Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
File: vSpaBrm0P86hiFQdMMbcNDCq85I.mft (raw, json)
Hash identifier: FQxn0LNzeNAyOmiL3068KkNb5rOSOQ9y9Sdz+siz1t8=
Subject key identifier: BF:C9:1D:D7:00:7E:56:F3:95:11:99:DA:EE:1D:87:D4:14:83:42:3D
Authority key identifier: BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
Certificate issuer: /CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Certificate serial: 0199FAD8047F5C2765B55E85CF5EC377D16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
Manifest number: 11B6
Signing time: Sun 19 Oct 2025 05:01:24 +0000
Manifest this update: Sun 19 Oct 2025 05:01:24 +0000
Manifest next update: Mon 20 Oct 2025 05:01:24 +0000
Files and hashes: 1: dNOXWcyjBwUcXV5oIaNhLVVvSEU.roa (hash: 4Fft0psn/kwpjVEKZgVhKcfKwufV2SXuxRSuxxvAa+k=)
2: vSpaBrm0P86hiFQdMMbcNDCq85I.crl (hash: mwQEuj4qxhMHsbChlHxZSWnKxBgR7jmhjLTw5sW3CnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:04:7f:5c:27:65:b5:5e:85:cf:5e:c3:77:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a5a06b9b43fcea188541d30c6dc3430aaf392
Validity
Not Before: Oct 19 05:01:24 2025 GMT
Not After : Oct 20 05:01:24 2025 GMT
Subject: CN=bfc91dd7007e56f3951199daee1d87d41483423d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:2d:34:a3:b4:ad:93:95:50:13:cb:77:9a:
c4:d2:da:d3:28:3d:cf:18:89:fb:73:42:c9:0a:b2:
51:92:f9:1a:60:76:82:92:1b:17:f6:d4:92:b9:fc:
eb:64:8c:cf:b0:7f:d1:0b:b8:4e:1f:33:53:ae:b4:
2c:72:c3:41:92:90:a3:d5:c5:2e:c5:73:c3:1a:2d:
2e:97:60:c0:0d:37:6a:5c:a9:e3:1c:e5:ba:5d:0e:
0f:3d:85:31:89:cf:cc:79:82:b8:5a:dd:0f:a5:cd:
7c:d5:60:09:3a:2e:10:6e:84:ef:b4:b5:04:1f:ba:
1a:0f:66:54:2f:68:53:9e:00:59:47:9a:17:e5:30:
53:fe:d8:9e:a7:e6:7c:b1:fd:51:31:50:f3:15:88:
e2:08:50:70:68:74:5e:2c:1a:13:8e:a5:d5:bb:48:
06:19:41:d9:33:25:e7:8f:f4:9a:a4:13:2a:ac:34:
ae:44:8e:11:0d:3d:ec:16:4f:05:fc:2c:62:a7:5a:
92:07:08:38:09:1c:ac:2a:8b:d1:8a:b7:c5:a7:81:
fb:1a:47:5c:1c:37:94:ee:d5:45:0f:e7:13:72:14:
23:ce:9c:f2:91:4f:5b:bb:99:e6:f8:fc:fa:54:24:
dd:74:d3:65:d6:d7:a9:d7:06:48:45:e6:f3:6f:52:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C9:1D:D7:00:7E:56:F3:95:11:99:DA:EE:1D:87:D4:14:83:42:3D
X509v3 Authority Key Identifier:
keyid:BD:2A:5A:06:B9:B4:3F:CE:A1:88:54:1D:30:C6:DC:34:30:AA:F3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpaBrm0P86hiFQdMMbcNDCq85I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/caf034-cbe2-4d2d-a02b-5d34704b7c88/1/vSpaBrm0P86hiFQdMMbcNDCq85I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3a:8a:a7:9d:bd:a5:44:72:c9:24:b0:f0:c8:aa:41:88:26:
53:62:23:2b:24:54:05:7b:45:79:e5:73:b9:6e:9c:d2:84:11:
a6:f9:f6:17:f5:ff:b2:73:a8:e2:06:90:e0:62:d4:02:54:3d:
bd:00:d7:ea:fa:a9:0d:21:27:b1:a3:fc:e2:e8:c7:73:fc:e9:
c5:0e:ac:ae:a4:8d:0d:82:8f:19:43:9a:3e:20:2b:3c:5e:e7:
66:26:1d:83:b2:dd:f6:a5:6d:4b:32:5c:4e:c3:c2:f3:e1:53:
c6:b4:15:51:83:2a:70:97:7e:e3:a8:81:cf:fd:27:78:c2:b8:
b1:09:f1:21:ed:02:c0:48:97:95:ac:b2:28:73:5d:7d:5d:e7:
5a:18:fe:d2:1a:f2:83:8a:df:bb:e3:3b:e7:53:cd:89:fe:09:
0b:3a:51:a0:41:dc:97:c8:c1:ab:32:dd:19:0c:55:25:de:62:
05:0a:f5:a4:4d:a4:12:e9:60:1e:71:77:15:ca:d7:34:9c:d2:
49:fe:db:21:29:e5:f0:96:98:3a:1e:66:5e:7d:ea:8c:e8:a6:
7d:a7:36:79:cf:82:30:ab:af:80:c9:f6:f2:21:f8:68:b4:ee:
98:38:50:b8:5c:a4:49:9e:e2:f4:51:45:34:30:cc:3f:19:5f:
27:63:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:04 2025 by rpki-client