
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
File: VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft (raw, json)
Hash identifier: 0pmPhjel8GKCIreZRaHadp0kVZ6tp3zqc6VphN7w/8w=
Subject key identifier: 8D:F6:0D:04:BE:54:5C:2C:79:8D:E0:A3:EB:1D:3F:17:32:C4:B7:81
Authority key identifier: 54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F
Certificate issuer: /CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
Certificate serial: 0199FBEABD60D372131B0185C8B8E0F43454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
Manifest number: 0D33
Signing time: Sun 19 Oct 2025 10:01:28 +0000
Manifest this update: Sun 19 Oct 2025 10:01:28 +0000
Manifest next update: Mon 20 Oct 2025 10:01:28 +0000
Files and hashes: 1: VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl (hash: 6nnBaff1tc8lgZLB2ZYvCuCquLZUGK0NH2JkZlbUbZM=)
2: aS2z1lZE9xnUUTE6JXQy1aNfHG8.roa (hash: G/7B1VXAASY7QAsDWedOiKdkvLm/fHkdhD3zP6wIl7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bd:60:d3:72:13:1b:01:85:c8:b8:e0:f4:34:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e73f21fecf8f8c505892f7064de1a0a4cf8e7f
Validity
Not Before: Oct 19 10:01:28 2025 GMT
Not After : Oct 20 10:01:28 2025 GMT
Subject: CN=8df60d04be545c2c798de0a3eb1d3f1732c4b781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:a7:96:57:52:1b:7c:d9:a7:bf:aa:24:51:
2c:0d:12:67:0b:1d:0b:6a:58:dd:17:79:e1:1a:2d:
50:66:25:57:1f:f4:82:c4:8f:f1:7e:99:87:2e:f3:
3a:94:92:fd:07:dc:41:97:90:bb:09:d6:98:09:14:
15:a8:24:1c:74:1f:ab:59:f6:86:46:e9:7c:e9:9c:
81:d2:59:a0:32:ea:33:8f:bb:7a:12:df:68:c3:bb:
7b:c4:0a:b1:d7:df:70:d8:19:6f:8f:0d:bb:2f:60:
b4:f3:4c:8a:c5:fc:e0:d5:ff:d3:67:6a:a2:51:fe:
81:d1:7c:6d:5d:45:c6:52:f9:c5:b6:6f:e2:4f:9d:
cd:bd:04:51:ae:96:b4:86:e0:75:71:21:59:b9:08:
bb:24:0b:fd:f0:13:3a:e8:8f:73:5d:00:f8:24:ef:
c1:e4:6d:ab:4c:df:80:43:e5:85:ad:8f:7b:cc:98:
3b:ab:3b:eb:6e:37:86:60:c1:0d:70:47:35:c2:34:
34:8a:9e:b1:b4:0a:4f:07:4e:32:2e:24:8b:31:55:
aa:c6:26:c9:29:3d:0f:a2:b9:7a:0d:ec:c2:89:06:
df:55:89:9f:99:20:1b:e0:a8:ab:21:f6:ed:11:12:
0a:8f:88:b3:77:f7:2e:1c:81:91:26:64:d2:48:09:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F6:0D:04:BE:54:5C:2C:79:8D:E0:A3:EB:1D:3F:17:32:C4:B7:81
X509v3 Authority Key Identifier:
keyid:54:E7:3F:21:FE:CF:8F:8C:50:58:92:F7:06:4D:E1:A0:A4:CF:8E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/09274f-baeb-461e-bca7-ab01c5f2ed7d/1/VOc_If7Pj4xQWJL3Bk3hoKTPjn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:78:a8:da:cf:52:65:50:6e:06:ab:dd:b9:4b:62:67:90:1d:
59:fb:76:32:48:5b:06:6e:b3:d8:23:37:2f:c9:f1:af:16:cd:
89:8e:3a:e3:69:90:33:a9:57:f6:47:e3:70:ae:da:7d:e9:4a:
93:59:74:49:13:fb:c2:86:d5:74:5b:47:fc:0d:ca:de:78:3f:
4f:71:b9:59:1a:e0:be:3f:37:76:b2:ac:7f:35:dd:14:65:f4:
45:48:25:04:1a:87:61:f4:22:c3:41:fc:dd:1c:90:d4:8d:04:
9f:9f:43:c6:71:a1:cd:8a:76:8f:98:9f:d7:b2:54:7a:0c:b3:
bc:a0:b9:71:ec:23:fc:11:e4:cc:6b:0c:71:24:98:75:56:8f:
fb:2f:63:67:73:02:0a:78:1b:fc:f0:12:bd:64:c4:71:21:6b:
fc:79:e1:16:20:e8:9b:08:25:58:79:47:12:0c:17:0f:3b:16:
76:c0:cd:d2:c7:76:14:e0:c3:35:a1:85:5a:7f:40:a2:0b:15:
22:5a:ee:12:b3:63:ed:f1:b4:1f:4f:b1:16:6a:9c:be:55:9e:
07:4b:13:79:ec:42:29:e5:7f:41:5b:63:1c:c6:da:63:12:d3:
b4:fb:fe:c3:4e:b7:fd:ab:81:73:77:b9:06:4b:ea:8d:22:42:
68:ca:e7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:46 2025 by rpki-client