Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier: T38z87YsPkDRkxJ3KKm8vbSFRrKTWdK9NDmMZjIdSMo=
Subject key identifier: 82:29:0A:B4:A4:10:CF:25:1D:DA:AE:E6:60:6E:A7:A0:AD:02:7B:8C
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 019A71B8458FD948764804BB0306C26374DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number: 0B44
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=)
2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: cCbr00usd8AvMpLK08cJ/izILZWMToE/lI3MRUAkgRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:45:8f:d9:48:76:48:04:bb:03:06:c2:63:74:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=82290ab4a410cf251ddaaee6606ea7a0ad027b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:f6:c9:f9:45:45:92:c1:5b:70:54:3e:5d:
fa:01:ef:ab:11:1d:e8:80:f9:64:d4:ae:b9:7e:ef:
b8:2f:1e:da:b2:2d:dc:ca:9a:2c:69:86:25:2b:6c:
ec:f2:77:2f:b6:d4:5c:55:e0:99:b2:40:e4:c0:40:
fb:19:7a:03:67:c8:3c:62:29:9f:7d:34:6b:da:7f:
03:24:1a:71:7e:22:e5:a1:24:fd:80:4c:a8:5e:ca:
13:97:94:2c:d5:b6:76:de:ad:9f:d8:79:1e:65:dc:
a7:05:2a:04:b3:04:a5:a1:62:23:ca:a6:02:52:e8:
53:70:78:5c:9c:e4:13:63:bf:b1:f0:73:73:ab:4f:
5c:41:93:0d:96:36:27:9c:96:31:55:fc:3c:ce:ed:
d9:53:8e:33:ae:b9:14:e4:19:9a:47:ec:34:6f:62:
b7:0e:ed:e9:46:f5:86:8d:4d:41:20:6a:c7:17:e4:
c9:93:af:40:c3:19:37:3e:a7:e9:85:1f:c9:4a:53:
b2:93:37:32:87:e4:21:fa:91:f6:02:f1:71:33:bc:
db:87:f7:57:90:fb:b3:6a:6a:a1:6e:c5:06:3c:0e:
5d:2b:aa:1a:99:53:90:8b:49:0f:00:fe:f4:cc:87:
10:d4:e4:a8:d7:12:39:af:c0:50:c3:73:52:88:2c:
a1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:29:0A:B4:A4:10:CF:25:1D:DA:AE:E6:60:6E:A7:A0:AD:02:7B:8C
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f9:3c:01:d3:8d:a4:4b:c2:e9:c6:a9:51:15:50:36:5a:b4:
fd:6f:92:4a:c5:21:43:5f:06:01:4e:0e:e7:4f:75:3a:8c:a5:
df:59:2f:89:42:50:f1:c3:25:dd:aa:11:a3:4f:06:b8:62:5c:
26:b2:f0:fd:d6:f6:2e:b3:93:f6:eb:b4:5c:d3:a2:af:34:fe:
70:7f:83:8a:4e:fc:6d:49:a8:7b:68:00:41:5d:b1:14:7e:70:
57:a8:37:81:dc:09:28:89:96:26:a3:27:68:55:15:9a:71:bb:
a3:90:d4:da:7a:1d:51:a5:10:1e:ec:86:fb:97:b7:c7:33:b1:
e3:8f:7b:71:d3:d7:d5:8c:85:4d:49:0b:d0:41:26:b7:d5:b3:
e5:7d:18:b9:0c:42:2a:51:0c:ad:1c:e9:f5:e5:69:20:5c:ae:
af:98:17:8f:ce:d7:08:0c:57:40:27:4d:b6:1f:22:8b:7e:71:
5d:30:6d:dc:58:79:96:d3:ff:7a:39:ee:c7:d6:d9:71:83:1c:
de:bd:e7:f7:96:1b:2f:ef:89:13:c1:45:5c:55:8a:02:78:2c:
54:31:16:e6:a8:cb:21:59:b5:d2:ce:03:74:d5:1b:7f:93:c9:
c3:2f:c8:de:ca:14:70:2c:0d:5b:68:9e:46:9a:4d:eb:bf:a5:
fe:3b:bd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:17 2025 by rpki-client