Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier: u29UIrttvl2xvVRvPFHg4CD3CvCi6VYiAtHjSJ66Lm0=
Subject key identifier: 20:44:5B:98:F2:39:5A:23:99:48:5A:35:84:2E:2B:19:A3:1E:D4:4F
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 0197790A8EE81AE7D9DCB3095772F6CA0975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number: 09BA
Signing time: Mon 16 Jun 2025 14:00:24 +0000
Manifest this update: Mon 16 Jun 2025 14:00:24 +0000
Manifest next update: Tue 17 Jun 2025 14:00:24 +0000
Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=)
2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: gvo2bqEKbFBB7Z8VxtRUmwZqIrcAZ+rAg0KxrooCxaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0a:8e:e8:1a:e7:d9:dc:b3:09:57:72:f6:ca:09:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Jun 16 14:00:24 2025 GMT
Not After : Jun 17 14:00:24 2025 GMT
Subject: CN=20445b98f2395a2399485a35842e2b19a31ed44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:59:55:ad:7b:ae:a1:39:e3:7e:fe:35:de:
36:5c:be:49:2e:a2:15:7e:2d:fd:f2:65:9a:d6:92:
38:7c:72:ed:06:14:16:b2:bb:70:3f:53:1a:96:c1:
a3:ef:5f:83:49:70:73:b4:8a:a2:e3:f8:96:18:19:
0e:58:00:e0:a2:bf:89:60:39:45:5d:c8:22:7f:20:
37:81:9e:35:f5:e6:31:05:2c:c8:5c:a3:df:1f:79:
4e:da:49:2c:a1:25:3e:36:80:87:ef:1a:74:c9:b1:
be:34:64:18:86:b3:dc:e7:fc:08:de:f6:f0:cb:38:
80:19:ab:dd:d5:28:59:6f:02:2e:a2:f1:64:cb:f4:
de:91:b7:91:4d:41:68:f3:ef:ce:7c:68:34:f1:23:
78:01:cd:67:1e:db:5b:b2:68:7c:ea:f5:92:01:0b:
29:b1:88:9b:ec:af:a3:aa:a3:d1:9e:8b:0a:c8:9f:
6f:e2:5d:c2:b2:03:84:8a:bd:7e:5a:e4:55:52:51:
e7:6d:02:13:b5:6d:41:f1:ea:79:c8:ee:d1:7b:17:
7a:84:e4:9c:1d:1d:0c:16:45:77:b0:ca:b6:20:25:
0e:22:26:49:5d:9e:13:5d:df:6b:c0:b6:d2:ff:b5:
b1:34:0d:82:63:5e:de:35:24:87:6a:1e:19:c8:d6:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:44:5B:98:F2:39:5A:23:99:48:5A:35:84:2E:2B:19:A3:1E:D4:4F
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:dc:dc:40:e1:b8:03:0b:47:93:c1:9d:99:47:9f:15:36:64:
e2:cd:d3:0b:db:43:d1:25:0d:db:16:ea:0c:66:28:c6:c0:90:
26:50:c3:30:5a:3b:8e:3d:5e:2e:6b:2b:56:ce:d3:3d:b7:c3:
36:2c:34:88:43:ce:a4:66:50:5f:86:ca:ad:30:e7:07:a1:96:
7e:fc:fa:94:87:e2:cd:6f:02:5d:e4:b7:6d:a3:dc:9b:71:88:
a0:b6:49:f9:d1:7a:90:4a:3b:10:1d:f3:cf:09:b2:3e:f3:49:
e2:8a:60:4f:9e:76:fb:fd:0a:e0:08:4b:ae:e6:6f:39:f3:57:
1d:4b:18:b3:77:cc:4a:cd:c2:8e:bc:4a:43:a3:78:5a:00:c8:
70:d0:8c:62:9d:be:95:1d:4a:2a:64:14:0d:1a:cf:09:05:db:
45:cf:01:30:bb:e3:52:45:db:06:cc:5c:68:e6:c7:ed:07:99:
fb:9e:e7:c0:93:e5:2b:3f:b1:35:78:ff:12:2d:53:96:27:0d:
63:88:b9:3b:b4:c4:c4:da:51:bc:a8:7c:d4:e4:9a:31:5b:11:
89:7e:b7:d0:3a:6e:13:30:ed:9e:9e:aa:cf:44:2e:03:24:65:
7a:ea:a6:aa:3d:5d:f2:6e:e9:4a:5b:87:2e:27:90:14:38:10:
12:9c:bd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:44:42 2025 by rpki-client