Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier: SVH4VqsOvMYXYocHnNNljFV6pl0kajBlrMmgQwGY5MI=
Subject key identifier: AD:30:AF:41:65:6C:D7:F1:4C:26:D6:DD:B6:62:2E:70:D6:36:92:6A
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 01950F0FC3D93EB20331705F821661224131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number: 087A
Signing time: Sun 16 Feb 2025 14:00:46 +0000
Manifest this update: Sun 16 Feb 2025 14:00:46 +0000
Manifest next update: Mon 17 Feb 2025 14:00:46 +0000
Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=)
2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: o19VDKr6ItzkJuhQMkiGvIWpwmXXLQlqxPJu5nVXT1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0f:0f:c3:d9:3e:b2:03:31:70:5f:82:16:61:22:41:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Feb 16 14:00:46 2025 GMT
Not After : Feb 17 14:00:46 2025 GMT
Subject: CN=ad30af41656cd7f14c26d6ddb6622e70d636926a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:76:d2:91:d4:07:86:12:89:8a:8f:d0:28:15:
56:4b:5d:58:ee:b4:bd:1f:f0:0b:57:64:af:1e:6c:
27:7c:06:77:b1:2c:fc:6c:35:69:77:cb:bc:d3:46:
2b:53:a0:f1:5f:50:fa:a4:90:ac:60:bc:51:d0:f6:
0e:40:4d:9e:3e:d2:c0:4a:50:1a:14:3a:58:f6:38:
d0:db:e5:6b:1b:07:b1:85:cd:45:a1:6d:da:6a:cc:
ed:33:c3:28:d6:76:03:6e:e3:c0:cc:e1:4e:d3:f7:
5c:2b:1b:c6:2f:04:03:3b:5e:ec:2b:d5:b8:ff:f1:
cf:48:70:ed:54:cf:0c:b3:53:55:3e:2e:d9:0b:70:
20:ae:2e:c6:b2:f0:39:ac:e3:31:d0:29:9f:31:ed:
f8:18:1a:c0:fa:86:1f:25:5e:96:b1:8c:11:6d:47:
8b:3d:75:5b:51:3c:fc:68:7d:3e:38:49:70:55:f2:
dc:fe:df:41:46:72:4c:35:dd:78:6f:c1:24:f0:28:
0b:9c:e3:84:1c:0f:2e:7e:87:a3:b7:aa:70:b4:9f:
83:d2:d2:f8:12:cb:df:b7:dc:ea:15:ed:0a:7f:a8:
cd:3e:24:24:a3:67:26:58:88:42:0c:56:67:5b:16:
db:eb:72:58:af:72:18:39:65:54:18:28:57:bf:66:
33:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:30:AF:41:65:6C:D7:F1:4C:26:D6:DD:B6:62:2E:70:D6:36:92:6A
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5e:38:0c:a5:f3:82:ed:66:a2:ec:a2:d3:9e:9e:37:1a:e2:
41:5b:38:0f:ff:88:e8:03:8a:c8:fe:64:ba:d1:d4:32:1e:76:
7e:cc:18:f9:93:77:27:9e:44:6f:6e:88:f7:55:ff:e7:86:64:
5b:3d:58:a7:00:aa:88:42:08:61:7d:c4:52:57:9a:52:96:ff:
34:93:15:3c:da:0b:e7:5e:e1:24:0d:a6:f1:c2:05:aa:c7:85:
77:aa:ff:e7:00:2b:19:85:2c:c1:0e:cd:64:af:b3:7e:d2:7a:
3e:c0:d1:cd:af:06:4b:71:60:2c:dc:c8:f7:09:31:3b:2c:0d:
c1:6b:07:c2:10:7d:4b:0a:58:50:01:cb:39:93:6a:6a:f9:ed:
98:fc:ab:7e:bd:d3:a6:f0:50:db:10:05:2a:63:55:ad:5f:30:
4b:04:3c:6b:52:53:fa:30:40:ba:82:73:0a:fc:04:58:34:02:
ed:d6:b6:7d:dd:3c:6a:70:5c:73:53:5a:b7:17:fc:57:e7:3c:
11:f9:aa:76:53:bf:e2:4f:39:97:7a:a2:d8:2d:af:d4:1b:70:
7b:23:26:74:ec:87:37:e0:32:36:55:5c:f1:71:52:e8:a1:b0:
e6:90:95:44:0e:00:8a:d6:4b:d6:c0:eb:61:95:d1:20:a5:6c:
f2:b8:ba:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:47 2025 by rpki-client