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Validity
Not Before: Sep 4 21:01:43 2025 GMT
Not After : Sep 5 21:01:43 2025 GMT
Subject: CN=3c69adcdbf5de5bd0bfbedf5fa8ca51b9892890d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ff:83:ec:94:56:72:09:e5:6e:d5:03:73:db:
68:99:74:2b:ff:b6:b2:95:86:68:66:9a:26:27:4d:
77:b7:77:ab:5f:c1:90:d6:a4:6b:f2:36:ac:9b:91:
17:ac:e8:6a:b0:6e:2f:20:88:4e:3d:b8:e7:96:7e:
0e:42:8d:81:ea:48:6a:d5:cc:f7:b6:5b:bb:a9:4c:
b5:a1:d3:19:69:25:08:98:f5:7d:1e:de:33:7c:4c:
8d:6f:73:ef:d8:a0:35:ef:97:08:f0:ec:c2:ff:b6:
c8:e2:f0:41:a3:13:11:a8:a7:52:1a:04:b9:92:7f:
16:0b:85:71:5d:15:40:5d:46:e3:6a:2c:29:6f:7e:
6a:24:a8:86:39:b9:69:a3:bb:86:56:a2:16:4d:ba:
97:9e:b1:e8:b6:6d:cf:47:23:b2:57:6a:74:a2:83:
8f:6d:ac:93:24:08:f8:75:a9:af:97:aa:81:87:91:
d3:d4:8d:94:b7:c8:aa:b1:ff:84:5a:ec:72:7e:ac:
e3:a0:11:d7:dd:a1:7f:6d:b9:3a:8c:0b:78:15:cc:
5c:0f:82:3e:77:4e:aa:35:fe:f4:45:6d:f8:19:a6:
45:b8:12:37:8f:3b:91:18:13:dd:e6:9a:95:fe:c5:
f4:ec:77:35:9b:65:82:83:4d:1a:64:ea:46:bc:ff:
2d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:69:AD:CD:BF:5D:E5:BD:0B:FB:ED:F5:FA:8C:A5:1B:98:92:89:0D
X509v3 Authority Key Identifier:
keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:b7:63:b4:8a:1e:02:6d:9b:4a:f5:3b:85:22:47:7a:23:19:
f9:26:f8:33:ee:7b:f5:d3:6b:ed:58:2d:6c:87:85:01:3f:ee:
99:38:78:9c:b1:06:79:88:68:58:1a:90:50:45:af:58:df:58:
2a:de:dd:ed:07:ba:36:c9:cc:f0:19:90:03:39:f3:79:a8:5f:
3a:11:8a:45:27:13:50:e8:4c:40:25:75:3e:00:77:8b:7b:7c:
e4:83:1c:c4:16:d7:60:24:3a:a0:82:65:84:23:30:55:f7:b7:
4a:b9:56:44:3e:98:40:54:6b:30:b3:38:a9:79:36:d8:55:15:
4b:bf:98:da:4d:a2:b7:e2:ff:a6:c1:75:29:4e:2e:5b:2f:4b:
c6:d7:63:94:ce:83:0c:48:06:3b:1c:81:ea:0b:41:f6:5b:8e:
bd:4b:b6:56:15:be:3d:4e:bc:a2:07:04:b5:4c:99:7d:99:43:
5a:e1:19:b8:b3:d9:e1:a4:49:78:43:ef:9e:50:77:02:a2:1f:
73:d0:1f:68:bf:02:a6:7d:38:b5:79:13:7d:29:43:5c:6f:16:
fc:9f:98:c3:8a:b2:d3:d5:1c:f7:b0:10:ff:ad:4b:67:f8:88:
d9:e5:fe:cc:d0:49:a1:65:48:2c:40:80:4f:8d:b2:1d:3c:33:
34:36:b2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:13 2025 by rpki-client