Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier: n0QDvlsykH8rqv+HdY9mRDzczx+lXgXYVtZyIlwbVdU=
Subject key identifier: F2:EE:92:06:69:03:F4:64:0D:66:77:98:81:C1:E4:62:FD:FD:E1:56
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 01969CE2FD2730CD0055A495EE455F102555
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number: 0948
Signing time: Sun 04 May 2025 20:00:43 +0000
Manifest this update: Sun 04 May 2025 20:00:43 +0000
Manifest next update: Mon 05 May 2025 20:00:43 +0000
Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=)
2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: FhujZ6o3OsD0bQbFwObnDsXlKf5EAnP5aJzil/mPA54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:fd:27:30:cd:00:55:a4:95:ee:45:5f:10:25:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: May 4 20:00:43 2025 GMT
Not After : May 5 20:00:43 2025 GMT
Subject: CN=f2ee92066903f4640d66779881c1e462fdfde156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3f:a9:e8:1f:73:23:c6:5f:04:47:eb:3c:20:
b5:6f:9b:90:6b:0b:f1:df:1e:42:86:36:9b:d4:43:
e3:2f:8c:0c:57:c9:1c:60:1f:40:a9:b8:d1:46:ad:
00:6d:e2:d8:c8:d2:82:41:e7:cb:59:3b:bf:c1:d2:
7a:93:7f:f9:f7:16:22:d3:53:6a:68:ed:51:a5:85:
31:bc:2f:15:36:b1:b9:75:fe:5e:8a:13:89:be:fc:
de:89:92:94:39:a1:57:55:51:03:73:56:e1:f5:19:
58:50:95:38:da:7c:4a:84:6a:6c:06:5c:d7:05:46:
3a:dc:3f:d2:96:ed:a9:26:c2:26:ff:59:4d:df:0a:
5a:9a:9e:9c:9b:29:1f:51:33:75:36:7d:14:b7:6a:
f1:a7:37:c1:82:af:ad:80:6b:d3:f4:e4:1a:4c:58:
dc:3a:cf:6d:99:53:48:4f:74:e5:0d:6f:fe:90:d4:
ef:02:cc:6b:aa:0b:df:24:98:76:f1:00:cf:bf:b6:
57:84:2f:af:44:1d:3b:38:1b:93:a4:a0:23:4a:fd:
06:1f:00:cb:86:bc:6c:fd:d8:33:44:6b:f9:e3:b6:
12:00:56:da:e0:ca:a9:7d:76:c1:47:44:d9:9f:c6:
f3:f6:fe:c1:85:a6:14:5d:2f:5d:94:a8:c8:ab:b3:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EE:92:06:69:03:F4:64:0D:66:77:98:81:C1:E4:62:FD:FD:E1:56
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:00:10:d6:4d:3d:6e:e5:ac:8e:54:65:6f:01:2e:f0:4e:3d:
81:70:7b:a3:11:a1:68:7c:8e:21:b0:5c:67:0e:7e:e7:ab:01:
58:e7:10:d2:ec:95:30:fd:9b:6e:05:31:39:d0:fc:07:33:fa:
6b:55:54:49:f5:dc:19:4a:af:0d:a4:c0:5a:47:78:1f:8c:f1:
90:59:90:51:21:96:93:64:f0:d4:1e:c3:1a:43:ad:ce:6b:a2:
3c:13:89:29:42:8d:b2:67:ce:bf:71:05:4d:cb:b0:a8:4b:69:
b1:71:8e:c5:be:8c:e8:fe:34:1c:03:da:68:74:02:13:9a:f1:
ce:2e:0a:fd:e0:81:de:26:4b:35:4c:4b:bf:22:a0:ab:93:47:
90:8c:d7:6c:e0:a0:58:9b:f2:c3:54:10:32:37:3c:6d:d5:d8:
96:a6:60:11:9e:99:55:4c:ab:7f:b0:4c:6d:a7:fc:03:ad:96:
05:81:d8:38:f9:a2:b4:1b:7c:9d:6c:ad:7f:46:62:87:8a:97:
a6:84:78:c3:59:7b:c0:17:6d:f7:38:22:46:c3:0d:2a:e3:dc:
1f:2b:38:71:cf:9a:4f:e3:f9:9d:06:01:3c:bb:8f:55:11:36:
54:68:69:d3:c6:17:65:9b:fd:82:bb:a9:19:3b:12:06:23:c5:
02:15:e5:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZac4v0nMM0AVaSV7kVfECVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMmE2YTIyMzJjNDM5ZjA0NjIwYzgyYjRkN2UxNGU5ZGY3
MjExNDMwHhcNMjUwNTA0MjAwMDQzWhcNMjUwNTA1MjAwMDQzWjAzMTEwLwYDVQQD
EyhmMmVlOTIwNjY5MDNmNDY0MGQ2Njc3OTg4MWMxZTQ2MmZkZmRlMTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD+p6B9zI8ZfBEfrPCC1b5uQawvx
3x5Chjab1EPjL4wMV8kcYB9AqbjRRq0AbeLYyNKCQefLWTu/wdJ6k3/59xYi01Nq
aO1RpYUxvC8VNrG5df5eihOJvvzeiZKUOaFXVVEDc1bh9RlYUJU42nxKhGpsBlzX
BUY63D/Slu2pJsIm/1lN3wpamp6cmykfUTN1Nn0Ut2rxpzfBgq+tgGvT9OQaTFjc
Os9tmVNIT3TlDW/+kNTvAsxrqgvfJJh28QDPv7ZXhC+vRB07OBuTpKAjSv0GHwDL
hrxs/dgzRGv547YSAFba4MqpfXbBR0TZn8bz9v7BhaYUXS9dlKjIq7OMIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLukgZpA/RkDWZ3mIHB5GL9/eFWMB8GA1UdIwQY
MBaAFL0qaiIyxDnwRiDIK01+FOnfchFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGIt
OTA5YjZhYjg1ZWU5LzEvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGItOTA5YjZhYjg1ZWU5
LzEvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgAQ1k09
buWsjlRlbwEu8E49gXB7oxGhaHyOIbBcZw5+56sBWOcQ0uyVMP2bbgUxOdD8BzP6
a1VUSfXcGUqvDaTAWkd4H4zxkFmQUSGWk2Tw1B7DGkOtzmuiPBOJKUKNsmfOv3EF
TcuwqEtpsXGOxb6M6P40HAPaaHQCE5rxzi4K/eCB3iZLNUxLvyKgq5NHkIzXbOCg
WJvyw1QQMjc8bdXYlqZgEZ6ZVUyrf7BMbaf8A62WBYHYOPmitBt8nWytf0Zih4qX
poR4w1l7wBdt9zgiRsMNKuPcHys4cc+aT+P5nQYBPLuPVRE2VGhp08YXZZv9grup
GTsSBiPFAhXl0g==
-----END CERTIFICATE-----
Generated at Mon May 5 05:03:45 2025 by rpki-client