Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: bl1A8q/KdpUlKYW8WUpNCKwyL1zfJ1DyFnXdrFuzUAg=
Subject key identifier: E2:96:6B:1C:63:2D:C5:E4:94:1B:98:C5:09:5D:29:FB:57:9B:40:C3
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 01987C77AA4831B1128BB93A49F9249D4506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0C98
Signing time: Tue 05 Aug 2025 23:01:13 +0000
Manifest this update: Tue 05 Aug 2025 23:01:13 +0000
Manifest next update: Wed 06 Aug 2025 23:01:13 +0000
Files and hashes: 1: TZsdWn_ShXFxIkxKlQy8DibZR2E.roa (hash: co6aRk3sBWvyMyvUq+M5GzZIlIBl72OUVtfVngSrNNU=)
2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: AXyMGPJaMttEiH7yqGPSLcG0q1Gf86hxdZs6rhFKkLA=)
3: uXEAv92OojWVDo1OywkWFuXxGAs.roa (hash: F32EsoDAnixW1ABJDoWWZoPCzcGl9S7Z/h18Xy1K3H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:aa:48:31:b1:12:8b:b9:3a:49:f9:24:9d:45:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Aug 5 23:01:13 2025 GMT
Not After : Aug 6 23:01:13 2025 GMT
Subject: CN=e2966b1c632dc5e4941b98c5095d29fb579b40c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:d2:9b:ea:36:10:7b:73:f5:52:05:81:92:
57:85:dd:ea:5c:04:30:b8:6a:1e:56:89:0e:ee:a4:
8a:eb:15:55:b1:f3:cd:16:b6:cc:48:ae:9f:60:de:
2d:db:f3:19:be:06:5c:70:bd:a4:31:c1:e4:f6:0b:
44:fa:86:40:c6:79:b0:84:97:3a:4c:28:76:df:aa:
11:4a:5d:ee:a8:ad:7a:27:b3:f4:f9:ff:5d:b7:0d:
00:27:33:96:5b:fa:c1:f9:2f:cd:42:f5:71:6f:31:
7f:ca:3c:66:2c:57:7f:23:35:99:da:58:36:20:e7:
f6:03:7c:b5:64:da:e5:d8:15:96:dc:fb:1a:66:b3:
69:f0:e0:03:41:17:39:39:27:28:3a:42:62:16:82:
63:73:b1:c5:d0:6a:91:df:5a:15:71:26:57:44:98:
5f:ee:e5:af:b2:ab:7c:0e:b1:38:7f:db:f3:02:62:
94:cc:61:6a:c2:e9:61:b1:ec:82:a4:0b:8a:c6:3d:
96:c0:bc:c2:07:5e:50:69:87:ee:13:53:03:17:07:
2b:b8:7a:a6:5f:bd:3b:17:92:7e:90:33:35:c3:cb:
4e:8b:78:ee:e8:a5:fb:33:30:bd:b8:30:d5:05:bd:
ad:5e:11:34:31:f0:3d:67:5c:71:08:4b:05:d4:fb:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:96:6B:1C:63:2D:C5:E4:94:1B:98:C5:09:5D:29:FB:57:9B:40:C3
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:37:90:74:9b:98:2b:e1:d1:88:fe:cf:a8:ae:ac:e8:61:30:
16:19:2d:ea:df:48:3c:ae:07:c9:85:92:44:0e:1e:38:37:a7:
75:d6:85:50:e8:3e:d5:04:68:9d:86:ab:16:89:72:39:75:f7:
31:fd:fb:79:78:ef:dc:8a:ac:6d:5a:ce:5b:f0:1e:bb:cd:11:
de:1b:cc:51:5e:5e:ba:40:04:07:41:15:49:c9:95:fd:4b:96:
9f:a8:33:5d:59:a9:d2:41:07:5d:12:67:f3:ee:20:d7:45:c2:
6d:8d:f7:07:73:f2:91:97:b4:b9:24:8d:a8:88:96:29:41:9e:
74:34:de:b0:25:2e:c4:91:85:fe:ac:e9:99:af:86:ac:d4:97:
76:c8:42:3e:bb:e6:66:be:19:e8:b3:9a:62:dc:f2:bc:aa:4d:
06:d7:1c:33:93:e2:f4:3f:58:a6:43:61:49:85:9c:6b:10:ad:
7f:df:9c:d8:22:1f:80:2d:91:a0:d6:3a:22:91:ff:a5:50:d4:
4b:87:f8:80:ac:d7:a9:f1:3a:04:d4:eb:d0:a8:b0:39:49:00:
28:a6:0a:ba:0a:fa:95:ed:22:ba:33:64:df:cd:9a:14:ac:7c:
f3:94:bd:ed:e3:00:66:a0:59:15:69:eb:4c:ac:df:53:db:e0:
44:b5:e1:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8d6pIMbESi7k6SfkknUUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MWJiMjFiNWMxODg5MDMwZDM2NWE1NDlmMjFkNWI0MjZm
OWRkYTgwHhcNMjUwODA1MjMwMTEzWhcNMjUwODA2MjMwMTEzWjAzMTEwLwYDVQQD
EyhlMjk2NmIxYzYzMmRjNWU0OTQxYjk4YzUwOTVkMjlmYjU3OWI0MGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1HSm+o2EHtz9VIFgZJXhd3qXAQw
uGoeVokO7qSK6xVVsfPNFrbMSK6fYN4t2/MZvgZccL2kMcHk9gtE+oZAxnmwhJc6
TCh236oRSl3uqK16J7P0+f9dtw0AJzOWW/rB+S/NQvVxbzF/yjxmLFd/IzWZ2lg2
IOf2A3y1ZNrl2BWW3PsaZrNp8OADQRc5OScoOkJiFoJjc7HF0GqR31oVcSZXRJhf
7uWvsqt8DrE4f9vzAmKUzGFqwulhseyCpAuKxj2WwLzCB15QaYfuE1MDFwcruHqm
X707F5J+kDM1w8tOi3ju6KX7MzC9uDDVBb2tXhE0MfA9Z1xxCEsF1PuXpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOKWaxxjLcXklBuYxQldKftXm0DDMB8GA1UdIwQY
MBaAFLgbshtcGIkDDTZaVJ8h1bQm+d2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUt
YWM5YWNkMzUyODQyLzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8wYTk2YzktMThlYS00NzUzLWEyYzUtYWM5YWNkMzUyODQy
LzEvdUJ1eUcxd1lpUU1OTmxwVW55SFZ0Q2I1M2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTeQdJuY
K+HRiP7PqK6s6GEwFhkt6t9IPK4HyYWSRA4eODenddaFUOg+1QRonYarFolyOXX3
Mf37eXjv3IqsbVrOW/Aeu80R3hvMUV5eukAEB0EVScmV/UuWn6gzXVmp0kEHXRJn
8+4g10XCbY33B3PykZe0uSSNqIiWKUGedDTesCUuxJGF/qzpma+GrNSXdshCPrvm
Zr4Z6LOaYtzyvKpNBtccM5Pi9D9YpkNhSYWcaxCtf9+c2CIfgC2RoNY6IpH/pVDU
S4f4gKzXqfE6BNTr0KiwOUkAKKYKugr6le0iujNk382aFKx885S97eMAZqBZFWnr
TKzfU9vgRLXhgg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:55:18 2025 by rpki-client