Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: nS05qzjTSKxqOwuJejxB/xTjaBzNQsrnH0BjmssfLDQ=
Subject key identifier: 9C:A1:C2:9D:39:C0:18:6B:8C:16:34:30:1A:F1:67:B4:85:04:0E:18
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 0198485277DAEF680E04D57303530DBE47ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0C7D
Signing time: Sat 26 Jul 2025 20:00:20 +0000
Manifest this update: Sat 26 Jul 2025 20:00:20 +0000
Manifest next update: Sun 27 Jul 2025 20:00:20 +0000
Files and hashes: 1: TZsdWn_ShXFxIkxKlQy8DibZR2E.roa (hash: co6aRk3sBWvyMyvUq+M5GzZIlIBl72OUVtfVngSrNNU=)
2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: 2T7gZnfu9YA5BytPt/uj1trDe1j1tbIsuIAeUVeojVM=)
3: uXEAv92OojWVDo1OywkWFuXxGAs.roa (hash: F32EsoDAnixW1ABJDoWWZoPCzcGl9S7Z/h18Xy1K3H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:77:da:ef:68:0e:04:d5:73:03:53:0d:be:47:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Jul 26 20:00:20 2025 GMT
Not After : Jul 27 20:00:20 2025 GMT
Subject: CN=9ca1c29d39c0186b8c1634301af167b485040e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:ba:9d:89:da:96:d0:2b:53:b7:f6:bf:c4:
11:04:53:fc:a7:dc:82:7f:de:e5:44:d0:5d:c4:ff:
f7:7a:c8:cb:7a:53:7d:c5:73:63:60:f0:e7:c1:9e:
00:89:b1:ea:a7:c1:aa:85:69:2d:3d:25:14:a0:74:
d6:56:fa:09:99:71:5d:db:ab:0f:91:f8:76:c5:67:
8b:81:01:9f:60:4d:fc:dd:1d:ec:5e:eb:d2:f7:c1:
1f:8d:60:43:3d:1b:e3:63:91:c3:32:f4:fe:3b:89:
a1:b1:c0:3e:7e:60:28:93:d4:e8:a1:45:0e:40:09:
c2:dd:54:ce:c6:d1:63:eb:0b:54:3d:75:53:6c:9a:
8c:67:f2:69:38:18:4d:92:36:5a:c8:87:94:a5:3f:
db:07:c0:32:a6:b9:b0:c1:94:02:87:7f:70:22:cd:
b3:90:a0:48:78:35:44:9c:1b:58:02:bf:be:66:cd:
75:0a:6e:e4:20:d7:3a:3d:a2:28:ea:4b:ab:29:0f:
a5:62:17:b5:0e:eb:44:0d:79:74:5a:53:ec:37:b9:
85:5f:c4:aa:c6:7f:05:94:60:a2:74:44:52:0d:93:
19:fc:66:ed:83:87:52:83:4f:40:d4:91:e3:cb:60:
c2:fe:79:95:55:31:24:d8:44:82:49:9e:70:cd:38:
48:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A1:C2:9D:39:C0:18:6B:8C:16:34:30:1A:F1:67:B4:85:04:0E:18
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f6:b3:cd:30:43:ea:86:2e:da:f7:d3:82:5e:4c:af:ce:bd:
cc:e5:04:fb:06:0c:ab:3a:a5:a4:2b:76:ca:98:14:20:79:a8:
d9:0f:f1:27:45:2c:aa:18:61:9e:29:9e:8a:62:ba:fb:a3:3a:
bd:01:3c:99:11:0a:41:ad:64:70:63:18:c6:40:cb:d4:ba:20:
a6:61:1e:40:96:48:df:85:38:62:2b:f3:0a:40:0a:97:1a:03:
e3:65:54:40:a2:1a:10:59:3c:86:16:c7:b3:7c:31:61:cc:c8:
86:66:54:7c:4b:b3:87:0d:4d:95:75:5c:20:50:60:a8:4c:00:
fd:71:15:31:0c:80:46:12:60:9b:5a:e2:3d:f2:c8:a7:36:75:
9b:67:24:71:44:ba:62:13:06:a2:3d:fc:51:6f:35:c1:7a:39:
ec:e9:5a:6d:e2:a0:93:f7:8b:04:fe:d2:b2:83:86:65:ab:45:
8c:38:57:6a:4e:38:9f:1e:96:f8:46:64:66:f8:e0:75:50:3d:
be:fa:e8:c5:16:c0:a7:4f:c0:a4:93:ed:86:54:90:3e:58:7f:
81:96:ac:c9:7b:af:e5:2e:a9:2e:f8:91:24:69:38:f4:34:fc:
80:dc:3d:dd:f2:49:d4:ed:50:6d:81:cb:ff:ce:6e:ca:29:72:
f5:3e:7c:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUnfa72gOBNVzA1MNvkftMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MWJiMjFiNWMxODg5MDMwZDM2NWE1NDlmMjFkNWI0MjZm
OWRkYTgwHhcNMjUwNzI2MjAwMDIwWhcNMjUwNzI3MjAwMDIwWjAzMTEwLwYDVQQD
Eyg5Y2ExYzI5ZDM5YzAxODZiOGMxNjM0MzAxYWYxNjdiNDg1MDQwZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCq6nYnaltArU7f2v8QRBFP8p9yC
f97lRNBdxP/3esjLelN9xXNjYPDnwZ4AibHqp8GqhWktPSUUoHTWVvoJmXFd26sP
kfh2xWeLgQGfYE383R3sXuvS98EfjWBDPRvjY5HDMvT+O4mhscA+fmAok9TooUUO
QAnC3VTOxtFj6wtUPXVTbJqMZ/JpOBhNkjZayIeUpT/bB8AyprmwwZQCh39wIs2z
kKBIeDVEnBtYAr++Zs11Cm7kINc6PaIo6kurKQ+lYhe1DutEDXl0WlPsN7mFX8Sq
xn8FlGCidERSDZMZ/Gbtg4dSg09A1JHjy2DC/nmVVTEk2ESCSZ5wzThISwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyhwp05wBhrjBY0MBrxZ7SFBA4YMB8GA1UdIwQY
MBaAFLgbshtcGIkDDTZaVJ8h1bQm+d2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUt
YWM5YWNkMzUyODQyLzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUtYWM5YWNkMzUyODQy
LzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/azzTBD
6oYu2vfTgl5Mr869zOUE+wYMqzqlpCt2ypgUIHmo2Q/xJ0UsqhhhnimeimK6+6M6
vQE8mREKQa1kcGMYxkDL1LogpmEeQJZI34U4YivzCkAKlxoD42VUQKIaEFk8hhbH
s3wxYczIhmZUfEuzhw1NlXVcIFBgqEwA/XEVMQyARhJgm1riPfLIpzZ1m2ckcUS6
YhMGoj38UW81wXo57OlabeKgk/eLBP7SsoOGZatFjDhXak44nx6W+EZkZvjgdVA9
vvroxRbAp0/ApJPthlSQPlh/gZasyXuv5S6pLviRJGk49DT8gNw93fJJ1O1QbYHL
/85uyily9T58jA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:29:18 2025 by rpki-client