Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.mft
File: voSufAUDrEUJNMn2z_OaFTelEm0.mft (raw, json)
Hash identifier: iU5qIMfsZTExbkIhhWjOXjR6nCEKZifzXuQ80CiiTJs=
Subject key identifier: 8A:A7:C8:A6:C1:6C:13:FF:7D:A7:44:0F:51:22:CA:C8:B0:5F:73:8D
Authority key identifier: BE:84:AE:7C:05:03:AC:45:09:34:C9:F6:CF:F3:9A:15:37:A5:12:6D
Certificate issuer: /CN=be84ae7c0503ac450934c9f6cff39a1537a5126d
Certificate serial: 0197CCBB0B154BD49FC268184307BA0ADFD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.mft
Manifest number: 0AF1
Signing time: Wed 02 Jul 2025 20:01:39 +0000
Manifest this update: Wed 02 Jul 2025 20:01:39 +0000
Manifest next update: Thu 03 Jul 2025 20:01:39 +0000
Files and hashes: 1: 7tAdH0jHIQZMhV2UXE5ju7GPX5A.roa (hash: ke2Pze70Vmc4RLIsbKXkz5KaIKimvkLBsr9cynVUelM=)
2: E4Y4DgvrfMZRFfkDU7J3hEu8W_c.roa (hash: gT4d1PLwEsIRw1GbBV27XBOZHFPpkUIPaPpaZOuGe8U=)
3: F9qaVGz01AdMhMbIvPmIjAGmLWg.roa (hash: iH6Wxnfnga3Klxx1nQ3eob/Ronz6FDXwS1cDuUlEdSk=)
4: voSufAUDrEUJNMn2z_OaFTelEm0.crl (hash: FfpZDk+QzJS7tQap/sDDf8QdpZxMiL3qYZjhIhRKZi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:bb:0b:15:4b:d4:9f:c2:68:18:43:07:ba:0a:df:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be84ae7c0503ac450934c9f6cff39a1537a5126d
Validity
Not Before: Jul 2 20:01:39 2025 GMT
Not After : Jul 3 20:01:39 2025 GMT
Subject: CN=8aa7c8a6c16c13ff7da7440f5122cac8b05f738d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:da:97:09:9e:3d:f5:43:04:3c:5c:64:64:
b3:a7:c2:16:28:f8:e6:b0:0d:e4:0a:4f:f1:6e:dd:
2d:51:2e:bd:f2:86:60:12:ff:71:4b:65:5e:4e:72:
73:76:43:62:a5:26:2f:8c:9c:ea:0e:0c:2f:64:9a:
f6:31:60:c0:3b:de:d3:80:5a:d8:3b:c0:fb:14:c8:
f9:14:83:ef:f7:99:1f:8d:1e:26:95:ba:5c:fa:33:
bf:06:e9:4c:b8:16:10:fd:88:2e:a2:4e:04:d7:71:
3d:d9:9f:c7:c9:47:32:42:98:6a:14:86:f0:79:ee:
5d:78:f0:6e:62:81:8a:07:6b:87:b0:2e:8e:6b:d1:
55:7c:29:3d:7c:3f:91:40:96:6b:b1:2d:4f:d5:a5:
a8:8e:0d:24:dc:ff:15:b0:de:67:11:2a:ed:6d:d1:
c1:72:54:e0:5f:88:b0:7d:a1:4a:ee:85:9e:a7:5e:
fd:08:d6:0c:dc:b8:5f:76:b4:ad:f4:b9:d4:a6:c2:
3c:f4:c1:ba:7a:b2:ac:c4:c0:30:a4:3b:a1:5c:7e:
d9:d6:a1:3b:bf:bf:df:96:db:27:b8:72:20:50:a6:
25:bb:f6:38:4a:7c:b3:7f:f6:25:63:d4:06:8c:c1:
e0:6e:de:b4:41:e4:d4:e3:3a:99:42:23:85:9c:5a:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A7:C8:A6:C1:6C:13:FF:7D:A7:44:0F:51:22:CA:C8:B0:5F:73:8D
X509v3 Authority Key Identifier:
keyid:BE:84:AE:7C:05:03:AC:45:09:34:C9:F6:CF:F3:9A:15:37:A5:12:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voSufAUDrEUJNMn2z_OaFTelEm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a204a5-1950-4b44-ac90-81a2b347da84/1/voSufAUDrEUJNMn2z_OaFTelEm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:82:8d:35:01:9b:69:c8:4f:83:b9:bc:b5:6b:86:b7:2b:b0:
5f:4e:68:22:64:e9:b4:b1:08:10:b0:7b:00:bb:2d:21:eb:28:
10:fc:51:ef:38:12:4b:65:81:c8:c7:67:ec:8b:6b:fa:b8:5f:
e8:77:b0:12:dd:f3:9a:4f:51:2a:59:fa:ec:ca:2c:d6:a8:21:
1f:e6:64:49:9b:23:39:31:ab:a8:63:13:20:98:47:0b:79:47:
07:93:f9:80:15:43:e7:2a:4c:d7:88:61:bf:30:20:e8:9f:1f:
5e:2a:af:d3:f1:bb:ed:2c:d5:5e:ff:02:43:de:fe:1c:62:09:
e0:25:dd:fc:d2:f4:55:53:42:a5:5b:08:2f:fb:b0:b7:a2:74:
e2:72:7c:29:7d:11:0a:eb:cd:12:92:c2:a8:d9:79:07:07:dd:
81:00:ac:b2:ac:4d:c4:e9:60:96:44:29:1a:6c:bf:0f:c5:ae:
51:12:c4:35:05:ae:75:fe:71:50:5d:dd:54:fd:39:de:ac:98:
0d:b1:58:88:3b:34:00:3e:f7:82:a8:e2:76:aa:72:2f:ef:bf:
d6:3e:25:15:1e:77:7d:ad:17:d6:46:69:99:de:ff:0c:60:ea:
f8:1f:50:8c:a2:e3:51:aa:f9:f3:00:87:c8:25:96:26:b7:49:
dd:3d:79:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMuwsVS9SfwmgYQwe6Ct/VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlODRhZTdjMDUwM2FjNDUwOTM0YzlmNmNmZjM5YTE1Mzdh
NTEyNmQwHhcNMjUwNzAyMjAwMTM5WhcNMjUwNzAzMjAwMTM5WjAzMTEwLwYDVQQD
Eyg4YWE3YzhhNmMxNmMxM2ZmN2RhNzQ0MGY1MTIyY2FjOGIwNWY3MzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlvalwmePfVDBDxcZGSzp8IWKPjm
sA3kCk/xbt0tUS698oZgEv9xS2VeTnJzdkNipSYvjJzqDgwvZJr2MWDAO97TgFrY
O8D7FMj5FIPv95kfjR4mlbpc+jO/BulMuBYQ/Yguok4E13E92Z/HyUcyQphqFIbw
ee5dePBuYoGKB2uHsC6Oa9FVfCk9fD+RQJZrsS1P1aWojg0k3P8VsN5nESrtbdHB
clTgX4iwfaFK7oWep179CNYM3LhfdrSt9LnUpsI89MG6erKsxMAwpDuhXH7Z1qE7
v7/fltsnuHIgUKYlu/Y4Snyzf/YlY9QGjMHgbt60QeTU4zqZQiOFnFp/HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqnyKbBbBP/fadED1EiysiwX3ONMB8GA1UdIwQY
MBaAFL6ErnwFA6xFCTTJ9s/zmhU3pRJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm9TdWZBVURyRVVKTk1uMnpfT2FGVGVsRW0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hMjA0YTUtMTk1MC00YjQ0LWFjOTAt
ODFhMmIzNDdkYTg0LzEvdm9TdWZBVURyRVVKTk1uMnpfT2FGVGVsRW0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9hMjA0YTUtMTk1MC00YjQ0LWFjOTAtODFhMmIzNDdkYTg0
LzEvdm9TdWZBVURyRVVKTk1uMnpfT2FGVGVsRW0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIoKNNQGb
achPg7m8tWuGtyuwX05oImTptLEIELB7ALstIesoEPxR7zgSS2WByMdn7Itr+rhf
6HewEt3zmk9RKln67Mos1qghH+ZkSZsjOTGrqGMTIJhHC3lHB5P5gBVD5ypM14hh
vzAg6J8fXiqv0/G77SzVXv8CQ97+HGIJ4CXd/NL0VVNCpVsIL/uwt6J04nJ8KX0R
CuvNEpLCqNl5BwfdgQCssqxNxOlglkQpGmy/D8WuURLENQWudf5xUF3dVP053qyY
DbFYiDs0AD73gqjidqpyL++/1j4lFR53fa0X1kZpmd7/DGDq+B9QjKLjUar58wCH
yCWWJrdJ3T15iA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 23:29:52 2025 by rpki-client