Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: PynO3RuHnI4Tvs4pIjTWOIRCFYN+wL+f6EpGuTK72C8=
Subject key identifier: 41:99:1F:CB:7F:D5:0F:8F:4F:34:E3:7A:52:65:11:AF:2A:B4:DD:FF
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 0196B89128DDDBA76089F4A43DB8B7331A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0BAE
Signing time: Sat 10 May 2025 05:00:42 +0000
Manifest this update: Sat 10 May 2025 05:00:42 +0000
Manifest next update: Sun 11 May 2025 05:00:42 +0000
Files and hashes: 1: TZsdWn_ShXFxIkxKlQy8DibZR2E.roa (hash: co6aRk3sBWvyMyvUq+M5GzZIlIBl72OUVtfVngSrNNU=)
2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: Wr/OVrDffbY5RSX8g8mbpojYF4dYhUosnFq93R+gorg=)
3: uXEAv92OojWVDo1OywkWFuXxGAs.roa (hash: F32EsoDAnixW1ABJDoWWZoPCzcGl9S7Z/h18Xy1K3H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:28:dd:db:a7:60:89:f4:a4:3d:b8:b7:33:1a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: May 10 05:00:42 2025 GMT
Not After : May 11 05:00:42 2025 GMT
Subject: CN=41991fcb7fd50f8f4f34e37a526511af2ab4ddff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:47:06:ab:00:96:17:84:89:a9:f5:0a:0f:
13:ab:01:ec:81:a9:29:08:85:77:1e:e0:59:5f:81:
eb:a1:1e:a4:74:4b:9e:b1:47:97:b5:84:3c:df:56:
0f:e2:a5:a4:da:6b:d5:5b:74:f4:20:14:14:bc:0d:
ed:47:7a:50:e4:37:1f:86:7e:b7:f8:87:1b:cd:70:
5c:a1:35:fb:81:ec:e2:07:9b:8d:28:6f:e1:53:35:
12:99:d6:41:ff:a2:32:2d:90:1c:2e:91:c8:85:39:
c7:80:93:49:3c:a3:1b:a0:42:fd:99:28:f1:73:0d:
65:c7:24:7e:27:60:a8:ad:46:32:a5:1b:16:90:81:
d2:d8:8e:e6:ce:96:65:13:a6:34:dc:c0:a7:be:e2:
8d:f6:f6:3f:21:a0:8c:8d:26:d3:62:1d:28:ba:e4:
c0:c3:00:50:7d:e4:1e:95:75:c4:ea:bf:4a:c3:5f:
17:90:fc:2a:46:fe:b6:c0:a3:49:be:90:2a:97:3c:
3c:8b:1e:52:4d:91:5d:2c:df:92:07:8f:16:04:5e:
dc:dd:73:cb:f9:3a:2d:8c:83:a6:5a:e5:0f:dd:f9:
64:80:78:d5:08:58:75:d0:9b:66:0f:3a:1b:2f:16:
9e:e8:fe:ab:1e:68:c2:d7:bb:c6:e4:87:7e:73:86:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:99:1F:CB:7F:D5:0F:8F:4F:34:E3:7A:52:65:11:AF:2A:B4:DD:FF
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:2a:1d:47:14:52:9b:22:69:a9:dc:a9:ef:8e:4c:10:3d:
d8:5a:1c:46:95:1f:03:08:6f:bf:ea:1c:a1:1b:a3:d0:7c:53:
78:78:0f:66:05:aa:d3:0e:11:6a:83:2c:cf:c2:3c:40:1f:6b:
8a:3e:38:7f:ff:79:db:a6:34:cf:d8:2c:72:1b:60:41:83:12:
9b:88:cc:f0:19:83:83:df:aa:81:6d:52:90:8a:80:19:11:37:
98:a4:bb:95:fc:07:02:b0:ef:f0:4d:1d:bf:33:c1:a4:dd:fc:
5f:4f:8f:43:b8:00:2a:c2:2e:2d:bb:ca:34:a2:cc:0f:4d:00:
0b:fb:c4:e2:66:f6:c9:66:8a:31:e7:60:8e:a2:da:92:a7:53:
66:ca:1e:6d:6c:0c:d9:06:33:43:af:18:24:b4:76:1a:05:b7:
2e:1e:79:0e:00:f2:31:29:5f:2c:d0:01:5a:41:47:51:93:ea:
77:78:10:c0:e3:9c:e0:fa:45:25:af:08:e0:a2:cf:05:a9:17:
ad:9d:78:51:55:94:b6:12:f7:e8:18:be:29:30:f8:07:b3:be:
fd:17:a5:7b:05:89:c7:d0:90:ef:f4:f8:1d:14:16:43:ef:84:
87:a8:89:7a:9d:b6:6e:20:61:44:d7:96:75:7e:fc:ff:af:57:
e9:ab:e3:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kSjd26dgifSkPbi3MxpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MWJiMjFiNWMxODg5MDMwZDM2NWE1NDlmMjFkNWI0MjZm
OWRkYTgwHhcNMjUwNTEwMDUwMDQyWhcNMjUwNTExMDUwMDQyWjAzMTEwLwYDVQQD
Eyg0MTk5MWZjYjdmZDUwZjhmNGYzNGUzN2E1MjY1MTFhZjJhYjRkZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFlHBqsAlheEian1Cg8TqwHsgakp
CIV3HuBZX4HroR6kdEuesUeXtYQ831YP4qWk2mvVW3T0IBQUvA3tR3pQ5Dcfhn63
+IcbzXBcoTX7geziB5uNKG/hUzUSmdZB/6IyLZAcLpHIhTnHgJNJPKMboEL9mSjx
cw1lxyR+J2CorUYypRsWkIHS2I7mzpZlE6Y03MCnvuKN9vY/IaCMjSbTYh0ouuTA
wwBQfeQelXXE6r9Kw18XkPwqRv62wKNJvpAqlzw8ix5STZFdLN+SB48WBF7c3XPL
+TotjIOmWuUP3flkgHjVCFh10JtmDzobLxae6P6rHmjC17vG5Id+c4ah/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGZH8t/1Q+PTzTjelJlEa8qtN3/MB8GA1UdIwQY
MBaAFLgbshtcGIkDDTZaVJ8h1bQm+d2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUt
YWM5YWNkMzUyODQyLzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUtYWM5YWNkMzUyODQy
LzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3IqHUcU
Upsiaancqe+OTBA92FocRpUfAwhvv+ocoRuj0HxTeHgPZgWq0w4RaoMsz8I8QB9r
ij44f/9526Y0z9gschtgQYMSm4jM8BmDg9+qgW1SkIqAGRE3mKS7lfwHArDv8E0d
vzPBpN38X0+PQ7gAKsIuLbvKNKLMD00AC/vE4mb2yWaKMedgjqLakqdTZsoebWwM
2QYzQ68YJLR2GgW3Lh55DgDyMSlfLNABWkFHUZPqd3gQwOOc4PpFJa8I4KLPBakX
rZ14UVWUthL36Bi+KTD4B7O+/RelewWJx9CQ7/T4HRQWQ++Eh6iJep22biBhRNeW
dX78/69X6avj/A==
-----END CERTIFICATE-----
Generated at Sat May 10 08:08:36 2025 by rpki-client