Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: +b1bG/nx0QTON1HUkU2VY9eEHAZhcvgRWWXZRaNENqA=
Subject key identifier: 51:C2:31:2D:5A:F3:C6:7E:01:89:34:58:9F:8E:06:88:81:44:B8:D8
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 01963CF8A9A70F3DE2820DFBDDA91AC07145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0B6E
Signing time: Wed 16 Apr 2025 05:00:51 +0000
Manifest this update: Wed 16 Apr 2025 05:00:51 +0000
Manifest next update: Thu 17 Apr 2025 05:00:51 +0000
Files and hashes: 1: TZsdWn_ShXFxIkxKlQy8DibZR2E.roa (hash: co6aRk3sBWvyMyvUq+M5GzZIlIBl72OUVtfVngSrNNU=)
2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: E+Ir1yqqiqEDrQF+uFN6gBIl6FZRzrt9j1rR0wxDDf0=)
3: uXEAv92OojWVDo1OywkWFuXxGAs.roa (hash: F32EsoDAnixW1ABJDoWWZoPCzcGl9S7Z/h18Xy1K3H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3c:f8:a9:a7:0f:3d:e2:82:0d:fb:dd:a9:1a:c0:71:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Apr 16 05:00:51 2025 GMT
Not After : Apr 17 05:00:51 2025 GMT
Subject: CN=51c2312d5af3c67e018934589f8e06888144b8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:14:de:b9:9f:e6:ba:ca:00:d9:38:f5:9a:
52:49:f4:e1:3d:5b:1a:95:04:1d:21:34:87:8e:ff:
0f:bb:06:97:4f:88:ca:6f:10:de:35:7a:5a:d3:53:
1d:cf:13:0a:3f:4b:3b:d3:b5:a1:ec:07:d5:61:0e:
bd:f1:60:1d:35:2b:b4:f3:f2:0f:c9:46:25:2e:2e:
43:27:ba:5c:95:4b:ac:09:83:d6:60:77:fb:15:b1:
b1:f1:85:34:12:95:88:c1:ba:9d:1a:1f:c2:f3:84:
23:68:a2:90:60:64:46:ea:80:40:87:99:8b:36:22:
d6:7f:a8:94:3d:6b:95:5b:85:65:0a:05:8a:5f:70:
53:8d:2a:e8:65:f6:e5:bb:be:fe:6f:95:1a:85:d8:
9f:58:e2:ee:6c:ac:ac:03:cc:25:0b:13:1e:30:1b:
55:ba:6c:9f:b4:59:79:0b:00:59:2d:e9:72:56:ba:
13:0c:a5:f2:f4:8f:53:58:ab:08:dc:9f:81:88:2e:
2f:cc:b1:cf:f6:0e:e3:6f:7e:2d:2f:0e:95:db:12:
d0:b2:cf:e0:25:63:dc:6b:86:9f:a5:36:f2:73:8a:
1d:ca:b3:52:43:c5:df:d6:42:a4:c9:b3:7b:5d:ff:
af:cf:8a:44:80:2b:96:05:80:47:0c:c3:3f:2d:90:
1f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C2:31:2D:5A:F3:C6:7E:01:89:34:58:9F:8E:06:88:81:44:B8:D8
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f6:74:c5:52:99:c0:bf:61:79:bd:87:3b:0b:f0:d7:e7:e7:
17:60:f1:dd:0d:df:e9:3b:fe:5c:bc:07:dd:66:be:c1:20:ab:
4c:c0:51:c2:b8:52:98:4f:f2:e9:52:2f:10:9d:81:d2:13:de:
76:40:c0:c6:f5:3e:46:07:fc:bf:15:e7:e5:15:3e:9c:13:98:
6a:a5:b1:87:60:38:5e:81:2b:12:c8:5e:d1:04:fe:49:72:b9:
08:15:c6:de:37:46:b3:33:f2:3d:a5:cd:8c:03:ba:64:fe:1e:
9a:48:d1:36:30:04:96:16:76:fe:46:a1:6c:e9:eb:d8:0f:fe:
8f:96:d5:2e:41:cd:af:1e:d2:2a:de:dc:c8:b1:1f:69:94:d5:
2f:67:fc:bf:6e:14:db:c5:5e:48:a2:e3:49:4f:f6:fb:09:9f:
26:34:55:e9:58:a1:b4:29:02:33:50:99:df:34:5c:73:b7:39:
1c:29:be:bf:b9:9c:8e:1d:a8:63:d6:22:51:62:38:2b:ee:20:
23:b6:22:2f:a4:42:79:cb:d7:3e:68:ec:8e:52:b5:c6:53:33:
58:bb:07:26:28:bb:8d:21:e2:11:fd:a7:88:eb:85:30:65:eb:
1b:4e:1e:fe:db:64:e9:3b:0a:22:5f:d7:8a:c2:91:9a:ff:17:
f0:2e:44:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZY8+KmnDz3igg373akawHFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MWJiMjFiNWMxODg5MDMwZDM2NWE1NDlmMjFkNWI0MjZm
OWRkYTgwHhcNMjUwNDE2MDUwMDUxWhcNMjUwNDE3MDUwMDUxWjAzMTEwLwYDVQQD
Eyg1MWMyMzEyZDVhZjNjNjdlMDE4OTM0NTg5ZjhlMDY4ODgxNDRiOGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA398U3rmf5rrKANk49ZpSSfThPVsa
lQQdITSHjv8PuwaXT4jKbxDeNXpa01MdzxMKP0s707Wh7AfVYQ698WAdNSu08/IP
yUYlLi5DJ7pclUusCYPWYHf7FbGx8YU0EpWIwbqdGh/C84QjaKKQYGRG6oBAh5mL
NiLWf6iUPWuVW4VlCgWKX3BTjSroZfblu77+b5UahdifWOLubKysA8wlCxMeMBtV
umyftFl5CwBZLelyVroTDKXy9I9TWKsI3J+BiC4vzLHP9g7jb34tLw6V2xLQss/g
JWPca4afpTbyc4odyrNSQ8Xf1kKkybN7Xf+vz4pEgCuWBYBHDMM/LZAf8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHCMS1a88Z+AYk0WJ+OBoiBRLjYMB8GA1UdIwQY
MBaAFLgbshtcGIkDDTZaVJ8h1bQm+d2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUt
YWM5YWNkMzUyODQyLzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUtYWM5YWNkMzUyODQy
LzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfZ0xVKZ
wL9heb2HOwvw1+fnF2Dx3Q3f6Tv+XLwH3Wa+wSCrTMBRwrhSmE/y6VIvEJ2B0hPe
dkDAxvU+Rgf8vxXn5RU+nBOYaqWxh2A4XoErEshe0QT+SXK5CBXG3jdGszPyPaXN
jAO6ZP4emkjRNjAElhZ2/kahbOnr2A/+j5bVLkHNrx7SKt7cyLEfaZTVL2f8v24U
28VeSKLjSU/2+wmfJjRV6VihtCkCM1CZ3zRcc7c5HCm+v7mcjh2oY9YiUWI4K+4g
I7YiL6RCecvXPmjsjlK1xlMzWLsHJii7jSHiEf2niOuFMGXrG04e/ttk6TsKIl/X
isKRmv8X8C5EQQ==
-----END CERTIFICATE-----
Generated at Wed Apr 16 09:00:58 2025 by rpki-client