Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier: K5TCmf1DKX0LyehlvYdRGbH/pogc84bICChOmUlhe/g=
Subject key identifier: C0:15:26:04:E9:EC:6D:1D:7B:7D:A4:38:8A:99:78:EF:B7:7C:0C:97
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 0198D4A7B032840713F35FDF06B74C754243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number: 0A6E
Signing time: Sat 23 Aug 2025 02:00:15 +0000
Manifest this update: Sat 23 Aug 2025 02:00:15 +0000
Manifest next update: Sun 24 Aug 2025 02:00:15 +0000
Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=)
2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: WvjLVm0SiKt0ZK+DEs2lpS+1TYSL236Ohgyk70IVplA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b0:32:84:07:13:f3:5f:df:06:b7:4c:75:42:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Aug 23 02:00:15 2025 GMT
Not After : Aug 24 02:00:15 2025 GMT
Subject: CN=c0152604e9ec6d1d7b7da4388a9978efb77c0c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ad:b6:be:19:a2:1b:9b:40:6c:3d:dd:5f:04:
ad:fb:b1:83:bc:4a:05:51:0d:8f:93:b8:26:27:a4:
71:c0:6c:fb:f1:4e:93:5c:7a:a3:e1:f0:f3:c0:e6:
00:33:42:a9:b9:d4:5d:7b:79:3a:6f:21:60:c2:67:
31:40:c2:40:9a:69:f8:75:99:9f:c1:80:0e:f2:94:
c2:a4:1a:55:48:50:13:35:db:2a:f1:b6:01:37:7a:
fd:63:b4:f0:99:3e:4b:7b:fe:d9:3a:c6:ef:22:44:
cf:a4:28:dd:6a:cf:94:10:26:57:a3:70:47:0a:ef:
1f:b5:30:74:05:eb:54:43:8d:cf:68:95:8a:d0:2f:
17:fb:ff:fd:e0:7f:a1:ed:33:b9:f7:67:ba:b6:a9:
a0:d7:f7:14:22:44:a2:03:39:c9:50:10:76:c1:33:
81:22:2d:5b:b6:32:77:2a:92:de:ea:e8:7e:b7:12:
fa:00:94:a8:d8:32:90:40:84:a6:7f:7f:d4:c4:95:
5c:06:47:46:77:4c:51:09:67:41:7f:7b:4b:fb:0b:
37:d6:ad:1a:db:98:fc:a6:19:c4:49:bf:d2:ba:83:
69:3b:76:7b:49:a8:78:fc:14:67:b6:2f:77:47:16:
e7:3b:d4:b5:78:ef:62:dc:65:6d:f5:ef:fc:b7:6b:
9a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:26:04:E9:EC:6D:1D:7B:7D:A4:38:8A:99:78:EF:B7:7C:0C:97
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:dd:e6:8e:05:62:19:e4:a9:15:30:b0:62:83:42:86:77:ff:
d8:02:97:e2:ff:82:65:60:87:69:8d:8c:34:64:03:86:34:62:
7c:ee:7e:dd:c9:f2:ae:ca:c5:5a:36:ee:04:df:5d:32:2c:fe:
b9:e1:a8:2f:dc:de:ef:c1:54:43:1a:b3:35:ae:75:fd:b0:d8:
d9:e6:d9:da:df:50:40:ef:25:21:5d:2c:76:1a:99:67:46:06:
98:65:b2:14:2b:d9:be:c3:28:6c:40:bd:b8:fa:35:ac:8a:1b:
c7:8e:51:8f:1a:8c:dc:1d:0e:83:5d:cc:35:c7:dd:d9:25:5e:
0c:74:71:3f:76:6d:82:43:4f:52:41:fb:94:1a:dd:52:49:79:
ec:85:30:04:8b:e1:ab:98:32:23:36:90:a5:80:36:c4:60:74:
f5:99:12:fe:79:bd:76:a2:81:a0:7f:a9:c3:61:ca:b7:c7:3e:
95:6f:9d:56:20:27:40:9f:9f:38:50:12:2a:d7:ff:8e:58:1c:
69:69:e7:47:fe:c9:32:5d:f7:cf:64:4d:b0:e2:2a:ab:a1:50:
58:64:41:dc:b1:93:9d:82:03:12:c8:71:f3:cd:d3:0f:14:8c:
86:29:bc:c1:b0:4d:80:ad:f3:5b:d6:05:11:7d:c4:38:0a:e1:
49:f2:11:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp7AyhAcT81/fBrdMdUJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMmE2YTIyMzJjNDM5ZjA0NjIwYzgyYjRkN2UxNGU5ZGY3
MjExNDMwHhcNMjUwODIzMDIwMDE1WhcNMjUwODI0MDIwMDE1WjAzMTEwLwYDVQQD
EyhjMDE1MjYwNGU5ZWM2ZDFkN2I3ZGE0Mzg4YTk5NzhlZmI3N2MwYzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q22vhmiG5tAbD3dXwSt+7GDvEoF
UQ2Pk7gmJ6RxwGz78U6TXHqj4fDzwOYAM0KpudRde3k6byFgwmcxQMJAmmn4dZmf
wYAO8pTCpBpVSFATNdsq8bYBN3r9Y7TwmT5Le/7ZOsbvIkTPpCjdas+UECZXo3BH
Cu8ftTB0BetUQ43PaJWK0C8X+//94H+h7TO592e6tqmg1/cUIkSiAznJUBB2wTOB
Ii1btjJ3KpLe6uh+txL6AJSo2DKQQISmf3/UxJVcBkdGd0xRCWdBf3tL+ws31q0a
25j8phnESb/SuoNpO3Z7Sah4/BRnti93RxbnO9S1eO9i3GVt9e/8t2uaYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAVJgTp7G0de32kOIqZeO+3fAyXMB8GA1UdIwQY
MBaAFL0qaiIyxDnwRiDIK01+FOnfchFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGIt
OTA5YjZhYjg1ZWU5LzEvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGItOTA5YjZhYjg1ZWU5
LzEvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWd3mjgVi
GeSpFTCwYoNChnf/2AKX4v+CZWCHaY2MNGQDhjRifO5+3cnyrsrFWjbuBN9dMiz+
ueGoL9ze78FUQxqzNa51/bDY2ebZ2t9QQO8lIV0sdhqZZ0YGmGWyFCvZvsMobEC9
uPo1rIobx45RjxqM3B0Og13MNcfd2SVeDHRxP3ZtgkNPUkH7lBrdUkl57IUwBIvh
q5gyIzaQpYA2xGB09ZkS/nm9dqKBoH+pw2HKt8c+lW+dViAnQJ+fOFASKtf/jlgc
aWnnR/7JMl33z2RNsOIqq6FQWGRB3LGTnYIDEshx883TDxSMhim8wbBNgK3zW9YF
EX3EOArhSfIRig==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:16:01 2025 by rpki-client