Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
File: vSpaBrm0P86hiFQdMMbcNDCq85I.mft (raw, json)
Hash identifier: AQxNz4AVeFy14CBXitXGCg6BTme/yhHs3/uYP0fgicM=
Subject key identifier: C2:6F:02:A3:CA:F0:60:A8:9A:90:6A:5A:83:C3:19:58:91:9F:79:F7
Authority key identifier: BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
Certificate issuer: /CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Certificate serial: 01984852B9163B6FBC940F3356BFB4631456
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
Manifest number: 10D5
Signing time: Sat 26 Jul 2025 20:00:37 +0000
Manifest this update: Sat 26 Jul 2025 20:00:37 +0000
Manifest next update: Sun 27 Jul 2025 20:00:37 +0000
Files and hashes: 1: dNOXWcyjBwUcXV5oIaNhLVVvSEU.roa (hash: 4Fft0psn/kwpjVEKZgVhKcfKwufV2SXuxRSuxxvAa+k=)
2: vSpaBrm0P86hiFQdMMbcNDCq85I.crl (hash: JkE4csqypJhil+YKpu/wj9S3DPNy8vTHToRKH+waFYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:b9:16:3b:6f:bc:94:0f:33:56:bf:b4:63:14:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Validity
Not Before: Jul 26 20:00:37 2025 GMT
Not After : Jul 27 20:00:37 2025 GMT
Subject: CN=c26f02a3caf060a89a906a5a83c31958919f79f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:6f:65:3e:33:e3:d1:b4:ac:fd:81:3a:3c:
9b:03:a4:57:94:72:96:37:46:0e:1a:ce:80:60:c4:
83:36:a5:2c:94:2b:53:00:7c:86:c8:64:93:5c:d8:
1b:6d:38:6b:07:df:5f:d3:b9:b1:d6:1d:07:ac:2f:
cb:55:65:8f:16:75:85:6e:bc:8a:06:1a:ca:84:da:
ed:9c:6c:49:7e:7f:04:64:86:04:f9:0e:ca:33:e3:
73:da:e3:5c:b5:37:6e:f5:1e:52:04:f6:b0:62:dd:
83:05:f0:3e:f6:3f:b2:05:02:49:ff:ef:bf:a7:1a:
8f:3d:a0:e2:2c:cc:59:ad:74:db:00:d2:9b:65:e3:
8e:bb:a6:ad:6b:6e:f1:24:63:92:49:15:de:35:0c:
bb:77:00:a9:08:fa:ea:2a:fc:69:c5:1e:56:48:9d:
b0:d9:09:a2:2f:f4:2a:62:56:52:52:00:26:d8:d2:
06:7f:f8:b5:94:6a:8a:9c:0f:4a:89:27:03:6e:bd:
62:dc:f9:b8:9d:3d:70:be:25:73:2f:73:9a:e1:05:
38:fa:16:d5:45:14:fb:eb:71:85:1a:e7:0a:64:7c:
31:13:ea:61:d3:3d:04:62:76:21:be:22:90:b5:2b:
0a:ca:7f:33:c9:d1:29:51:9c:5a:a4:c5:51:19:57:
e9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6F:02:A3:CA:F0:60:A8:9A:90:6A:5A:83:C3:19:58:91:9F:79:F7
X509v3 Authority Key Identifier:
keyid:BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:51:61:97:18:31:c3:5c:f0:35:0d:3f:72:a2:ff:93:c7:26:
4a:f9:a8:39:42:c6:f6:3c:df:fc:5a:f5:87:17:b7:19:bd:64:
e5:fb:ef:6d:fe:da:b8:10:f0:43:eb:75:67:d9:51:cf:80:09:
a8:08:b6:d1:aa:f7:c6:81:d4:aa:c5:1b:4f:70:32:23:90:fb:
5d:74:8b:05:08:7e:62:e0:6e:d2:af:86:7e:14:4e:24:8e:bb:
20:b0:d7:fd:ac:ca:b3:b8:f3:5c:f6:38:9d:cd:25:d1:f1:5b:
75:c0:cf:3a:fc:87:45:3d:98:7c:f6:dc:01:ee:fc:18:6c:e3:
2b:50:d4:34:bf:70:e8:c6:cd:3c:82:d7:9b:df:3e:59:73:a0:
a1:c8:d5:b3:cb:38:3e:12:78:fe:c3:83:0e:09:33:f3:3f:19:
4a:c1:6c:bd:5a:78:b9:8a:c9:58:a6:b5:65:a3:38:29:98:ba:
3c:90:72:5f:f3:2a:8f:32:6f:f2:f3:6d:53:06:13:7f:d3:b0:
79:3b:d2:87:bd:ec:03:81:b2:57:15:85:d3:68:7c:55:6e:02:
0f:43:5b:41:7b:e3:5a:59:f7:b8:d6:f6:8a:90:af:b6:91:79:
90:28:fe:94:b1:5b:56:23:60:78:29:4d:25:89:d4:d8:f5:cf:
7a:3e:9c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:26:32 2025 by rpki-client