Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier: ED947n4bCF5s6Phkyl7wvf9VYUzwIhErMMvYnJnQ+Mw=
Subject key identifier: 55:A6:C7:35:B5:0F:90:FA:A2:68:FE:58:F6:43:9C:D9:FE:F7:55:70
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 0199FBEB6ECDB9593AFA7D4AD17E6DB4A00C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number: 0B07
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=)
2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: Af+KUmvNj82bpbG0P67SI3pQH/DeDmqG+ve9hkcG4Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6e:cd:b9:59:3a:fa:7d:4a:d1:7e:6d:b4:a0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=55a6c735b50f90faa268fe58f6439cd9fef75570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fe:4d:80:5c:17:35:47:56:2e:dd:48:ea:21:
7a:5d:74:09:84:bd:44:62:6a:62:f4:fd:62:87:c1:
33:df:b4:1c:4c:aa:7e:d8:d3:a6:f1:fa:82:3a:fb:
53:78:9a:c8:83:ed:a4:b1:1f:41:39:f9:1b:97:bb:
e1:98:89:e5:ab:f0:dd:6d:b0:b0:3a:04:05:83:09:
43:9e:14:b9:91:5c:7c:2f:07:be:04:57:aa:10:64:
8e:5d:ca:be:10:00:0f:57:b0:c5:df:88:19:b8:bd:
d5:48:4e:2a:2a:de:d4:2c:68:3a:d8:ca:18:83:c2:
38:b1:69:36:30:00:39:87:88:85:4a:d5:95:a6:9b:
7d:cc:88:ed:40:a6:e5:85:6d:e5:07:a7:fb:0d:ad:
49:7f:46:b3:e0:77:ee:ed:cf:32:7a:ca:e4:f7:eb:
f4:44:5a:dc:16:9f:df:20:b6:b4:99:62:71:4b:f9:
f4:b1:c2:a1:1c:21:4b:37:d1:31:e9:71:e4:b3:70:
7f:ce:4f:4d:51:86:ff:77:d0:25:ce:94:f8:99:5d:
ca:a9:24:64:4b:c5:03:76:63:d3:da:c3:25:f5:07:
25:32:4a:22:74:ef:58:59:a6:72:bd:70:1c:53:65:
19:a1:85:e2:8b:b1:03:d4:a6:57:c7:ba:20:80:f5:
f2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A6:C7:35:B5:0F:90:FA:A2:68:FE:58:F6:43:9C:D9:FE:F7:55:70
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:37:2b:7b:86:b2:1c:1e:28:a3:c6:b9:c0:a2:91:80:35:00:
56:a2:f2:23:2d:21:46:38:51:d1:83:24:90:06:1f:da:2f:0a:
a3:b1:bb:c3:d7:66:75:4a:bc:81:a0:fc:5b:bb:5a:9f:8c:58:
0b:c0:5e:13:97:92:77:bc:01:9c:19:4c:fc:ab:c7:a5:a6:20:
bc:0b:25:c0:5b:92:3b:7d:76:17:8f:23:70:1d:d9:88:a5:32:
96:2e:5a:ba:07:c8:53:1b:d3:96:61:1e:c2:a7:7c:ad:78:6d:
78:b0:c3:89:17:f8:23:08:e3:b1:f2:96:9a:b5:34:30:70:65:
e6:2a:f8:89:e5:fb:d4:83:35:9c:f6:e2:0c:a4:24:42:3e:6d:
3d:ce:b3:ff:7b:50:54:10:fc:91:a7:1f:ee:d5:38:ed:94:ba:
55:bd:69:84:a9:b2:a8:12:fb:e1:ec:68:58:94:5d:89:ec:e3:
6b:0a:88:a7:93:8e:eb:c7:2d:51:b5:9e:d0:aa:be:e1:26:ef:
28:77:0f:b7:56:54:18:f1:2e:5f:59:7c:41:8d:60:57:ac:45:
ef:1f:d6:d7:fb:ec:c4:13:77:ed:0f:02:c0:0d:8d:f8:26:d8:
e5:ac:62:64:00:aa:db:16:e6:19:31:94:4d:7f:9a:28:29:d8:
79:77:75:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:02 2025 by rpki-client