Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
File: VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft (raw, json)
Hash identifier: lbk3Q6DvclD7sjIxOfp5tjD6a/wMNzNttjXlpTTdPgU=
Subject key identifier: C6:7A:0C:E4:89:75:DE:E7:6F:0F:24:4C:F2:18:D8:E3:8F:EE:26:FA
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 0199FC586B11D2B0BCD62F156D4E70F6B910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
Manifest number: 16F2
Signing time: Sun 19 Oct 2025 12:01:16 +0000
Manifest this update: Sun 19 Oct 2025 12:01:16 +0000
Manifest next update: Mon 20 Oct 2025 12:01:16 +0000
Files and hashes: 1: HSdlh2QFEpGM_46Ow4vGDv79v_E.roa (hash: 1ypzUErprDZDRYPQT+U1/uxj8msJvU+nPJ/mnvBhz8M=)
2: VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl (hash: GQKJ/LKX2h6CiF9RsW5Y+ip9RPSf7I7BvuUiN5xpV0s=)
3: bOWi-Km4EdNL2RWwyu6fkO8cIac.roa (hash: bBX5W0vrQkhD//eKPSX/Grh0TmEf+XdqKDRiX0ii7jA=)
4: elIaIJuXbpWatRWeZpRoJLAB6RM.roa (hash: QMxGtNIR9eV06fnxcnLZU8NRPRckOjRHuOBGgCXj72Q=)
5: f-0Z2G_j0_N5qqDchYy-Ctd1T14.roa (hash: wT8/mWClKuGMaXqNRw35HSU124nzDnRiBouhw/60uk4=)
6: k9_h63CkyTFP9dp8XuNDvCxNzms.roa (hash: Im4uKqma1iWFJ1wc2qRnkE5lMnQ4ol3CcsuFcdhwEn0=)
7: qmXSBo6ZQHf5SBcPKJaq60n1DpQ.roa (hash: jnR4myiAxP2Qb03Ouublrmfx01PiIWyUlSrg/eITJIY=)
8: y2v6-6CCLmifQ83qZdjogrFre-M.roa (hash: oYIyUisFgSWQrEZe7E7GOqu26OhZjK1CM4VjnsKMVLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:6b:11:d2:b0:bc:d6:2f:15:6d:4e:70:f6:b9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Oct 19 12:01:16 2025 GMT
Not After : Oct 20 12:01:16 2025 GMT
Subject: CN=c67a0ce48975dee76f0f244cf218d8e38fee26fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:c5:24:34:9e:39:8c:b4:ab:b8:03:04:ba:
28:0c:16:f3:ae:9c:48:88:0e:ad:d2:87:30:b8:6c:
89:1a:32:d1:00:22:22:06:03:99:a4:89:f1:b6:80:
c1:c4:58:8e:71:e7:51:41:cd:04:00:eb:d4:7f:49:
e7:5f:10:be:10:a8:f4:60:38:45:ea:7a:3b:a9:79:
af:52:0b:03:a4:f7:a6:53:4d:e1:70:a1:44:a2:c4:
80:a1:98:55:24:2f:50:42:33:81:97:cb:b0:e7:0c:
f4:c5:b7:09:d0:c6:df:58:00:8a:b4:59:9e:26:61:
68:a5:77:50:f6:0c:8f:a4:8a:a3:f7:a9:dc:cf:55:
ef:2f:2a:ed:52:f5:ad:72:56:bf:11:e3:72:06:cd:
a3:ac:dd:4d:1b:bb:06:6f:a6:41:9e:a3:f0:92:51:
3b:9b:0f:bd:bc:af:ba:a5:8a:6d:8e:a4:2e:43:fe:
43:de:ac:0f:5c:66:38:ef:47:81:59:87:99:31:08:
4e:0b:21:7c:07:16:4a:fa:53:46:37:f0:70:e1:49:
87:95:36:ef:da:9b:55:ae:eb:08:84:44:4a:ea:12:
02:d4:3e:67:78:64:06:60:20:18:24:c9:13:f7:df:
a1:86:61:9d:25:2d:09:e1:b5:ab:bc:c3:b9:7a:24:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7A:0C:E4:89:75:DE:E7:6F:0F:24:4C:F2:18:D8:E3:8F:EE:26:FA
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4c:38:2f:68:54:b5:10:fd:9c:70:06:ff:16:d1:87:78:c1:
ea:4c:28:2a:e2:65:7a:b0:97:f8:2a:e2:a9:a4:cd:86:26:b8:
e5:4d:f6:09:ce:81:bf:4f:24:e6:df:b0:39:17:52:b7:de:3d:
db:25:1b:05:de:87:02:ff:56:ef:17:80:72:34:81:25:23:48:
45:58:aa:e1:3a:f7:f2:95:72:3e:9c:84:b5:06:5e:61:8c:8e:
08:14:8b:a8:2a:38:db:c1:2f:5b:13:a3:37:f5:00:ae:d2:39:
3b:7f:f2:84:26:ca:33:6c:e9:0a:f1:5d:9f:e0:22:a4:e0:ad:
2a:16:10:2c:2d:39:a2:d7:df:3a:69:7a:76:64:f6:d9:6f:d4:
79:ec:4a:f5:68:62:bc:0f:7a:c6:17:6c:06:d2:1a:d6:b2:39:
01:99:68:8c:29:72:8a:b6:8b:8b:9d:e9:36:8b:21:62:bb:6a:
49:6d:bb:11:1e:d8:d2:e4:7c:ec:68:a4:c5:d2:82:bd:ba:81:
3e:db:80:c8:b2:21:7f:b4:31:14:48:01:c2:c6:54:36:c9:1a:
72:d4:46:82:1f:1e:69:ce:9f:47:a2:ab:57:5c:9b:90:d9:a3:
ca:be:15:bf:1d:81:6e:b9:c0:00:3e:e8:5b:bf:cb:11:e0:43:
11:54:56:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:08 2025 by rpki-client