Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier: adBMVUzd1atOcqn/sbXWlxuHp/0qB2WukquAUlwf92I=
Subject key identifier: 4F:54:91:17:72:35:60:27:F0:7B:B7:73:83:0A:30:D4:8B:C7:B6:57
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 0197B6D7979E26D9B6376F184D0424571BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number: 09DA
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=)
2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: Fg6XyS+bXyX0eaBFr7kemls5zxa0afgdZwzTZfySDto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:97:9e:26:d9:b6:37:6f:18:4d:04:24:57:1b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=4f54911772356027f07bb773830a30d48bc7b657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c0:c5:77:8e:91:7b:1a:15:a2:af:68:85:dd:
48:5b:11:73:fb:c8:f5:8d:2a:9a:38:c8:d9:74:b6:
3c:56:a7:b0:e7:af:1e:ed:f0:3f:4f:49:44:99:5b:
86:48:b1:bf:b4:3b:a7:d7:64:cb:a1:6c:34:d7:de:
d2:65:e5:21:7a:45:7c:ba:86:b1:59:4f:ef:e6:b2:
f2:66:04:1f:3d:01:2b:c7:f7:1d:e2:7f:64:1c:fa:
84:a8:61:39:9c:fa:a4:fa:9d:97:d3:b8:78:1c:f7:
58:e3:b8:13:17:e6:11:84:03:20:14:a1:93:d3:41:
84:3b:8d:04:7e:7d:2c:9e:eb:d8:1c:73:cb:9f:8e:
b8:3e:de:95:1e:c5:ce:df:b7:34:97:a4:0a:39:1f:
d7:1a:97:9a:20:16:1f:f7:11:c2:2a:25:85:ae:42:
91:26:a9:73:16:73:ba:b5:12:21:af:26:7f:0e:06:
8f:53:24:ac:3e:5e:9e:81:cc:c0:00:3f:cb:72:de:
79:32:9e:1f:31:75:1b:97:41:3d:a0:e0:f4:2d:fc:
af:4d:5e:09:75:fb:6f:71:8d:fe:5e:40:1d:02:08:
48:c8:83:aa:f6:1c:13:ea:2b:32:8c:c6:36:39:c0:
79:f3:75:7b:61:32:0e:07:73:ce:d9:ea:f1:2b:39:
2d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:54:91:17:72:35:60:27:F0:7B:B7:73:83:0A:30:D4:8B:C7:B6:57
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3a:dd:37:19:25:dc:7b:b5:16:fa:ec:ae:30:c6:72:f8:30:
eb:2d:96:fb:3f:f8:e6:d9:5f:bf:fb:ad:a8:17:82:6f:9d:88:
88:ab:67:52:88:8f:36:8f:d1:14:d7:10:f4:4f:7e:6b:da:98:
8c:84:d3:67:f5:72:26:5f:f9:9d:b0:da:28:9c:fa:88:f1:32:
4c:fb:3b:e2:f0:6f:9b:90:c6:f7:c8:cc:5c:19:fd:26:6c:ef:
14:b0:81:8b:8c:ff:47:d2:4b:63:6e:7e:ae:d0:30:3a:b9:a9:
bf:21:e7:c9:8c:50:31:50:78:46:b3:7e:79:e0:b3:9b:31:e7:
30:3b:36:f1:5a:a0:5e:6c:0a:40:a1:27:83:49:a6:1a:ea:94:
bf:ab:9a:b5:61:53:20:7f:71:ba:68:25:ba:eb:da:90:11:dd:
0d:71:c5:d3:e8:8d:db:e1:53:74:79:90:3b:a8:8e:09:d2:fd:
ca:83:29:19:91:14:0b:bc:e8:22:02:03:84:59:56:f5:59:41:
bd:5d:ad:07:41:38:3d:7c:5b:01:e2:37:69:0b:2d:87:2f:5a:
f2:4e:14:42:ca:fd:26:62:0a:69:47:ab:1e:b8:1f:1a:f8:68:
2f:16:62:bd:db:6e:66:c5:6a:ac:04:05:9e:43:f9:00:22:57:
3e:e1:84:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:25:42 2025 by rpki-client