Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier: Aiqe+rp0zAO2yGFTNO7xAtZWTDDpLKSCUPkabscxmL4=
Subject key identifier: 30:48:F5:3D:4E:02:35:AB:6A:EE:43:AA:6A:EF:60:77:DF:88:CB:2B
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 019A4EF5DE797F8BF52D13EEB5818532EA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number: 0B32
Signing time: Tue 04 Nov 2025 13:02:07 +0000
Manifest this update: Tue 04 Nov 2025 13:02:07 +0000
Manifest next update: Wed 05 Nov 2025 13:02:07 +0000
Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=)
2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: dRZNdhpQMy63DafX3o6dvl3/2VJO0bu+t3KdhpnKaAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:de:79:7f:8b:f5:2d:13:ee:b5:81:85:32:ea:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Nov 4 13:02:07 2025 GMT
Not After : Nov 5 13:02:07 2025 GMT
Subject: CN=3048f53d4e0235ab6aee43aa6aef6077df88cb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:a2:40:54:f3:db:d8:4c:87:14:ee:c9:e7:
96:1f:31:ab:90:2b:93:21:ac:d6:43:00:a1:db:c5:
ed:a0:7d:61:68:fe:c0:1b:44:ad:a1:f2:10:c4:db:
d2:ae:13:11:06:af:45:3e:ae:45:71:50:da:46:4b:
e0:74:d0:71:f0:e6:87:21:f7:22:32:7e:4b:1e:79:
24:85:5a:d2:ce:e1:ed:f8:c1:ef:6f:fd:e5:22:8c:
35:5f:75:03:e1:ac:5c:a6:cb:44:43:02:97:f9:79:
0a:08:d4:39:83:d0:4d:e8:f3:0e:f3:5a:79:20:ec:
f9:9d:62:d0:31:76:c4:b9:1c:1e:27:b9:b0:24:87:
28:63:11:58:97:93:2e:91:b3:97:a5:3f:1f:76:7f:
1a:ed:b4:26:32:60:a7:9e:58:65:0a:c1:e5:25:d9:
7d:38:5b:1e:e2:41:b2:30:43:3a:b7:eb:7f:bc:b6:
cd:67:fe:81:35:36:f2:ac:d8:e5:69:67:15:61:64:
28:29:0c:3a:a2:0e:52:ce:3e:82:b9:53:6c:12:81:
39:d4:04:8d:f4:0a:81:75:cc:1b:9c:15:a4:d1:dc:
78:0e:12:21:49:19:89:8a:0a:fe:b7:ea:d9:c7:8d:
ac:e5:35:0b:b9:ee:7b:18:10:7d:76:4c:46:72:39:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:48:F5:3D:4E:02:35:AB:6A:EE:43:AA:6A:EF:60:77:DF:88:CB:2B
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1a:30:12:8a:33:80:11:92:e3:82:44:ca:5f:e1:50:54:7b:
5e:66:f9:42:bc:74:c1:d5:82:be:80:69:b5:25:e3:80:1a:92:
55:81:e6:ee:d7:7c:6b:5f:9b:7f:8e:52:82:98:f0:95:54:32:
16:c2:b9:9f:a5:17:b0:90:f3:f2:87:01:fd:7c:b7:3f:39:68:
f3:7e:f5:72:94:77:93:96:87:22:ed:aa:bf:1d:ab:e6:c8:0f:
a8:37:49:b4:16:2b:ac:ca:5f:25:ae:6a:47:11:ea:7d:81:89:
14:22:94:ce:88:ab:94:3b:1f:9b:55:c3:f2:7d:74:0b:bb:bc:
3b:e3:9a:34:37:ae:47:a2:6e:ec:ce:e1:04:02:89:ae:e5:03:
a2:83:e6:f1:8c:75:0f:a6:6e:6b:8a:aa:84:30:7e:88:f1:cf:
e1:a8:f6:f2:da:31:57:f5:b0:da:13:c5:d1:46:48:7f:74:e4:
d9:c4:1e:dd:4b:37:7e:29:1c:39:66:ba:96:28:6c:bd:44:53:
d4:49:d1:4c:bd:9a:ea:ba:0d:dd:cb:c1:47:24:db:3c:cb:01:
65:de:17:c1:ab:e2:a0:50:b0:d5:c5:d1:f7:e8:44:79:10:ac:
67:0a:ee:3c:b7:d1:b3:10:8b:b6:51:18:88:60:93:89:59:4f:
0a:6e:92:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:22 2025 by rpki-client