Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier: KkGRSC4kshfkNLcqtmuEPnoB19hZZVG88fb/T0K7Ymk=
Subject key identifier: C0:FE:74:B1:2E:3D:E4:2C:B2:82:80:08:DC:93:7B:28:B5:09:23:48
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 0196556ED5D5B000974784F6FB5DA253D03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number: 0923
Signing time: Sun 20 Apr 2025 23:00:49 +0000
Manifest this update: Sun 20 Apr 2025 23:00:49 +0000
Manifest next update: Mon 21 Apr 2025 23:00:49 +0000
Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=)
2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: eBxvqocoolDfb4a+e0WoPxTtraOVlsEUos3IbOaNOEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:d5:d5:b0:00:97:47:84:f6:fb:5d:a2:53:d0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Apr 20 23:00:49 2025 GMT
Not After : Apr 21 23:00:49 2025 GMT
Subject: CN=c0fe74b12e3de42cb2828008dc937b28b5092348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e6:19:2d:f6:87:e2:6c:00:e8:3b:cc:74:f9:
b7:a7:a0:96:a4:8b:ce:cc:4f:5f:39:1c:66:b9:06:
8b:9f:44:7a:22:b3:f4:af:9e:c5:ae:4c:dd:c5:71:
06:b1:f4:d0:e6:7a:90:89:6a:c8:c8:58:a6:aa:8e:
42:5e:aa:68:83:7d:39:f0:96:70:6d:70:b8:15:a0:
cb:dd:ff:8f:5a:c4:c1:4b:64:41:64:6d:43:ed:89:
76:93:45:ec:fe:ff:1d:54:97:ad:fe:14:3c:49:a8:
0b:20:ad:13:17:0b:82:d7:49:32:95:9c:67:d9:4c:
79:db:03:0f:1c:c3:2a:77:24:3e:96:de:fe:18:6f:
7f:f4:df:48:df:3a:22:9e:82:80:c1:9f:59:19:0a:
66:68:61:35:12:dd:81:0c:f3:f2:66:c5:08:45:ef:
92:34:af:7e:52:6d:23:20:82:10:78:7a:71:64:59:
15:4e:67:1c:48:41:03:06:60:89:f4:aa:12:69:50:
6b:98:7b:6c:70:a0:58:60:d1:c0:a2:10:4f:af:65:
8a:f5:ab:a2:b0:34:cc:54:d3:ee:7d:9c:d3:40:69:
94:b2:fc:8b:04:46:09:b0:2b:13:77:e5:03:0a:f7:
81:08:20:27:b8:43:a9:09:68:dc:54:14:a8:45:50:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FE:74:B1:2E:3D:E4:2C:B2:82:80:08:DC:93:7B:28:B5:09:23:48
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ca:ef:ca:73:c1:15:8b:4e:43:48:b8:58:43:bc:7e:59:47:
59:99:70:be:58:f6:72:3e:86:1c:a3:b8:93:a3:41:9e:10:34:
dc:c0:63:6a:de:89:22:d2:f6:77:ea:17:dc:b4:b4:76:08:84:
75:9a:26:9c:d0:31:a1:20:01:21:7a:13:1f:f9:5b:09:95:c3:
af:15:07:2d:62:e5:fc:16:de:61:89:9a:f6:f2:aa:d9:8a:74:
98:2d:15:f4:a4:e8:16:a9:c4:cb:f6:4e:a6:b8:c1:97:94:32:
57:1d:4d:89:a2:ac:91:b5:62:37:d5:79:61:9d:2f:59:88:d5:
cf:80:6f:c6:d6:50:f2:78:9c:e4:8c:f5:32:ed:d4:c6:c1:fb:
ed:69:08:9b:e2:c6:e5:cd:56:d3:9f:fe:5c:9c:a9:c1:08:23:
19:dc:e8:f4:0a:97:82:13:24:ae:e0:f6:e6:5b:eb:95:0b:e0:
47:3e:98:c4:4f:35:49:81:dd:bc:3c:f0:f4:a3:1a:4e:5c:66:
64:36:0d:3d:88:cd:6e:84:8f:ab:cf:2e:f9:cc:b3:d6:02:e1:
ee:27:3e:df:99:3e:d9:6a:fc:dd:eb:84:e3:77:46:a5:59:0d:
29:fa:64:c1:3f:25:5b:56:31:12:e0:03:54:57:98:d5:d0:94:
58:e4:5e:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVbtXVsACXR4T2+12iU9A+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMmE2YTIyMzJjNDM5ZjA0NjIwYzgyYjRkN2UxNGU5ZGY3
MjExNDMwHhcNMjUwNDIwMjMwMDQ5WhcNMjUwNDIxMjMwMDQ5WjAzMTEwLwYDVQQD
EyhjMGZlNzRiMTJlM2RlNDJjYjI4MjgwMDhkYzkzN2IyOGI1MDkyMzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOYZLfaH4mwA6DvMdPm3p6CWpIvO
zE9fORxmuQaLn0R6IrP0r57FrkzdxXEGsfTQ5nqQiWrIyFimqo5CXqpog3058JZw
bXC4FaDL3f+PWsTBS2RBZG1D7Yl2k0Xs/v8dVJet/hQ8SagLIK0TFwuC10kylZxn
2Ux52wMPHMMqdyQ+lt7+GG9/9N9I3zoinoKAwZ9ZGQpmaGE1Et2BDPPyZsUIRe+S
NK9+Um0jIIIQeHpxZFkVTmccSEEDBmCJ9KoSaVBrmHtscKBYYNHAohBPr2WK9aui
sDTMVNPufZzTQGmUsvyLBEYJsCsTd+UDCveBCCAnuEOpCWjcVBSoRVAx0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMD+dLEuPeQssoKACNyTeyi1CSNIMB8GA1UdIwQY
MBaAFL0qaiIyxDnwRiDIK01+FOnfchFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGIt
OTA5YjZhYjg1ZWU5LzEvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGItOTA5YjZhYjg1ZWU5
LzEvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsrvynPB
FYtOQ0i4WEO8fllHWZlwvlj2cj6GHKO4k6NBnhA03MBjat6JItL2d+oX3LS0dgiE
dZomnNAxoSABIXoTH/lbCZXDrxUHLWLl/BbeYYma9vKq2Yp0mC0V9KToFqnEy/ZO
prjBl5QyVx1NiaKskbViN9V5YZ0vWYjVz4BvxtZQ8nic5Iz1Mu3UxsH77WkIm+LG
5c1W05/+XJypwQgjGdzo9AqXghMkruD25lvrlQvgRz6YxE81SYHdvDzw9KMaTlxm
ZDYNPYjNboSPq88u+cyz1gLh7ic+35k+2Wr83euE43dGpVkNKfpkwT8lW1YxEuAD
VFeY1dCUWOReLA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:24 2025 by rpki-client