Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File: vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier: Dn1s9NMu1rIVQzPtYs3irXQQTX+6yflvlOZ1hbRx12U=
Subject key identifier: 71:61:2C:F5:47:EB:CD:B8:24:2A:61:34:9D:0A:75:EB:3E:B0:EF:9D
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer: /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial: 01987607193D421AA2F24D038A9660A8E44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number: 0A3D
Signing time: Mon 04 Aug 2025 17:00:33 +0000
Manifest this update: Mon 04 Aug 2025 17:00:33 +0000
Manifest next update: Tue 05 Aug 2025 17:00:33 +0000
Files and hashes: 1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=)
2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: 2jPuV+TPEMvIiLosTMzm/36hbar5W5ZCsgiMEf/N+X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:76:07:19:3d:42:1a:a2:f2:4d:03:8a:96:60:a8:e4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Validity
Not Before: Aug 4 17:00:33 2025 GMT
Not After : Aug 5 17:00:33 2025 GMT
Subject: CN=71612cf547ebcdb8242a61349d0a75eb3eb0ef9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:64:c9:aa:93:ad:5b:9f:61:2a:39:eb:6d:96:
fb:f5:5f:6c:de:33:4a:27:59:d0:28:95:49:ed:17:
79:a8:5d:12:65:29:8c:1e:21:29:ae:0c:dd:57:6a:
3f:48:d3:c6:a3:50:57:33:9b:8e:45:7f:f6:fc:05:
1b:e6:8c:9a:31:0d:22:0c:ad:8d:92:8b:ba:80:d4:
a3:ae:90:38:95:11:2f:6c:96:6e:65:42:52:6f:98:
f3:df:6d:fe:1e:f9:6d:6c:c2:01:b6:9d:b5:3d:8c:
25:9e:ae:86:e6:b3:a2:80:80:1a:61:d4:b1:20:a8:
b3:dd:b0:2b:c2:8b:4f:f5:b4:ba:c5:45:8d:d1:e0:
48:6c:e5:31:64:55:be:51:6c:86:9b:b7:63:59:fc:
79:ad:c4:49:3a:e6:74:f5:69:f9:0d:2e:42:75:41:
fe:0d:e2:6f:c9:40:79:38:d9:d8:f7:09:97:87:63:
4d:c9:c6:2e:e7:4d:f8:1e:c0:b5:5d:56:ac:e0:7b:
ee:ea:6d:ec:c5:82:df:a9:70:86:04:32:63:87:4f:
30:37:5a:49:6e:53:b6:da:e6:d6:91:06:da:3f:ae:
9a:e7:29:69:47:ab:45:6a:7b:a1:9c:53:fd:c9:88:
b4:4c:95:28:3e:db:d4:c8:16:98:d0:88:ba:74:a6:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:61:2C:F5:47:EB:CD:B8:24:2A:61:34:9D:0A:75:EB:3E:B0:EF:9D
X509v3 Authority Key Identifier:
keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:82:a6:22:73:11:79:cc:fe:00:c5:1f:b0:3a:3e:76:ef:b1:
63:5d:17:24:0c:8e:0e:4c:ad:39:6e:22:5c:7a:35:7f:1e:f1:
1b:0e:f1:ee:88:d3:e9:f0:d4:d8:1e:b3:99:79:3e:9c:30:82:
8b:dd:b6:fa:7d:91:0d:76:b2:ab:74:8e:4e:14:ee:54:52:4c:
de:a6:92:fb:d3:cb:87:68:83:e2:78:3a:a6:f9:42:b3:ad:5b:
7f:6b:48:e9:d0:25:83:58:74:c0:7f:b3:b8:45:c5:ae:8d:d8:
02:4f:5e:77:80:46:66:e8:25:64:fe:ba:fd:d7:cf:c0:7f:14:
64:de:d2:0a:df:2c:5d:f6:46:f4:61:ce:3b:2f:67:79:1f:78:
3a:69:0a:f4:9e:75:fa:aa:25:43:b8:99:b2:b3:bd:e9:2c:ca:
3c:ea:c5:14:1f:ad:08:84:f1:5d:4f:d2:39:a8:fe:c5:16:16:
ac:52:0a:49:91:5b:9a:1b:7c:e0:25:1e:5c:e4:74:d8:5b:ff:
44:13:d8:31:49:b8:f3:60:14:26:ab:e2:66:1e:d1:d3:88:ee:
73:bb:0f:b1:26:dc:0e:21:d9:c7:e7:b1:ef:27:72:4f:df:d5:
cd:e9:da:c2:3c:a3:0c:60:8b:7d:57:37:be:29:92:ee:f4:58:
85:09:63:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:21:38 2025 by rpki-client