Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier: KHQLI4254QjoXMZ0tkvrxL/wyW/mQGDis+sUtETiZTI=
Subject key identifier: 58:B9:AF:F4:8E:0D:59:B6:63:B6:BD:A4:33:9C:C9:18:76:1F:CB:E8
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial: 0198D4E068E696EF79B5C146B39AD127BDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number: 0E7D
Signing time: Sat 23 Aug 2025 03:02:13 +0000
Manifest this update: Sat 23 Aug 2025 03:02:13 +0000
Manifest next update: Sun 24 Aug 2025 03:02:13 +0000
Files and hashes: 1: 31BQV3QAlmQzRsLUDQbTCf9Ts0c.roa (hash: f5KyFjaDpcu5Ry6iCP+PpIAQgbWGNkKpf4ok3qoVBRQ=)
2: 3AEqC5MBKsUSJPKumrvs8Im8c9o.roa (hash: D78tSUGZBxIx3iz83nRMiDYhqRD43nH1bdGS66Ruaho=)
3: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: Bf5jvH6wgHjOBmLLLue49tMAMO+G5EzsksmXAyod99Y=)
4: i7f3Os5SqwUidTwtNEfR_Ylz3QE.roa (hash: Jdo1W7QOzxfUxrWm3qhdLrJjsKXCupCbNIYoEy3U06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:68:e6:96:ef:79:b5:c1:46:b3:9a:d1:27:bd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Validity
Not Before: Aug 23 03:02:13 2025 GMT
Not After : Aug 24 03:02:13 2025 GMT
Subject: CN=58b9aff48e0d59b663b6bda4339cc918761fcbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:59:57:38:51:ee:b8:c8:ae:d9:3f:f5:71:
81:3a:d2:81:3d:09:b1:50:03:6b:82:df:20:6a:6a:
d5:3f:a6:ea:46:97:14:5c:07:71:4b:40:e6:bd:cf:
ac:af:d4:9e:8d:6a:a3:2d:b2:4b:85:7e:48:2b:bf:
d2:93:54:fb:70:5e:b3:56:b2:2d:0d:6b:1a:8a:ae:
34:91:50:f1:31:0c:07:39:71:c9:02:8a:84:82:b2:
7c:2e:0b:6c:ef:f3:81:2b:5d:75:f9:18:f7:b8:4b:
00:51:78:16:84:5d:d3:88:58:c0:ef:c2:5c:19:bc:
67:8a:eb:13:1e:66:cb:0b:1a:1a:67:b9:f0:19:db:
c9:09:9d:48:ab:e7:87:09:9f:80:31:a7:5c:10:e8:
de:1c:19:1a:e4:e6:b7:1b:c1:2c:9b:02:21:de:f1:
62:80:f0:59:4a:4b:b5:fc:21:ec:2d:5f:51:b9:c6:
77:3e:b8:2c:23:4c:1d:50:99:b2:90:80:25:d9:0e:
7b:03:4d:0a:a0:e5:c5:e6:56:2b:d0:82:c9:cb:b9:
d6:92:ca:3c:3b:75:ba:8f:83:f4:2b:dd:2b:4c:a8:
af:b8:d1:92:44:33:66:a5:80:29:3c:9c:1a:ce:e9:
11:ea:ce:e4:4a:19:ff:74:1a:8a:58:57:f2:5e:c8:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B9:AF:F4:8E:0D:59:B6:63:B6:BD:A4:33:9C:C9:18:76:1F:CB:E8
X509v3 Authority Key Identifier:
keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6b:7d:01:e1:91:0a:71:ca:56:5c:f6:a7:5c:d0:ae:5b:e5:
45:ff:04:dd:c9:ac:0a:ce:ff:10:58:e0:81:9c:23:02:17:f6:
0e:28:eb:ac:a6:b9:47:76:77:0b:8d:63:7e:b6:55:63:2b:1c:
6e:a5:a2:ce:d7:1e:d0:ac:4e:2e:58:cf:c6:e8:e2:8f:a7:e1:
f0:f0:4d:68:7a:6d:27:95:7f:24:f2:37:72:fa:c5:db:3a:c5:
05:0b:f3:52:76:1e:b7:47:bb:e9:05:30:1c:86:ec:3e:20:85:
10:7b:b6:db:3a:84:f0:a3:69:7b:48:e3:d4:bb:d5:a3:3c:a2:
e9:67:b9:dd:81:d5:be:00:48:56:36:fd:f0:ec:68:14:27:51:
fb:d9:f7:ad:bb:03:22:e9:de:33:af:da:0d:6e:ab:1b:6a:44:
75:c9:b8:3b:99:33:a1:51:45:b3:82:0d:69:db:25:87:51:37:
95:c0:8d:b3:41:81:83:71:fc:38:3e:7d:d0:90:99:af:3a:84:
92:0b:40:30:88:d9:0e:c5:e6:9c:26:dd:7f:fa:29:ce:17:f3:
be:3a:8f:c9:ef:a9:83:72:b4:b3:70:55:9a:3b:2f:bc:30:5c:
bf:03:9c:5c:99:99:60:1d:1c:15:db:b8:e1:46:77:a2:53:a4:
c0:d6:93:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:52 2025 by rpki-client