Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: Q3+z5EoGE8dW1xIk5yOf1omxAJ2XLtp47P+dO8w4zFY=
Subject key identifier: D3:6F:B0:84:72:30:08:7B:C7:15:70:2E:64:48:D8:33:91:F6:7C:9F
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 01974D452A5986B7885D43AF8019A697B4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0BFB
Signing time: Sun 08 Jun 2025 02:01:07 +0000
Manifest this update: Sun 08 Jun 2025 02:01:07 +0000
Manifest next update: Mon 09 Jun 2025 02:01:07 +0000
Files and hashes: 1: TZsdWn_ShXFxIkxKlQy8DibZR2E.roa (hash: co6aRk3sBWvyMyvUq+M5GzZIlIBl72OUVtfVngSrNNU=)
2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: 7o/zZYJKM+r5g/IdHJuyger3JymcxFj4LmngoR08Thc=)
3: uXEAv92OojWVDo1OywkWFuXxGAs.roa (hash: F32EsoDAnixW1ABJDoWWZoPCzcGl9S7Z/h18Xy1K3H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:2a:59:86:b7:88:5d:43:af:80:19:a6:97:b4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Jun 8 02:01:07 2025 GMT
Not After : Jun 9 02:01:07 2025 GMT
Subject: CN=d36fb0847230087bc715702e6448d83391f67c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:de:00:72:4d:aa:4c:31:9a:ee:ee:1c:cf:
96:68:de:77:9d:c3:a5:e2:4f:af:83:8b:98:fc:78:
c3:bc:b8:8e:6b:43:c8:b4:17:a9:98:5e:39:e3:25:
c0:2b:8b:a6:19:c5:2e:f1:6e:14:65:0a:f7:7d:d5:
06:64:c3:55:d1:29:ff:54:13:8b:3f:34:30:0e:09:
c8:93:2c:f7:cb:78:ff:e2:d5:04:5a:91:7c:47:7f:
3b:dc:0b:a4:53:01:7a:cb:64:52:66:1a:7d:a8:39:
1e:c0:e1:be:8a:ab:5d:96:af:b2:bd:eb:6b:de:60:
62:76:5b:25:6c:51:d8:41:81:38:d0:ba:86:4b:ec:
a8:aa:84:d9:71:72:2a:8d:99:60:52:77:c9:69:4f:
f7:92:3d:f1:a8:42:24:0b:0b:f2:da:b8:b6:40:f7:
20:c5:e0:4f:84:45:a7:77:72:b6:3c:f9:dc:20:0c:
d0:b6:6b:33:19:9f:79:4a:e1:2a:2f:d0:fb:cd:f1:
12:b8:4c:62:ef:82:3c:c7:b1:3c:47:b7:5c:ac:8d:
03:a2:ae:74:9e:5c:c3:63:46:11:dd:be:7a:90:67:
df:f9:bf:f3:2d:d4:8c:ed:dc:3f:e9:f0:60:55:a7:
9c:83:f7:8e:a7:67:36:21:77:e5:d0:d7:06:b3:0c:
68:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6F:B0:84:72:30:08:7B:C7:15:70:2E:64:48:D8:33:91:F6:7C:9F
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:4a:d5:66:cc:b7:13:23:ea:04:b2:66:f4:4b:20:58:ca:94:
f7:d6:ad:0c:37:57:b5:47:f2:98:2e:d7:7f:72:fb:3f:84:c0:
d4:cb:14:7d:b4:23:40:5e:e3:9e:ae:24:1d:fb:95:3f:42:75:
55:9c:0b:47:49:ce:1a:27:3c:47:20:6d:db:fc:f4:14:63:60:
18:1b:14:9d:53:05:13:d6:a2:12:ba:98:11:3a:e4:2c:36:c9:
e0:8c:7d:2a:92:dc:8a:36:ec:7c:76:03:f2:4b:0f:c5:16:ac:
2b:b0:23:8f:59:f2:88:34:9b:65:a1:df:52:dc:1d:71:cc:13:
b9:cc:40:13:bb:08:ea:33:cb:8a:03:f7:b6:4e:44:7b:1f:ab:
a0:d0:dc:30:f1:db:de:c1:96:29:b1:85:8e:a9:4c:d2:df:27:
60:4b:ef:8f:a4:13:0e:88:a0:09:ea:33:52:89:9a:19:c2:28:
3c:7f:9a:1d:fe:52:a6:4b:fc:80:85:13:70:1a:61:5a:a9:2c:
f9:45:d6:14:f6:a1:4a:7e:62:1e:cb:6e:12:8e:c7:2b:f7:e0:
ef:ba:f4:08:4e:37:a6:8d:69:29:fb:51:2a:fc:bf:da:06:61:
3b:53:71:6d:ad:cc:0a:e0:ba:26:5f:a2:19:14:4d:17:4f:95:
31:9a:ff:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRSpZhreIXUOvgBmml7TFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MWJiMjFiNWMxODg5MDMwZDM2NWE1NDlmMjFkNWI0MjZm
OWRkYTgwHhcNMjUwNjA4MDIwMTA3WhcNMjUwNjA5MDIwMTA3WjAzMTEwLwYDVQQD
EyhkMzZmYjA4NDcyMzAwODdiYzcxNTcwMmU2NDQ4ZDgzMzkxZjY3YzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBjeAHJNqkwxmu7uHM+WaN53ncOl
4k+vg4uY/HjDvLiOa0PItBepmF454yXAK4umGcUu8W4UZQr3fdUGZMNV0Sn/VBOL
PzQwDgnIkyz3y3j/4tUEWpF8R3873AukUwF6y2RSZhp9qDkewOG+iqtdlq+yvetr
3mBidlslbFHYQYE40LqGS+yoqoTZcXIqjZlgUnfJaU/3kj3xqEIkCwvy2ri2QPcg
xeBPhEWnd3K2PPncIAzQtmszGZ95SuEqL9D7zfESuExi74I8x7E8R7dcrI0Doq50
nlzDY0YR3b56kGff+b/zLdSM7dw/6fBgVaecg/eOp2c2IXfl0NcGswxo4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNvsIRyMAh7xxVwLmRI2DOR9nyfMB8GA1UdIwQY
MBaAFLgbshtcGIkDDTZaVJ8h1bQm+d2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUt
YWM5YWNkMzUyODQyLzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUtYWM5YWNkMzUyODQy
LzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUErVZsy3
EyPqBLJm9EsgWMqU99atDDdXtUfymC7Xf3L7P4TA1MsUfbQjQF7jnq4kHfuVP0J1
VZwLR0nOGic8RyBt2/z0FGNgGBsUnVMFE9aiErqYETrkLDbJ4Ix9KpLcijbsfHYD
8ksPxRasK7Ajj1nyiDSbZaHfUtwdccwTucxAE7sI6jPLigP3tk5Eex+roNDcMPHb
3sGWKbGFjqlM0t8nYEvvj6QTDoigCeozUomaGcIoPH+aHf5Spkv8gIUTcBphWqks
+UXWFPahSn5iHstuEo7HK/fg77r0CE43po1pKftRKvy/2gZhO1Nxba3MCuC6Jl+i
GRRNF0+VMZr/1Q==
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:25:20 2025 by rpki-client