Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: U0XfOofDTBDHus9Ije3UJwNCLP4fJhXuoSG+10Al6Uc=
Subject key identifier: BD:6A:F1:1E:FF:FC:71:9C:35:4B:5C:88:0F:67:99:AE:2B:40:86:79
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 0198D54E0BA9104AF9D3434FE7EA27606D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0CC6
Signing time: Sat 23 Aug 2025 05:01:58 +0000
Manifest this update: Sat 23 Aug 2025 05:01:58 +0000
Manifest next update: Sun 24 Aug 2025 05:01:58 +0000
Files and hashes: 1: TZsdWn_ShXFxIkxKlQy8DibZR2E.roa (hash: co6aRk3sBWvyMyvUq+M5GzZIlIBl72OUVtfVngSrNNU=)
2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: VcE8QsvqdTbENYHi0Z7G3nD3OL343tecgOjfoAOYInM=)
3: uXEAv92OojWVDo1OywkWFuXxGAs.roa (hash: F32EsoDAnixW1ABJDoWWZoPCzcGl9S7Z/h18Xy1K3H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:0b:a9:10:4a:f9:d3:43:4f:e7:ea:27:60:6d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Aug 23 05:01:58 2025 GMT
Not After : Aug 24 05:01:58 2025 GMT
Subject: CN=bd6af11efffc719c354b5c880f6799ae2b408679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:29:9c:4d:63:62:95:21:01:ee:91:7b:5c:e5:
c6:b5:f2:f4:0e:fc:5e:1e:c2:09:0b:f0:c5:dc:e6:
16:61:1f:4a:7d:3d:f1:52:1a:65:dc:40:80:47:3a:
dc:09:62:6e:37:f7:88:19:60:00:a5:d7:80:45:ac:
cf:9a:32:9a:20:c1:8e:46:e7:ce:2f:ec:af:c2:90:
61:be:f9:70:0a:a1:08:70:0a:c9:df:28:3c:5d:b5:
4b:60:c6:42:70:8e:de:d9:19:6d:3b:82:fd:e2:b6:
2c:0f:b7:39:7b:a8:0a:dc:49:9f:96:f8:45:09:7b:
0f:71:fa:03:ef:76:c9:f0:ba:aa:c3:bc:35:15:3a:
49:10:12:99:b1:ac:a1:81:7c:af:44:63:11:b0:a5:
35:e7:cb:b0:25:40:35:c7:bb:bf:91:c6:5d:c1:24:
9e:a2:eb:84:c9:03:1b:ad:87:55:87:d8:ff:28:73:
3d:b6:73:93:b4:cd:93:83:18:ab:5b:92:e4:df:e9:
b1:90:8d:c5:96:b1:85:5b:7b:21:9d:71:0c:ff:40:
11:d1:54:de:3f:ae:46:2d:11:c9:64:3d:9f:ec:83:
53:e6:fb:f1:00:01:c2:5f:90:5f:29:e0:a0:25:cc:
f2:74:d6:f7:fd:e7:d4:c7:11:7a:15:59:87:e0:bd:
03:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6A:F1:1E:FF:FC:71:9C:35:4B:5C:88:0F:67:99:AE:2B:40:86:79
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:19:eb:8b:ac:60:7a:5f:48:ef:bd:1c:57:ed:5c:fb:fd:48:
75:d1:af:d2:46:91:93:46:f8:98:86:e5:c9:87:5b:92:e4:95:
b5:5a:f4:9a:3c:51:d9:f4:e1:a7:67:c9:d7:6a:fb:6f:4d:b5:
f8:74:fa:d0:32:44:2a:28:d5:12:fa:62:f6:48:35:58:ed:9b:
57:d1:a5:34:2a:e9:da:10:c6:7f:44:13:d9:8d:2a:5b:d9:02:
50:e6:bb:10:59:5a:6a:38:e0:08:30:80:87:b3:f8:49:78:4b:
85:c2:b6:a9:9f:e7:ec:9c:a7:d0:b0:e1:07:1c:b4:96:78:3c:
b8:0e:02:4f:7d:02:90:45:17:46:9c:0e:1e:44:71:b2:a3:9d:
62:f5:29:c6:f6:29:e4:30:08:21:91:c4:d4:98:3c:9b:0b:57:
a5:35:d7:d1:8e:cb:5c:d0:7f:45:d7:da:0f:b2:d0:c4:0a:f4:
bf:e1:98:b2:ab:7b:28:1f:27:1e:a8:32:e8:ef:13:7a:91:e9:
42:95:69:69:9e:e3:57:c9:8e:18:20:47:15:97:92:23:e5:65:
fd:4e:03:e2:96:35:59:28:e9:17:fd:1e:19:58:71:78:c3:4e:
97:b3:2c:2c:44:8c:fc:5d:6c:d0:37:a3:ca:c0:e6:1c:78:cb:
2f:3d:36:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:17 2025 by rpki-client