Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: cU+s61AKE5IGqrgFXEzglmQTekmF0Q9GLS5z9i/mYOk=
Subject key identifier: 82:72:B1:CC:F9:D0:4D:CB:9C:F4:2D:53:AD:39:54:53:80:DD:50:45
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 0199FEB47CFCA5BF6D08C51EC16E476E32C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0D60
Signing time: Sun 19 Oct 2025 23:01:05 +0000
Manifest this update: Sun 19 Oct 2025 23:01:05 +0000
Manifest next update: Mon 20 Oct 2025 23:01:05 +0000
Files and hashes: 1: TZsdWn_ShXFxIkxKlQy8DibZR2E.roa (hash: co6aRk3sBWvyMyvUq+M5GzZIlIBl72OUVtfVngSrNNU=)
2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: 5QvHgwHRBgtCaBKwCycMFmkcGiyvg1GQx05qZbtZ3F8=)
3: uXEAv92OojWVDo1OywkWFuXxGAs.roa (hash: F32EsoDAnixW1ABJDoWWZoPCzcGl9S7Z/h18Xy1K3H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:7c:fc:a5:bf:6d:08:c5:1e:c1:6e:47:6e:32:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Oct 19 23:01:05 2025 GMT
Not After : Oct 20 23:01:05 2025 GMT
Subject: CN=8272b1ccf9d04dcb9cf42d53ad39545380dd5045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:e6:ac:0f:7f:65:1f:ec:e8:95:c3:3d:89:
ff:bc:28:3d:9e:60:09:92:06:ee:73:46:df:49:e4:
5f:d7:b2:18:25:c7:d9:b6:f3:0e:00:7c:43:43:71:
1a:f8:f4:d3:e2:80:da:85:5b:c7:d4:1c:ca:be:a2:
1b:78:9c:3f:29:dd:3e:27:f8:06:20:12:5d:40:75:
00:03:53:3d:67:f8:89:99:99:3a:08:ce:fd:29:6c:
ef:38:8e:a4:33:b9:f2:e1:e9:0d:4b:e7:c3:09:c1:
4d:68:96:c7:4b:b7:1f:7a:86:1b:8b:fc:d2:14:55:
69:9e:50:1e:7e:82:ab:b0:ee:93:a0:b3:6c:f1:af:
a8:11:0c:93:a6:3a:51:0b:89:6d:19:4b:99:9b:39:
82:76:d3:5e:d5:92:92:a4:69:e5:fb:2a:62:b0:b6:
8e:e3:05:b9:8d:02:5b:05:64:d4:37:50:ed:e7:14:
cc:40:fc:f9:b0:37:fa:86:2c:f6:da:fa:c1:f1:53:
54:ff:87:29:d6:6d:34:18:ca:43:fe:30:f1:f1:3d:
4e:e7:1d:3e:67:c8:0a:a3:45:6a:0c:85:7c:3e:30:
09:12:62:5b:d5:64:46:da:99:63:b2:cd:53:9b:33:
1d:22:2d:2f:24:1f:ec:7b:16:0b:1e:17:ca:62:9e:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:72:B1:CC:F9:D0:4D:CB:9C:F4:2D:53:AD:39:54:53:80:DD:50:45
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:5e:3d:fa:d9:85:c0:f0:32:d5:dd:5f:57:28:32:1f:76:5f:
0c:8b:80:9d:ef:bc:f8:f4:95:af:c1:3f:7d:4d:69:9a:ed:92:
b0:97:51:d7:45:c1:a4:c7:41:53:98:0f:8e:f2:e6:1d:f0:9a:
ce:63:73:6a:22:3b:97:fb:0c:0f:d6:e6:41:c5:c2:11:ac:e5:
cc:5b:7a:89:3f:79:1a:91:0f:7a:80:af:f4:da:b6:95:86:f0:
7e:96:0a:91:03:57:b8:6b:85:8f:6d:02:c1:c0:23:2b:e9:4d:
d4:c8:a9:e8:40:67:b5:9a:f5:b0:ca:0a:7c:99:c5:0b:55:de:
81:94:19:35:d2:7a:22:73:0c:62:81:81:58:24:2c:c3:83:a0:
32:7d:aa:e6:87:bc:a5:7b:3a:4f:b8:b2:36:7f:0f:29:58:88:
01:f3:18:15:0a:59:a0:b3:0a:1d:48:ae:2f:10:45:ab:17:b0:
45:51:98:5a:1a:b4:4b:96:6b:18:8a:82:81:04:ef:b0:68:b4:
a7:ee:5e:e0:8c:ce:7d:7b:69:bf:b4:dd:0c:cb:10:41:c3:c7:
8c:ea:d1:6c:77:5e:d2:27:3c:87:05:a0:fa:18:5d:87:9f:f1:
e1:0d:85:a6:f4:6c:3a:9f:27:1f:49:3b:77:e3:e4:23:e7:8f:
b8:f9:53:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:35:22 2025 by rpki-client