Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
File: afKVoxCPXPHTJv_pv2EPvPGNct8.mft (raw, json)
Hash identifier: XSof7yF3wW+wpk2PxvNxj9pCmZZtGR2RCKi0/EluHTA=
Subject key identifier: 25:27:A8:87:A8:47:53:3A:C8:7B:1A:5A:6B:8A:6F:D8:D1:08:3D:04
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Certificate issuer: /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial: 0197B6A209693D7BF58BC552DCE56AA52641
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
Manifest number: 0943
Signing time: Sat 28 Jun 2025 13:02:41 +0000
Manifest this update: Sat 28 Jun 2025 13:02:41 +0000
Manifest next update: Sun 29 Jun 2025 13:02:41 +0000
Files and hashes: 1: 2kKgjfyddVwBqBtbcmC591hhds0.roa (hash: J3PsfHURY5KO0r8jrXSygLDWI9PtPmq+khbJ0BwKbpo=)
2: afKVoxCPXPHTJv_pv2EPvPGNct8.crl (hash: qGHTLRXHDDZbK1JWIroR1d6oWYNj4KDkLvsb2eN5Y7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:09:69:3d:7b:f5:8b:c5:52:dc:e5:6a:a5:26:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Validity
Not Before: Jun 28 13:02:41 2025 GMT
Not After : Jun 29 13:02:41 2025 GMT
Subject: CN=2527a887a847533ac87b1a5a6b8a6fd8d1083d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:81:ac:69:77:64:08:9f:4f:cb:83:2d:b9:
05:6a:8d:c5:86:ee:67:c2:b3:d7:87:05:a2:78:3f:
f6:99:df:27:58:8c:a8:0c:7a:1b:15:fb:33:cc:e4:
21:55:bf:f8:06:ca:96:1e:11:f2:98:a1:1e:0e:b1:
3d:ad:6a:1d:e8:15:94:c7:f3:ae:0d:0d:8e:53:ae:
95:91:6d:34:15:1b:90:cb:99:c5:55:c1:6e:b9:f3:
6e:82:be:ba:13:d7:3e:ec:7d:6c:86:be:52:c9:37:
b9:5c:70:8a:44:73:a9:66:34:d3:39:a6:e8:0d:f1:
13:5b:19:a1:18:fa:b9:16:b7:b0:3f:62:7d:89:b8:
a6:2a:67:6c:34:74:c9:ae:dd:ec:09:f5:60:68:1d:
14:93:45:c1:89:a1:8f:0d:e6:69:25:a3:99:a3:99:
2d:fb:72:96:a0:3e:f2:cb:ef:23:ae:de:5d:c3:fb:
6b:5d:59:d4:3e:c3:c9:f9:45:4b:b2:e0:56:b8:eb:
e3:43:89:47:32:11:07:ed:e5:bd:0a:44:44:33:17:
03:18:ac:b3:a0:b7:cd:c4:1c:8c:11:7b:83:cd:17:
29:83:62:3a:f9:96:76:4e:ac:bb:d7:d6:32:35:82:
dd:4c:23:f0:70:e1:e8:e0:a5:e0:16:85:50:67:db:
de:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:27:A8:87:A8:47:53:3A:C8:7B:1A:5A:6B:8A:6F:D8:D1:08:3D:04
X509v3 Authority Key Identifier:
keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:89:4e:72:c8:c8:dc:80:92:ad:02:d1:6c:1a:d8:5a:f6:5c:
1d:81:f1:bd:60:ae:bd:31:82:8b:fa:37:81:4b:da:3b:8f:64:
7c:65:c7:2c:14:3b:26:e7:60:62:05:ea:3e:61:71:93:8f:97:
35:0d:75:18:b3:9c:5d:fd:76:0a:6d:d7:38:fa:e3:29:d1:a0:
3a:7e:75:2f:80:7f:b6:5d:f0:06:a9:e2:1f:76:31:cf:96:e6:
7b:4c:da:fb:88:0d:aa:00:8b:7d:a8:f6:79:34:a9:ae:5a:61:
1e:c3:f1:28:41:c4:d5:ff:b5:ea:3f:db:13:07:9a:eb:74:fc:
10:0c:56:f4:b9:a1:9c:fe:10:ba:29:9f:5d:4f:61:56:a4:5a:
01:e1:07:64:9c:ba:bf:37:26:a8:09:41:9d:67:20:d8:49:88:
37:b6:81:9f:19:8c:d1:3a:c0:b9:69:9d:68:ca:ed:18:c4:fd:
7b:fe:9b:87:e2:fc:ae:1d:04:ce:d0:bb:b2:ea:70:80:30:ca:
54:60:fd:6c:db:c6:ac:7a:e2:a6:a4:e9:ef:61:e9:8e:7a:dc:
28:d6:af:89:77:cc:52:a5:e6:26:ba:06:c5:c8:c1:aa:09:6d:
03:44:05:7c:ad:6e:44:09:0b:23:31:5e:5f:00:0e:46:d0:b3:
68:94:bf:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oglpPXv1i8VS3OVqpSZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZjI5NWEzMTA4ZjVjZjFkMzI2ZmZlOWJmNjEwZmJjZjE4
ZDcyZGYwHhcNMjUwNjI4MTMwMjQxWhcNMjUwNjI5MTMwMjQxWjAzMTEwLwYDVQQD
EygyNTI3YTg4N2E4NDc1MzNhYzg3YjFhNWE2YjhhNmZkOGQxMDgzZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiKBrGl3ZAifT8uDLbkFao3Fhu5n
wrPXhwWieD/2md8nWIyoDHobFfszzOQhVb/4BsqWHhHymKEeDrE9rWod6BWUx/Ou
DQ2OU66VkW00FRuQy5nFVcFuufNugr66E9c+7H1shr5SyTe5XHCKRHOpZjTTOabo
DfETWxmhGPq5FrewP2J9ibimKmdsNHTJrt3sCfVgaB0Uk0XBiaGPDeZpJaOZo5kt
+3KWoD7yy+8jrt5dw/trXVnUPsPJ+UVLsuBWuOvjQ4lHMhEH7eW9CkREMxcDGKyz
oLfNxByMEXuDzRcpg2I6+ZZ2Tqy719YyNYLdTCPwcOHo4KXgFoVQZ9ve6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUnqIeoR1M6yHsaWmuKb9jRCD0EMB8GA1UdIwQY
MBaAFGnylaMQj1zx0yb/6b9hD7zxjXLfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZLVm94Q1BYUEhUSnZfcHYyRVB2UEdOY3Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80MzBjZjctNDQwNy00MjQ3LWIyZGEt
NWExMGQxOWNmMWYzLzEvYWZLVm94Q1BYUEhUSnZfcHYyRVB2UEdOY3Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80MzBjZjctNDQwNy00MjQ3LWIyZGEtNWExMGQxOWNmMWYz
LzEvYWZLVm94Q1BYUEhUSnZfcHYyRVB2UEdOY3Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIlOcsjI
3ICSrQLRbBrYWvZcHYHxvWCuvTGCi/o3gUvaO49kfGXHLBQ7JudgYgXqPmFxk4+X
NQ11GLOcXf12Cm3XOPrjKdGgOn51L4B/tl3wBqniH3Yxz5bme0za+4gNqgCLfaj2
eTSprlphHsPxKEHE1f+16j/bEwea63T8EAxW9LmhnP4QuimfXU9hVqRaAeEHZJy6
vzcmqAlBnWcg2EmIN7aBnxmM0TrAuWmdaMrtGMT9e/6bh+L8rh0EztC7supwgDDK
VGD9bNvGrHripqTp72HpjnrcKNaviXfMUqXmJroGxcjBqgltA0QFfK1uRAkLIzFe
XwAORtCzaJS/Hw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:31 2025 by rpki-client