Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: Qy3sKkLRhsLo9KrDxXosT10NvB7JzViMoFR9CS6/T+Q=
Subject key identifier: 3E:9C:0C:27:44:11:11:22:4C:5A:B1:77:07:29:01:DF:F7:54:74:3E
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 0196BC003E33DD8EEB047E860D308187D762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 13E7
Signing time: Sat 10 May 2025 21:00:54 +0000
Manifest this update: Sat 10 May 2025 21:00:54 +0000
Manifest next update: Sun 11 May 2025 21:00:54 +0000
Files and hashes: 1: M5Ss8dPr3mgOSEzIF3jmA6pApv4.roa (hash: QeN0UB5jBHieDVxeoJHOIWGc+jidnXLUOykEdgdKgwA=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: YTAbBwJ1iDlClQfcXW9cOuVcnRIyyRIC3OANs82SLeg=)
3: jhn2n6Zhnk2eAJzC6HzMRpbzBDY.roa (hash: JGVKd7N6rxJHSCarnyD9lhtED3Ke3uBCDSZH7wuHINc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:00:3e:33:dd:8e:eb:04:7e:86:0d:30:81:87:d7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: May 10 21:00:54 2025 GMT
Not After : May 11 21:00:54 2025 GMT
Subject: CN=3e9c0c27441111224c5ab177072901dff754743e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:47:f7:e6:b0:3d:6d:1c:fb:be:24:a3:1d:
ea:7a:fe:a5:89:18:f0:d9:50:95:fd:56:9c:e5:66:
f7:15:ca:9f:73:c9:c9:30:0e:4d:bc:2e:51:32:30:
88:9b:0a:db:ab:eb:a0:b7:57:72:65:02:15:9f:34:
d8:07:11:1a:ad:2f:09:ca:57:f6:b4:8e:90:d1:1e:
aa:f4:a6:e4:2d:e3:2b:b9:d6:ba:bd:93:88:c1:0c:
7e:7a:10:77:6c:c0:a3:b3:99:1e:5d:0f:90:8f:6e:
95:ec:f6:f4:96:a7:4d:db:aa:27:95:70:e1:14:2b:
4b:8a:eb:c4:46:eb:e6:18:0c:fa:ea:94:e3:7b:28:
e5:d9:d5:c8:2e:31:81:b6:8e:7c:0c:bd:45:94:86:
35:43:5d:79:80:ad:ff:fe:f6:87:ec:ce:43:67:99:
27:04:3d:fa:d2:8d:a2:dc:95:e7:da:71:10:8f:a2:
d2:2a:ab:0e:83:53:dc:ce:71:dc:65:01:41:8f:a9:
96:b9:d5:ac:04:67:3a:f6:33:c9:d5:d8:c6:d5:0c:
4c:d6:9b:e6:a1:08:3c:86:1c:13:9b:81:c0:0b:38:
6b:06:f2:f5:19:17:70:0e:2d:b6:2c:9f:77:a4:0e:
4c:86:ca:83:b7:23:45:30:0b:8b:d1:2f:4d:ef:ce:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9C:0C:27:44:11:11:22:4C:5A:B1:77:07:29:01:DF:F7:54:74:3E
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:01:4b:79:0d:20:5d:ef:54:76:43:f1:6c:fb:25:b3:05:19:
9c:b5:66:38:da:0e:59:c4:b8:fe:f2:fa:15:78:af:88:d3:cb:
62:6d:6e:37:2c:c3:95:6e:9c:c3:2b:28:f3:c3:e4:21:e9:17:
ea:30:13:7e:7c:ae:b7:71:ff:30:51:0f:58:c6:1d:d7:3f:1e:
d6:81:c0:ce:16:28:6a:92:ad:af:14:ec:ff:c3:18:7b:ab:88:
8a:4d:37:c4:14:4c:be:c2:f3:ad:de:89:57:95:f6:4d:88:ad:
3c:97:21:9c:72:76:e7:8c:32:a4:c9:df:f7:0c:43:91:95:01:
cf:c4:fc:f8:26:a2:ed:34:48:a9:60:fe:9d:df:16:7c:c9:97:
d4:60:b5:c9:3b:0b:4f:4b:42:a3:ec:14:68:d3:c1:56:36:dd:
ea:5d:60:ca:12:5d:66:5b:4a:cc:d0:c9:b0:31:41:2c:89:bf:
bc:19:96:3b:95:26:a1:d7:7a:23:22:82:2a:66:1d:75:8c:16:
96:e2:5d:f9:26:ae:ff:c4:bd:d3:ca:17:cd:bc:6e:e0:37:e4:
bd:0c:17:c0:90:c1:4b:68:8b:16:04:be:44:30:de:bc:d2:44:
ab:e0:6a:d2:b2:cb:95:10:0d:e3:29:3d:40:1e:f7:c7:13:c1:
9a:d0:27:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8AD4z3Y7rBH6GDTCBh9diMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZTVkNjkxN2RjMmRhYmZiNWNhZjkwN2MzZTc0NTE0OTUw
MmM5MGUwHhcNMjUwNTEwMjEwMDU0WhcNMjUwNTExMjEwMDU0WjAzMTEwLwYDVQQD
EygzZTljMGMyNzQ0MTExMTIyNGM1YWIxNzcwNzI5MDFkZmY3NTQ3NDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp19H9+awPW0c+74kox3qev6liRjw
2VCV/Vac5Wb3Fcqfc8nJMA5NvC5RMjCImwrbq+ugt1dyZQIVnzTYBxEarS8Jylf2
tI6Q0R6q9KbkLeMruda6vZOIwQx+ehB3bMCjs5keXQ+Qj26V7Pb0lqdN26onlXDh
FCtLiuvERuvmGAz66pTjeyjl2dXILjGBto58DL1FlIY1Q115gK3//vaH7M5DZ5kn
BD360o2i3JXn2nEQj6LSKqsOg1PcznHcZQFBj6mWudWsBGc69jPJ1djG1QxM1pvm
oQg8hhwTm4HACzhrBvL1GRdwDi22LJ93pA5MhsqDtyNFMAuL0S9N784qjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6cDCdEEREiTFqxdwcpAd/3VHQ+MB8GA1UdIwQY
MBaAFFTl1pF9wtq/tcr5B8PnRRSVAskOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80NzlkMDYtOWU4NC00Zjc2LThhZTAt
MTMxZDI5MTY0ODhjLzEvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS80NzlkMDYtOWU4NC00Zjc2LThhZTAtMTMxZDI5MTY0ODhj
LzEvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwFLeQ0g
Xe9UdkPxbPslswUZnLVmONoOWcS4/vL6FXiviNPLYm1uNyzDlW6cwyso88PkIekX
6jATfnyut3H/MFEPWMYd1z8e1oHAzhYoapKtrxTs/8MYe6uIik03xBRMvsLzrd6J
V5X2TYitPJchnHJ254wypMnf9wxDkZUBz8T8+Cai7TRIqWD+nd8WfMmX1GC1yTsL
T0tCo+wUaNPBVjbd6l1gyhJdZltKzNDJsDFBLIm/vBmWO5Umodd6IyKCKmYddYwW
luJd+Sau/8S908oXzbxu4DfkvQwXwJDBS2iLFgS+RDDevNJEq+Bq0rLLlRAN4yk9
QB73xxPBmtAn3g==
-----END CERTIFICATE-----
Generated at Sun May 11 03:07:11 2025 by rpki-client