Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier: K1ENVlsOGAQIBafG9My81ujshmHRo/lyQZfeC0MqJAc=
Subject key identifier: A1:9E:03:B9:E8:6D:24:87:FD:D0:E6:8B:A7:C8:4A:75:D2:D3:FF:AF
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial: 0199FC5875F63EA16CAC52DD57E04B2C3BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number: 0F16
Signing time: Sun 19 Oct 2025 12:01:19 +0000
Manifest this update: Sun 19 Oct 2025 12:01:19 +0000
Manifest next update: Mon 20 Oct 2025 12:01:19 +0000
Files and hashes: 1: 31BQV3QAlmQzRsLUDQbTCf9Ts0c.roa (hash: f5KyFjaDpcu5Ry6iCP+PpIAQgbWGNkKpf4ok3qoVBRQ=)
2: 3AEqC5MBKsUSJPKumrvs8Im8c9o.roa (hash: D78tSUGZBxIx3iz83nRMiDYhqRD43nH1bdGS66Ruaho=)
3: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: C9VGbssqNjopJPuZGJhy+/YZW6jOHKEso6pwEdMCEto=)
4: i7f3Os5SqwUidTwtNEfR_Ylz3QE.roa (hash: Jdo1W7QOzxfUxrWm3qhdLrJjsKXCupCbNIYoEy3U06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:75:f6:3e:a1:6c:ac:52:dd:57:e0:4b:2c:3b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Validity
Not Before: Oct 19 12:01:19 2025 GMT
Not After : Oct 20 12:01:19 2025 GMT
Subject: CN=a19e03b9e86d2487fdd0e68ba7c84a75d2d3ffaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:a7:11:59:a6:7b:c6:a8:52:8f:f1:9a:d0:
65:2f:73:05:7c:93:f6:c5:12:d1:60:30:b4:c0:4a:
9d:a8:f8:d8:08:e6:70:5f:d1:00:92:42:38:95:f3:
c8:44:8f:60:8e:e7:64:f0:64:9e:0d:9c:cd:59:47:
cd:16:33:5b:02:a4:19:d5:82:c1:de:94:d1:e9:be:
fe:be:64:f1:ab:66:af:99:32:39:4d:a7:2c:3d:0e:
e4:d3:bd:05:cd:ea:e5:ad:ce:ee:10:99:b7:5b:3d:
b0:74:7e:a3:e3:a3:22:5a:95:d7:88:e3:e8:f4:87:
52:db:c9:c5:79:da:78:e5:04:b1:53:ca:5d:f6:ea:
03:61:9e:4f:6f:19:f2:44:44:0a:89:5a:e9:ff:d7:
7f:8f:79:66:24:58:20:89:90:d5:39:66:32:a9:78:
bf:33:2c:fd:79:7a:e2:04:1d:0a:9a:9a:7b:24:fa:
78:d6:4f:d2:8c:5b:a6:88:95:a5:50:43:99:92:64:
94:94:f0:52:9e:de:95:1b:f4:ce:da:d5:9e:2d:fd:
30:b2:60:a3:6a:87:db:cc:2d:23:21:73:85:cf:2c:
ef:72:85:c5:90:34:92:b2:64:3e:9f:87:68:7a:32:
d0:f4:4b:11:dd:88:23:f1:95:a4:85:41:9a:f0:a8:
7c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9E:03:B9:E8:6D:24:87:FD:D0:E6:8B:A7:C8:4A:75:D2:D3:FF:AF
X509v3 Authority Key Identifier:
keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ef:e1:e4:5b:dc:99:d7:f2:be:16:f0:a1:67:86:f6:25:84:
33:b2:d3:55:f4:f4:66:65:67:86:69:4e:71:1c:1a:8f:bf:92:
2b:75:61:70:92:be:6c:a7:53:dc:47:35:0f:ae:73:21:13:fe:
4d:a9:1b:6c:c5:53:d8:a4:9f:7d:3a:b0:d9:41:50:12:1b:b4:
b7:ec:0c:53:a3:1c:a7:4f:4d:6f:5c:81:bf:b8:72:ef:ce:12:
c6:71:ca:1c:1d:90:8d:9c:c2:2d:9c:ef:d5:69:d6:7f:6c:dd:
19:8f:22:78:0d:0f:fd:6f:e2:66:60:eb:56:fe:10:c7:c8:83:
c3:89:30:03:96:c1:1b:22:2f:7c:71:e5:99:25:bf:12:d1:0e:
5b:73:65:77:a6:f3:a2:18:da:9b:17:33:fd:bc:6f:99:ba:3a:
12:27:82:76:b0:dd:02:25:e2:15:4c:0b:8d:0d:af:af:b8:f5:
14:c0:38:f6:63:41:05:13:03:79:75:31:2a:f2:ad:26:81:8e:
e2:8f:b7:14:30:e3:12:13:8c:5e:e7:4f:95:84:99:5b:4d:53:
78:a8:65:4b:fb:1e:cb:0f:0b:ab:08:b2:eb:c8:7d:97:bf:15:
ea:af:50:18:2a:72:c2:fb:84:0c:16:85:a3:ae:85:1d:ef:c6:
79:b3:26:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHX2PqFsrFLdV+BLLDu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzN2Y5YmY4NGI2OWEwOTA0MjQzMmRhZTgzNzdlZTBhYzhm
ZjFjNjEwHhcNMjUxMDE5MTIwMTE5WhcNMjUxMDIwMTIwMTE5WjAzMTEwLwYDVQQD
EyhhMTllMDNiOWU4NmQyNDg3ZmRkMGU2OGJhN2M4NGE3NWQyZDNmZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvinEVmme8aoUo/xmtBlL3MFfJP2
xRLRYDC0wEqdqPjYCOZwX9EAkkI4lfPIRI9gjudk8GSeDZzNWUfNFjNbAqQZ1YLB
3pTR6b7+vmTxq2avmTI5TacsPQ7k070Fzerlrc7uEJm3Wz2wdH6j46MiWpXXiOPo
9IdS28nFedp45QSxU8pd9uoDYZ5PbxnyREQKiVrp/9d/j3lmJFggiZDVOWYyqXi/
Myz9eXriBB0Kmpp7JPp41k/SjFumiJWlUEOZkmSUlPBSnt6VG/TO2tWeLf0wsmCj
aofbzC0jIXOFzyzvcoXFkDSSsmQ+n4doejLQ9EsR3Ygj8ZWkhUGa8Kh83wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGeA7nobSSH/dDmi6fISnXS0/+vMB8GA1UdIwQY
MBaAFFN/m/hLaaCQQkMtroN37grI/xxhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUt
ODkyZWM2ZmY0NzcxLzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYmM3NDYtNDE2Yi00ZGE5LTkyMjUtODkyZWM2ZmY0Nzcx
LzEvVTMtYi1FdHBvSkJDUXkydWczZnVDc2pfSEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYO/h5Fvc
mdfyvhbwoWeG9iWEM7LTVfT0ZmVnhmlOcRwaj7+SK3VhcJK+bKdT3Ec1D65zIRP+
TakbbMVT2KSffTqw2UFQEhu0t+wMU6Mcp09Nb1yBv7hy784SxnHKHB2QjZzCLZzv
1WnWf2zdGY8ieA0P/W/iZmDrVv4Qx8iDw4kwA5bBGyIvfHHlmSW/EtEOW3Nld6bz
ohjamxcz/bxvmbo6EieCdrDdAiXiFUwLjQ2vr7j1FMA49mNBBRMDeXUxKvKtJoGO
4o+3FDDjEhOMXudPlYSZW01TeKhlS/seyw8Lqwiy68h9l78V6q9QGCpywvuEDBaF
o66FHe/GebMmVw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:17:48 2025 by rpki-client