Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: 1POU7T+2TsgwOiGVtzeGOCQzF1tFwdWGuVdooJYqI1o=
Subject key identifier: 81:DD:70:C5:44:8C:0D:40:21:E9:47:0A:0A:CD:D6:4F:CD:7F:B2:98
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 0199FE4761F59195B4281A87CA51B37D253D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 1597
Signing time: Sun 19 Oct 2025 21:01:54 +0000
Manifest this update: Sun 19 Oct 2025 21:01:54 +0000
Manifest next update: Mon 20 Oct 2025 21:01:54 +0000
Files and hashes: 1: M5Ss8dPr3mgOSEzIF3jmA6pApv4.roa (hash: QeN0UB5jBHieDVxeoJHOIWGc+jidnXLUOykEdgdKgwA=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: exW7zQeveX97I1uO8pG5RPcRp5yRUaCQIRPdTg6dzAo=)
3: jhn2n6Zhnk2eAJzC6HzMRpbzBDY.roa (hash: JGVKd7N6rxJHSCarnyD9lhtED3Ke3uBCDSZH7wuHINc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:61:f5:91:95:b4:28:1a:87:ca:51:b3:7d:25:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Oct 19 21:01:54 2025 GMT
Not After : Oct 20 21:01:54 2025 GMT
Subject: CN=81dd70c5448c0d4021e9470a0acdd64fcd7fb298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:b5:81:c0:89:91:7d:55:18:99:b8:c5:d4:
d5:9f:f5:35:e4:e4:04:f3:a8:55:d2:dc:dc:c4:a4:
4d:90:d0:1d:c5:40:35:8f:fa:73:8c:10:86:98:77:
b0:82:de:6b:b8:ac:8a:84:e8:92:4d:12:ad:da:49:
50:9e:5f:0e:28:da:5c:38:d4:69:54:58:35:63:f9:
8e:9d:74:e4:69:16:75:34:d6:8c:26:f7:9c:80:85:
dd:f3:ab:67:c8:21:99:d5:1e:2f:dc:a6:97:13:c4:
1e:31:8f:0b:71:25:73:fc:31:91:92:ab:51:a1:2b:
1d:b8:e1:40:7d:40:35:ff:38:19:7c:c1:00:be:61:
d6:5b:bb:b3:97:0a:2b:c9:85:ee:37:bc:94:ef:8c:
1a:3d:2e:66:cb:8b:76:8b:c6:8b:1b:2f:f1:f7:dc:
22:57:0a:0c:a8:b0:e7:90:c7:7e:12:51:c2:bf:8e:
68:d6:8e:bf:d7:a2:e0:88:27:d8:81:70:22:8b:ef:
34:09:ae:65:3d:c3:9c:05:17:b6:77:05:be:a9:f8:
67:be:aa:9d:e4:a4:89:28:68:2a:d2:59:ac:c0:b9:
d6:d9:0a:26:5e:6d:5a:b7:b6:22:26:97:ca:47:f1:
72:e4:23:da:e2:fe:96:60:5c:7b:52:5b:bd:de:30:
61:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DD:70:C5:44:8C:0D:40:21:E9:47:0A:0A:CD:D6:4F:CD:7F:B2:98
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5a:df:86:c1:98:2a:26:76:8a:99:2c:8c:e3:b5:72:94:ab:
f5:e5:3d:83:88:99:4d:dd:00:50:33:69:69:c1:90:97:77:4c:
34:b9:be:a8:c3:e6:96:36:5e:95:e9:54:ba:e5:34:ed:a9:f2:
23:e1:20:cd:12:5b:d2:3a:88:2f:e8:83:2b:83:23:0b:dc:98:
88:91:13:88:d4:cb:9a:a5:b5:63:86:67:73:76:5c:fd:ef:70:
ea:05:42:4f:7e:f0:31:c9:1b:19:64:c6:ca:24:69:2a:d7:4e:
5a:82:bf:31:34:98:a6:3e:8f:46:bd:61:32:de:7f:8d:bc:f5:
c8:0d:8c:38:c0:db:79:b5:85:21:0e:f5:47:d5:a2:c0:1b:f4:
6b:32:2a:af:b4:81:b5:a1:fe:ec:06:2d:fd:a9:a7:93:50:da:
62:c8:b4:99:93:bf:d4:e9:d7:b5:8b:69:6f:2f:12:5f:96:fc:
0b:30:9a:55:92:37:8d:de:e9:b3:ad:59:de:a0:18:ef:d6:d3:
01:a5:74:dd:40:fa:3e:07:3d:96:dd:94:ac:b4:6a:96:58:a5:
a3:93:c7:85:46:eb:13:2d:9e:f0:b5:23:ec:2a:26:64:78:4f:
30:30:f1:d0:41:ac:91:28:09:91:54:bc:6e:53:71:d5:e1:cb:
29:82:09:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+R2H1kZW0KBqHylGzfSU9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZTVkNjkxN2RjMmRhYmZiNWNhZjkwN2MzZTc0NTE0OTUw
MmM5MGUwHhcNMjUxMDE5MjEwMTU0WhcNMjUxMDIwMjEwMTU0WjAzMTEwLwYDVQQD
Eyg4MWRkNzBjNTQ0OGMwZDQwMjFlOTQ3MGEwYWNkZDY0ZmNkN2ZiMjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRm1gcCJkX1VGJm4xdTVn/U15OQE
86hV0tzcxKRNkNAdxUA1j/pzjBCGmHewgt5ruKyKhOiSTRKt2klQnl8OKNpcONRp
VFg1Y/mOnXTkaRZ1NNaMJvecgIXd86tnyCGZ1R4v3KaXE8QeMY8LcSVz/DGRkqtR
oSsduOFAfUA1/zgZfMEAvmHWW7uzlworyYXuN7yU74waPS5my4t2i8aLGy/x99wi
VwoMqLDnkMd+ElHCv45o1o6/16LgiCfYgXAii+80Ca5lPcOcBRe2dwW+qfhnvqqd
5KSJKGgq0lmswLnW2QomXm1at7YiJpfKR/Fy5CPa4v6WYFx7Ulu93jBhowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHdcMVEjA1AIelHCgrN1k/Nf7KYMB8GA1UdIwQY
MBaAFFTl1pF9wtq/tcr5B8PnRRSVAskOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80NzlkMDYtOWU4NC00Zjc2LThhZTAt
MTMxZDI5MTY0ODhjLzEvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS80NzlkMDYtOWU4NC00Zjc2LThhZTAtMTMxZDI5MTY0ODhj
LzEvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1rfhsGY
KiZ2ipksjOO1cpSr9eU9g4iZTd0AUDNpacGQl3dMNLm+qMPmljZelelUuuU07any
I+EgzRJb0jqIL+iDK4MjC9yYiJETiNTLmqW1Y4Znc3Zc/e9w6gVCT37wMckbGWTG
yiRpKtdOWoK/MTSYpj6PRr1hMt5/jbz1yA2MOMDbebWFIQ71R9WiwBv0azIqr7SB
taH+7AYt/amnk1DaYsi0mZO/1OnXtYtpby8SX5b8CzCaVZI3jd7ps61Z3qAY79bT
AaV03UD6Pgc9lt2UrLRqllilo5PHhUbrEy2e8LUj7ComZHhPMDDx0EGskSgJkVS8
blNx1eHLKYIJ2Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:11:03 2025 by rpki-client