Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
File: U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft (raw, json)
Hash identifier: eeUKoQEE7uyguqZ9EB0gMwUnZGslLfjmBiabqJpVQnE=
Subject key identifier: 01:E8:40:52:EA:99:1F:A9:E5:0D:F9:9A:C0:F5:38:1C:E6:B0:5F:07
Authority key identifier: 53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
Certificate issuer: /CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Certificate serial: 0197B70E52AEC049BCCEC26FCE80EE27E9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
Manifest number: 0DE9
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: 31BQV3QAlmQzRsLUDQbTCf9Ts0c.roa (hash: f5KyFjaDpcu5Ry6iCP+PpIAQgbWGNkKpf4ok3qoVBRQ=)
2: 3AEqC5MBKsUSJPKumrvs8Im8c9o.roa (hash: D78tSUGZBxIx3iz83nRMiDYhqRD43nH1bdGS66Ruaho=)
3: U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl (hash: BmrW46i618EuadRdL30twPknTLpvFuY3J1QeKsHFZ3k=)
4: i7f3Os5SqwUidTwtNEfR_Ylz3QE.roa (hash: Jdo1W7QOzxfUxrWm3qhdLrJjsKXCupCbNIYoEy3U06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:52:ae:c0:49:bc:ce:c2:6f:ce:80:ee:27:e9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537f9bf84b69a09042432dae8377ee0ac8ff1c61
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=01e84052ea991fa9e50df99ac0f5381ce6b05f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:6a:7f:7d:d5:0f:00:84:77:11:27:39:6b:
d0:e8:0e:4c:c6:99:30:11:f9:01:d1:af:68:bb:ab:
f4:16:d0:63:3f:e3:88:3b:49:63:b2:2d:2c:fc:f9:
30:a0:cd:85:cb:24:36:1b:58:a8:35:ee:6e:2a:d9:
b4:c9:3a:02:ce:59:2b:7e:b3:b1:91:7d:e6:d1:6d:
17:06:a9:8b:58:26:69:6b:ea:34:88:6b:c6:7f:65:
84:43:86:50:3c:b0:c6:15:e9:2f:cc:77:6e:71:ca:
3e:4c:cd:03:70:d2:0a:d2:65:40:ba:e2:46:68:d6:
41:c6:87:f1:f3:d3:bf:0d:a6:0f:a8:db:52:8b:3a:
22:18:ef:ea:47:bb:9a:32:c3:fd:ab:9a:f9:50:bb:
86:8b:8b:d4:72:4c:df:35:c3:eb:11:b8:c9:93:19:
06:e1:bc:96:13:6d:2d:d8:e6:90:3b:9f:00:05:3e:
63:91:72:01:7c:8a:c4:e4:37:3a:fc:2e:86:17:3c:
5b:21:93:69:97:b5:a0:85:58:11:8b:e8:b7:b7:a4:
a6:4e:01:43:2a:01:27:36:03:76:36:da:ab:3f:d3:
f8:6d:6a:06:3d:b3:79:67:f5:6a:d5:f8:a5:fb:df:
0e:7c:f7:d7:43:99:76:49:eb:19:02:e0:6b:75:66:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E8:40:52:EA:99:1F:A9:E5:0D:F9:9A:C0:F5:38:1C:E6:B0:5F:07
X509v3 Authority Key Identifier:
keyid:53:7F:9B:F8:4B:69:A0:90:42:43:2D:AE:83:77:EE:0A:C8:FF:1C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3-b-EtpoJBCQy2ug3fuCsj_HGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cbc746-416b-4da9-9225-892ec6ff4771/1/U3-b-EtpoJBCQy2ug3fuCsj_HGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:97:67:3d:f7:65:dd:bf:52:0d:dd:1b:41:f4:9f:79:78:8b:
30:d2:a2:66:b9:87:60:cc:b6:df:5d:de:7f:08:c7:b0:ac:71:
2d:89:ec:d7:7c:56:6b:dd:83:9e:14:02:97:41:90:6c:0e:f8:
25:b6:0f:5d:db:f0:b8:99:a9:81:3d:02:be:16:c1:04:62:58:
fe:72:61:37:5d:37:fb:cd:9e:88:69:2c:7a:84:5c:1b:19:56:
e6:9c:16:fd:09:8e:ce:fc:39:d4:b3:bd:aa:3c:b8:90:c1:9e:
ab:03:22:99:a5:19:d6:02:26:9f:ed:7a:3b:9b:52:6c:6e:28:
19:2d:e8:88:05:dc:13:a4:75:0c:bf:b7:3b:b6:f5:27:9c:0f:
74:ce:86:11:dc:aa:c5:2d:43:35:ac:80:06:26:ba:d9:a8:92:
82:3b:ff:d9:6f:18:18:5a:ac:45:c3:72:2d:92:77:65:1c:08:
da:e4:b1:7d:7f:53:33:3f:7f:8d:64:23:cf:d1:39:5e:18:08:
6b:1b:1a:2c:7d:79:6c:5f:99:3f:03:45:7c:92:2f:9c:5b:66:
2c:de:a8:83:60:c9:0c:83:89:af:84:40:32:a6:fd:8f:e6:db:
0e:fe:ca:13:45:57:95:a1:63:27:99:51:b4:6b:d0:9b:44:04:
d2:d6:5d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:48 2025 by rpki-client