Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
File: uBuyG1wYiQMNNlpUnyHVtCb53ag.mft (raw, json)
Hash identifier: IorjaJaIL8Pc/OmFdBAGm3ft0rmCC09j80BOdwq5gfw=
Subject key identifier: 5E:6C:2B:13:47:18:09:49:1B:3B:18:C1:0D:FF:18:9F:41:09:82:88
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 019676E83D9A431CD1B50148617267203AD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
Manifest number: 0B8C
Signing time: Sun 27 Apr 2025 11:00:53 +0000
Manifest this update: Sun 27 Apr 2025 11:00:53 +0000
Manifest next update: Mon 28 Apr 2025 11:00:53 +0000
Files and hashes: 1: TZsdWn_ShXFxIkxKlQy8DibZR2E.roa (hash: co6aRk3sBWvyMyvUq+M5GzZIlIBl72OUVtfVngSrNNU=)
2: uBuyG1wYiQMNNlpUnyHVtCb53ag.crl (hash: VQknxGPWjdMtGoeWlrk//zIFsjk+45DRijoVM93zJ5E=)
3: uXEAv92OojWVDo1OywkWFuXxGAs.roa (hash: F32EsoDAnixW1ABJDoWWZoPCzcGl9S7Z/h18Xy1K3H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:e8:3d:9a:43:1c:d1:b5:01:48:61:72:67:20:3a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Apr 27 11:00:53 2025 GMT
Not After : Apr 28 11:00:53 2025 GMT
Subject: CN=5e6c2b13471809491b3b18c10dff189f41098288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:15:01:06:27:5d:2a:87:6b:4d:33:50:58:
94:05:3c:78:e9:97:4a:1c:28:6c:28:7d:70:d8:e4:
b0:33:d7:f5:4d:f5:e8:d7:2f:e0:ff:6c:b0:8a:97:
0b:68:bc:5d:43:a5:b0:67:dd:6b:14:74:81:36:5e:
f9:61:b1:1b:69:1a:c8:4d:ed:1a:54:35:ee:0d:5b:
0e:ac:49:32:15:6e:00:58:af:73:f9:ba:21:d2:4f:
a8:20:1b:24:42:e2:bb:0b:eb:f4:30:5e:5a:9a:b7:
1f:d0:32:88:ca:7e:62:b3:e0:a2:f5:c0:15:d2:01:
90:d9:69:a9:31:77:ed:2a:9f:45:34:59:08:e2:9e:
32:87:d3:b1:71:0e:7f:b1:38:b5:c1:f7:41:91:3b:
88:90:43:8d:b8:60:f1:60:a4:06:2c:28:0e:46:f9:
c8:6c:bd:8d:74:9a:a0:6d:b9:00:3c:9c:59:f0:18:
e7:4d:2d:7a:12:28:2c:b5:a5:4d:42:cc:c8:af:74:
0c:bf:b9:48:88:ce:d2:3d:e5:88:11:17:13:51:af:
7d:1c:47:e7:28:a3:b6:86:79:8d:8f:f7:fc:b0:99:
b7:0c:3e:26:65:cb:c7:22:09:d4:97:7e:3a:d8:b2:
e1:22:ff:3c:0a:59:f0:60:35:f7:40:1f:b5:c9:23:
a5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:2B:13:47:18:09:49:1B:3B:18:C1:0D:FF:18:9F:41:09:82:88
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:04:f6:2c:d7:4a:7e:59:28:a3:fe:28:0c:91:86:06:a2:9d:
60:d1:ba:c1:13:51:ea:79:09:77:56:ab:bf:70:f7:4d:03:a9:
49:5b:bf:f4:d7:e3:62:67:1c:1a:22:3e:e0:92:e9:c2:90:f0:
76:95:8e:2b:f6:91:6b:9c:1c:8b:e2:22:b2:f4:90:1f:e1:96:
35:51:31:92:70:93:0a:b1:b2:6e:4c:23:79:1e:30:76:c2:bb:
a7:eb:66:cc:0b:f1:ac:b5:ac:66:09:59:6d:ef:6e:b6:a2:32:
9b:28:fb:03:d0:49:b6:0a:2a:28:ea:63:0b:4e:7f:19:c9:15:
2f:80:bc:51:73:2b:b5:10:ec:a0:7a:19:e3:37:25:b7:6a:07:
72:62:69:19:e5:c0:38:0f:3c:43:9f:06:4c:92:3b:45:fc:b3:
3c:c3:30:82:4e:60:75:04:66:7c:56:90:c2:3f:00:e3:8a:62:
68:20:90:4d:81:fc:71:13:a3:53:41:cf:02:34:bc:c3:d5:6c:
fa:86:c0:23:52:eb:c1:7f:fb:85:21:f2:d6:5c:57:d0:8f:a2:
e9:f1:50:09:0f:51:80:d9:14:70:17:8a:55:7c:4c:d7:f8:ce:
20:7d:d1:b2:f1:3c:21:92:43:cc:3d:c5:83:6a:79:57:3c:15:
32:35:12:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:46:20 2025 by rpki-client