Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: 3wSDJU+RzKIVh3wTMhf2NynWwgHzIOWsrOQRX62KuLk=
Subject key identifier: E2:ED:78:08:03:CC:64:56:45:83:1D:26:52:6E:B3:2F:F6:4B:1B:62
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 01978357E38752255737A1FC6A75C86F4190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0C17
Signing time: Wed 18 Jun 2025 14:01:04 +0000
Manifest this update: Wed 18 Jun 2025 14:01:04 +0000
Manifest next update: Thu 19 Jun 2025 14:01:04 +0000
Files and hashes: 1: TZsdWn_ShXFxIkxKlQy8DibZR2E.roa (hash: co6aRk3sBWvyMyvUq+M5GzZIlIBl72OUVtfVngSrNNU=)
2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: dUbTsIiAPaOB6YNureJZp2fJwdSkNonbCQ15o7b1AIA=)
3: uXEAv92OojWVDo1OywkWFuXxGAs.roa (hash: F32EsoDAnixW1ABJDoWWZoPCzcGl9S7Z/h18Xy1K3H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:57:e3:87:52:25:57:37:a1:fc:6a:75:c8:6f:41:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Jun 18 14:01:04 2025 GMT
Not After : Jun 19 14:01:04 2025 GMT
Subject: CN=e2ed780803cc645645831d26526eb32ff64b1b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7a:56:57:d4:64:fe:f5:ca:7d:4a:3e:64:47:
be:57:fb:8d:20:a2:4e:4d:14:59:9a:0e:49:8e:13:
11:f4:b1:f1:0a:27:3c:cb:cf:57:31:82:c7:55:19:
d7:df:84:e8:65:eb:38:c1:e6:00:c3:ca:d4:99:dd:
85:51:a6:c3:1c:4c:b1:ac:c3:54:6b:13:2b:e6:23:
78:ce:f6:8e:35:a9:d0:99:6d:e3:e2:55:0c:bf:2a:
c2:95:e0:0b:75:d1:60:84:8a:b5:60:91:35:64:04:
43:46:c4:27:84:53:77:bb:4a:c6:f5:25:3d:4e:9c:
c2:b3:c9:83:37:70:0c:f9:d7:ac:09:60:d4:c5:f1:
91:a4:ad:0a:96:e0:7d:a2:87:e5:aa:c8:7b:fa:b1:
6c:12:b5:a4:71:d9:b2:c1:5a:e5:f4:19:3c:c5:8a:
8e:aa:8f:ee:45:e9:5f:7b:00:b1:ee:07:45:3b:82:
e3:9a:67:c7:0d:4a:4d:24:a4:69:2d:a6:2f:dd:d1:
f8:05:44:78:01:90:5f:53:5e:6c:b9:15:4a:bb:41:
64:c7:cd:7a:c3:5f:03:bc:21:2c:f3:2e:1d:fc:e5:
13:b3:7c:60:9d:1b:8c:80:fb:4b:a3:9b:20:c6:43:
4a:bc:38:21:7d:bd:69:6e:b4:4f:30:74:69:92:e9:
fe:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:ED:78:08:03:CC:64:56:45:83:1D:26:52:6E:B3:2F:F6:4B:1B:62
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:65:2e:e7:41:dc:2d:cc:f6:83:cc:16:47:8f:49:64:cb:0c:
0e:c0:c6:75:34:e8:81:b9:48:24:45:cb:3a:f5:d6:6d:23:c0:
86:ea:9c:6f:7c:9c:51:c8:28:07:70:70:d5:df:d2:08:08:1b:
a4:8f:eb:06:4c:3c:ab:84:93:54:ed:6d:0a:8b:e7:26:aa:a9:
22:e3:1e:2b:5a:f9:1c:00:66:b2:9f:01:49:3f:c5:86:68:b3:
03:6a:69:c2:23:77:3f:80:5b:47:67:55:23:68:a4:88:c9:3a:
a7:2f:ec:6c:d9:b5:1f:d0:00:53:47:87:06:1e:e3:fb:83:12:
d6:a8:1f:36:02:80:29:76:76:5e:58:f9:1f:ba:51:41:04:b6:
40:ef:33:13:fe:a5:87:f3:4f:48:19:89:c1:6b:7f:7d:4d:bd:
ad:bb:22:e4:a4:40:ac:2d:ee:ee:22:23:10:01:1d:5b:f0:b4:
6f:ad:89:f6:66:a2:e1:5e:ba:33:30:88:81:b5:04:76:65:12:
b1:a6:44:29:72:31:84:12:64:42:2d:98:75:34:e9:b6:de:16:
d3:91:db:54:97:4b:bd:bb:d7:e6:29:f5:0e:66:e4:e1:1f:7a:
31:0b:26:2c:8e:8e:4f:be:7a:cd:dc:b3:c0:9c:f7:eb:3b:ab:
01:8e:27:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:22:09 2025 by rpki-client