Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier: VgxVpcfVX/M4saOPUGF+gg60UPRx05nzYhcSeYXra2o=
Subject key identifier: 04:DF:19:2E:35:E4:08:9C:54:DD:54:2B:C8:80:91:B0:2F:2C:4D:72
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 01967A20028AFADB12B0A345E0731445E804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number: 0936
Signing time: Mon 28 Apr 2025 02:00:40 +0000
Manifest this update: Mon 28 Apr 2025 02:00:40 +0000
Manifest next update: Tue 29 Apr 2025 02:00:40 +0000
Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=)
2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: VYNPqOZvl1w2jte0w5iYoNWp9s1U8j19IbLmpq3Vc0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:20:02:8a:fa:db:12:b0:a3:45:e0:73:14:45:e8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Apr 28 02:00:40 2025 GMT
Not After : Apr 29 02:00:40 2025 GMT
Subject: CN=04df192e35e4089c54dd542bc88091b02f2c4d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:b9:11:f4:24:ac:85:cb:26:4c:39:5e:ed:
0c:f6:9c:99:28:08:ef:cb:fc:2c:60:24:bd:b5:0a:
3e:e0:ba:69:0a:9e:94:c2:8e:1c:61:e6:ab:1b:c3:
76:45:c1:22:67:21:3b:2a:8d:37:0b:e1:62:83:f5:
cf:f8:6a:7f:ea:92:a2:fe:a7:0c:ae:4c:cd:fd:6d:
fb:99:c4:7b:24:ca:af:2a:71:4e:ad:b8:c8:b8:80:
a2:5d:3e:33:fc:37:34:e5:9d:2b:e6:5f:fe:ed:a2:
1b:83:d7:70:2b:04:04:24:dd:7d:20:c6:2d:14:3c:
e8:11:1b:f5:a0:20:18:88:05:98:a6:45:fe:9e:7d:
25:9d:60:66:44:b5:b6:0a:6f:cb:45:86:37:3b:d4:
fb:1c:02:49:31:50:25:8d:d2:8d:5b:47:3f:d3:60:
de:d4:9b:87:13:19:cf:96:01:f6:c0:fe:3c:82:e6:
56:b1:a8:4b:f1:a0:ce:21:ee:fa:e5:52:73:bc:61:
ec:bb:7b:78:bc:23:89:b1:f4:0d:79:d5:7c:e8:72:
5b:df:d2:c9:bf:1b:8d:fa:3e:7a:a4:d2:59:75:d1:
42:a3:06:0c:25:52:b1:60:40:84:cb:44:e7:5c:50:
b1:74:a9:db:9e:e3:f6:f2:97:9b:dc:c1:33:22:f5:
f6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DF:19:2E:35:E4:08:9C:54:DD:54:2B:C8:80:91:B0:2F:2C:4D:72
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:58:df:2c:8e:00:9e:1c:86:27:3e:f4:9b:47:88:48:ba:53:
02:5d:09:77:3e:05:1b:33:e1:da:4b:dc:17:b1:d0:aa:d8:70:
d6:e8:b8:86:61:eb:ee:6b:a8:1d:1a:86:a3:77:7a:54:86:70:
74:82:4e:c8:2f:62:bd:4f:bf:e4:cf:e5:86:13:37:33:99:17:
17:5a:8f:0c:89:76:39:30:a2:92:50:7e:36:1f:cf:37:ac:fd:
d0:a2:d8:57:b3:1d:0c:75:cb:b2:21:23:2b:b1:9b:7d:8e:92:
3f:52:d5:c7:26:a4:71:d4:1e:1e:8e:c8:6f:e6:be:6a:b4:0f:
0c:23:6c:57:d0:d6:31:3a:32:70:04:cb:78:ef:a4:d7:d7:9e:
6d:64:87:43:21:98:fe:5c:f2:c9:66:f6:64:e6:c7:5e:84:c2:
ed:ea:68:7b:64:e0:f6:72:b6:37:82:00:c5:f4:bd:6d:d9:40:
0a:b5:b9:fe:23:40:3d:01:e1:38:0a:40:7c:8f:8e:7a:a0:65:
63:76:3f:ea:58:1b:5b:00:ea:bb:34:7d:7e:3f:be:c5:ce:bb:
d5:3d:b0:93:33:8e:9c:f5:11:70:3f:05:9d:bc:0c:a4:17:2f:
4b:36:22:88:96:94:49:06:f7:d2:7b:c8:c3:57:67:73:c8:e4:
e3:b9:1e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:07:17 2025 by rpki-client