Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
File: vSpaBrm0P86hiFQdMMbcNDCq85I.mft (raw, json)
Hash identifier: vxaj17jxuBEfpaQ/utG5TRV4ewWlRqiRKAq8+dX6/fs=
Subject key identifier: A7:14:F7:29:3B:61:7A:79:69:7A:83:62:82:FB:15:2D:17:B4:61:7D
Authority key identifier: BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
Certificate issuer: /CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Certificate serial: 0197B77C41E9325282B7D0D085305E2166E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
Manifest number: 108A
Signing time: Sat 28 Jun 2025 17:01:03 +0000
Manifest this update: Sat 28 Jun 2025 17:01:03 +0000
Manifest next update: Sun 29 Jun 2025 17:01:03 +0000
Files and hashes: 1: dNOXWcyjBwUcXV5oIaNhLVVvSEU.roa (hash: 4Fft0psn/kwpjVEKZgVhKcfKwufV2SXuxRSuxxvAa+k=)
2: vSpaBrm0P86hiFQdMMbcNDCq85I.crl (hash: JCJ7eSg5G0hFJ64sfP5AEpR6RDlexR4pnlY1qZkziNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:41:e9:32:52:82:b7:d0:d0:85:30:5e:21:66:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Validity
Not Before: Jun 28 17:01:03 2025 GMT
Not After : Jun 29 17:01:03 2025 GMT
Subject: CN=a714f7293b617a79697a836282fb152d17b4617d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bf:32:ea:62:03:4d:ef:e8:37:46:e0:c0:49:
b4:3b:30:ce:4d:37:ed:13:7b:ca:2e:16:b5:cb:f1:
46:97:2b:5e:7e:23:e3:01:26:4e:79:05:f3:68:cd:
63:44:82:08:51:89:f8:80:1f:da:bc:43:cf:4d:a5:
f8:83:c8:d8:5c:59:12:2b:25:f2:94:89:28:94:97:
fb:83:9f:d4:44:86:28:09:76:04:72:94:0a:57:80:
b1:6a:3e:df:f4:bc:59:ed:61:f8:71:a4:79:dd:42:
91:a4:ae:9f:6e:49:43:ae:7f:fd:da:c7:df:ea:51:
53:63:84:14:8d:9b:31:e5:69:4d:88:40:11:e5:28:
f4:9c:ab:94:67:61:17:52:75:9d:aa:1d:1a:3c:78:
4c:47:07:8e:4e:50:b4:a4:72:c1:c7:12:83:b1:1a:
3b:a2:61:0a:d3:53:b8:a1:f3:df:d1:7f:ff:c9:55:
af:f6:cf:cb:ca:f8:35:58:42:0d:26:96:f1:02:dd:
f2:10:c0:77:8e:33:65:29:d1:0b:03:2d:f3:ae:e6:
1b:05:0a:67:ee:c3:45:13:4a:95:19:a6:ff:76:20:
e7:c4:c8:6e:30:48:8c:6f:d1:85:36:cb:44:ec:fb:
da:21:cf:53:82:03:1a:49:6b:51:4d:7f:00:d4:9c:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:14:F7:29:3B:61:7A:79:69:7A:83:62:82:FB:15:2D:17:B4:61:7D
X509v3 Authority Key Identifier:
keyid:BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:49:68:d7:d1:15:15:87:db:21:19:b9:03:88:03:6b:5c:84:
b1:0d:45:45:de:cd:ae:7c:cb:68:61:f9:ac:61:72:65:a2:0d:
87:02:10:ea:23:23:8f:c0:53:d3:26:f9:c9:ed:42:8b:fe:dc:
8a:11:26:38:d8:f3:6e:ca:51:f5:05:f7:18:1d:41:b8:c8:a7:
dc:76:16:6c:ba:30:3c:55:30:06:6b:33:93:e8:7c:17:67:5b:
80:b0:f2:3e:9b:06:82:95:ec:2e:ea:78:cb:82:01:91:2a:dd:
55:ad:76:2d:5f:3a:52:7a:d0:91:47:75:10:09:a1:13:b5:40:
7d:a0:e3:30:da:1a:28:a3:a9:c0:8d:39:27:43:7f:b9:d5:df:
73:6a:15:4c:fc:15:ac:99:36:8d:a4:4d:b0:4f:24:30:6f:a5:
0c:1e:a3:1d:c4:6f:29:70:13:6c:f8:a8:2f:cc:7e:6b:fc:fb:
9b:74:d2:0d:57:a9:bd:84:55:b1:5b:c1:58:77:da:f0:a9:51:
34:d2:fb:ff:79:0a:88:25:87:79:d7:5e:06:8a:e5:8e:ae:7f:
e2:83:ec:c2:e7:06:e4:6c:50:8a:24:af:0e:ec:0c:4e:54:f9:
03:a1:94:41:97:cb:28:4e:2b:bf:7c:ce:c0:2a:25:68:8b:c7:
99:cb:49:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:02 2025 by rpki-client