Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: EoVyisI4uxtKYwhkdoYhEHk9TEiAG+KnRR1+V8v3Krc=
Subject key identifier: FA:AE:7C:4B:EC:B2:D0:C8:95:FF:F3:B5:DC:8A:2C:28:39:7B:76:B5
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 0197BF36126ED6852B0A7164479A96113053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0C36
Signing time: Mon 30 Jun 2025 05:01:21 +0000
Manifest this update: Mon 30 Jun 2025 05:01:21 +0000
Manifest next update: Tue 01 Jul 2025 05:01:21 +0000
Files and hashes: 1: TZsdWn_ShXFxIkxKlQy8DibZR2E.roa (hash: co6aRk3sBWvyMyvUq+M5GzZIlIBl72OUVtfVngSrNNU=)
2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: vrbSDJ9O2bQHWUF93o3qq37kJID654eiF8I2Ru76rR0=)
3: uXEAv92OojWVDo1OywkWFuXxGAs.roa (hash: F32EsoDAnixW1ABJDoWWZoPCzcGl9S7Z/h18Xy1K3H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:36:12:6e:d6:85:2b:0a:71:64:47:9a:96:11:30:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Jun 30 05:01:21 2025 GMT
Not After : Jul 1 05:01:21 2025 GMT
Subject: CN=faae7c4becb2d0c895fff3b5dc8a2c28397b76b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:00:94:b0:83:80:fb:dd:c0:c1:1d:e2:a1:
df:a0:95:5b:bb:ae:3b:5b:ce:86:0b:4c:bb:87:8f:
69:b0:28:a4:0b:17:4e:ea:0d:f2:9c:9b:62:68:d6:
43:a8:80:9d:85:ee:d8:ba:ec:be:ba:69:de:fc:d4:
2d:f4:1f:25:bd:37:a9:26:a0:75:97:f8:a2:a0:26:
09:72:db:2f:06:74:73:8d:a4:bd:c7:29:1d:1d:ed:
c1:ec:96:0f:cd:b7:0a:bb:18:50:bb:28:a9:35:86:
d7:04:bf:84:dc:66:e0:ee:51:b8:d6:80:2e:2f:2e:
aa:02:0d:33:de:9a:fc:ca:d9:85:f0:cf:c2:81:c6:
c0:73:6d:2a:42:6d:f8:c4:84:f9:7d:49:fa:95:0e:
23:db:99:20:1f:da:44:b5:3e:19:c7:de:67:a7:9b:
a5:0c:93:7a:5c:08:ff:10:cf:24:59:fe:6d:f9:ab:
41:d7:dd:d5:04:cc:37:f1:7a:8d:04:e8:34:9c:44:
5d:53:88:6f:55:a5:7a:63:1b:99:f2:93:09:b8:cb:
2c:cd:b3:76:4d:41:97:cd:c0:25:24:4e:51:98:b7:
41:d1:ce:f0:74:e8:3f:15:9a:6e:8d:12:a1:fd:5d:
37:13:a2:10:36:e1:43:79:75:0b:2f:96:85:ed:35:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:AE:7C:4B:EC:B2:D0:C8:95:FF:F3:B5:DC:8A:2C:28:39:7B:76:B5
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c7:32:8a:73:ee:21:dd:6b:64:34:40:7c:a2:88:18:1b:9c:
9b:ea:df:58:c5:44:ed:48:b6:9f:f7:e3:5d:28:9b:3d:99:14:
e3:cb:07:8a:a6:14:df:60:90:9a:51:7d:af:dd:85:01:a8:e7:
f2:c6:97:3c:a6:24:23:ce:04:b6:f9:fb:99:fd:58:94:d8:8b:
ae:cd:97:72:a8:f0:30:67:56:eb:b3:9c:1a:95:be:56:8f:fa:
7a:c2:47:52:58:4b:75:e5:9c:dd:c4:50:9c:9b:6d:a7:bc:6f:
2c:9a:34:2d:c0:96:2c:62:5b:b4:ad:af:1d:43:d8:e5:e3:e6:
3b:83:ce:93:33:39:7d:a1:ea:54:3d:7c:ff:d3:cd:0c:2c:7d:
c6:c3:df:fd:cc:a3:e2:90:52:7c:05:ee:85:49:5d:64:52:4a:
68:16:e3:2e:c3:be:e4:c0:18:d4:d0:e6:cd:bc:1f:dc:7d:1a:
70:10:8c:55:28:a3:15:27:4a:2f:e9:30:9e:59:fc:2e:11:7b:
1d:73:59:89:79:1b:30:1d:86:0a:bc:9c:4a:64:ea:f9:c3:dc:
6a:cf:30:76:05:a7:3c:b5:2c:2c:c0:cf:7f:36:b1:b8:91:54:
9e:9a:66:d1:ad:9f:f2:72:b6:59:c3:36:2c:2a:89:c7:7a:5b:
4d:b9:18:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:04:19 2025 by rpki-client