Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: arjmq18MZG+wJlfzOxKH6uHc+hwgwY4LJ5I+yIyTXgY=
Subject key identifier: 3F:DC:5C:A6:BD:E7:00:F5:C1:11:2A:86:D6:6D:1F:53:32:40:51:C6
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 01993D95CC315D278B9FF69ED0E8AEFC3814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0CFC
Signing time: Fri 12 Sep 2025 11:00:51 +0000
Manifest this update: Fri 12 Sep 2025 11:00:51 +0000
Manifest next update: Sat 13 Sep 2025 11:00:51 +0000
Files and hashes: 1: TZsdWn_ShXFxIkxKlQy8DibZR2E.roa (hash: co6aRk3sBWvyMyvUq+M5GzZIlIBl72OUVtfVngSrNNU=)
2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: R+pweR+1rWkSjo0S9YOUJwJ1W2op7HR04ECab/1yzCk=)
3: uXEAv92OojWVDo1OywkWFuXxGAs.roa (hash: F32EsoDAnixW1ABJDoWWZoPCzcGl9S7Z/h18Xy1K3H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Sep 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:3d:95:cc:31:5d:27:8b:9f:f6:9e:d0:e8:ae:fc:38:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Sep 12 11:00:51 2025 GMT
Not After : Sep 13 11:00:51 2025 GMT
Subject: CN=3fdc5ca6bde700f5c1112a86d66d1f53324051c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:e3:68:00:26:f2:b3:d1:1a:09:4e:ae:2c:
71:88:a1:2a:7d:5e:da:4e:74:6a:ae:29:8c:da:28:
99:41:eb:4c:bf:74:ff:1a:ee:0e:9b:f9:24:3b:e8:
aa:30:c8:eb:46:4a:3c:49:10:2c:49:76:bf:0e:15:
f7:2b:90:bb:96:28:99:37:5b:4f:66:88:88:96:09:
6d:21:15:47:46:e7:50:dd:e4:de:21:d2:3b:87:3b:
ad:d6:87:73:45:3e:b8:a7:a8:a8:c6:eb:23:76:11:
ec:ae:22:21:83:8c:a7:90:1c:8c:d5:83:83:18:b8:
75:fc:d8:25:c0:65:6c:ef:93:f5:31:0e:dd:2b:91:
4c:e1:ae:df:02:87:76:2a:43:08:74:04:e3:fe:11:
25:3c:8e:fa:20:55:0a:f7:82:80:63:c2:ff:c3:4c:
52:1e:b5:f1:89:af:1c:b3:03:2d:fb:d4:86:b6:83:
dc:6b:9d:80:84:06:17:54:65:9d:d3:76:34:4b:00:
6f:5c:df:1a:86:17:6e:c2:f6:d2:96:20:35:5c:92:
58:a2:af:4f:8f:3f:07:f7:26:cc:24:9d:30:78:04:
03:60:a3:59:e1:8a:cd:45:ba:03:26:be:32:c5:57:
af:ab:33:c2:64:71:29:60:e5:9e:5b:e6:0a:3b:2d:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DC:5C:A6:BD:E7:00:F5:C1:11:2A:86:D6:6D:1F:53:32:40:51:C6
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:4d:5e:cd:85:90:5a:cf:ad:b3:45:42:2b:98:f9:e4:7b:d6:
a6:d7:25:52:a6:53:53:7d:b2:eb:ee:2d:fb:53:69:03:65:36:
7c:4f:56:76:fb:e1:4a:19:67:75:54:da:54:61:75:73:8a:bc:
37:9d:44:9b:19:f2:30:56:89:fb:73:f1:d7:64:5d:93:4f:43:
48:55:46:c5:37:9a:7b:32:4c:14:68:25:b5:75:03:b7:bd:28:
50:7f:df:0a:5e:ac:ed:e0:d2:10:de:18:bc:25:c3:ea:ad:6f:
f8:e0:91:3c:c4:02:10:7b:a4:78:dc:91:3c:43:34:c4:86:49:
5f:46:23:88:e3:9f:08:5a:5a:61:87:e5:dc:ec:f2:41:a3:0e:
0b:67:d1:76:f7:4f:16:3d:70:b9:6f:47:29:c2:ab:95:9b:83:
e1:7d:a2:78:75:b3:f6:07:f1:97:7f:64:d7:2c:59:19:cb:26:
2d:de:ce:69:1e:9e:8c:10:1f:54:9f:23:d1:37:44:8e:af:78:
fb:8c:bd:cc:4c:7f:c1:24:3e:f2:ea:42:14:15:dc:26:d0:a4:
cb:7c:23:66:96:c5:0b:a6:ce:fe:f7:54:0e:a7:8e:77:db:8e:
e0:45:1f:e9:08:4a:c3:51:0a:e8:db:3a:de:05:e6:2d:2e:a7:
07:ca:95:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk9lcwxXSeLn/ae0Oiu/DgUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MWJiMjFiNWMxODg5MDMwZDM2NWE1NDlmMjFkNWI0MjZm
OWRkYTgwHhcNMjUwOTEyMTEwMDUxWhcNMjUwOTEzMTEwMDUxWjAzMTEwLwYDVQQD
EygzZmRjNWNhNmJkZTcwMGY1YzExMTJhODZkNjZkMWY1MzMyNDA1MWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiTjaAAm8rPRGglOrixxiKEqfV7a
TnRqrimM2iiZQetMv3T/Gu4Om/kkO+iqMMjrRko8SRAsSXa/DhX3K5C7liiZN1tP
ZoiIlgltIRVHRudQ3eTeIdI7hzut1odzRT64p6ioxusjdhHsriIhg4ynkByM1YOD
GLh1/NglwGVs75P1MQ7dK5FM4a7fAod2KkMIdATj/hElPI76IFUK94KAY8L/w0xS
HrXxia8cswMt+9SGtoPca52AhAYXVGWd03Y0SwBvXN8ahhduwvbSliA1XJJYoq9P
jz8H9ybMJJ0weAQDYKNZ4YrNRboDJr4yxVevqzPCZHEpYOWeW+YKOy392QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/cXKa95wD1wREqhtZtH1MyQFHGMB8GA1UdIwQY
MBaAFLgbshtcGIkDDTZaVJ8h1bQm+d2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUt
YWM5YWNkMzUyODQyLzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUtYWM5YWNkMzUyODQy
LzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0E1ezYWQ
Ws+ts0VCK5j55HvWptclUqZTU32y6+4t+1NpA2U2fE9WdvvhShlndVTaVGF1c4q8
N51EmxnyMFaJ+3Px12Rdk09DSFVGxTeaezJMFGgltXUDt70oUH/fCl6s7eDSEN4Y
vCXD6q1v+OCRPMQCEHukeNyRPEM0xIZJX0YjiOOfCFpaYYfl3OzyQaMOC2fRdvdP
Fj1wuW9HKcKrlZuD4X2ieHWz9gfxl39k1yxZGcsmLd7OaR6ejBAfVJ8j0TdEjq94
+4y9zEx/wSQ+8upCFBXcJtCky3wjZpbFC6bO/vdUDqeOd9uO4EUf6QhKw1EK6Ns6
3gXmLS6nB8qVDw==
-----END CERTIFICATE-----
Generated at Fri Sep 12 15:33:41 2025 by rpki-client