
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
File: VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft (raw, json)
Hash identifier: AzW1GCFqCvgqKG2U0G+vL6wTRYWCWUAjWKToeVmdkTo=
Subject key identifier: 4A:89:6B:01:52:65:D5:C6:96:85:65:B7:5B:D8:61:7C:3B:29:6E:25
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Certificate issuer: /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial: 0198D65F9689FCBB967E0E933426AE58D6DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
Manifest number: 0E5B
Signing time: Sat 23 Aug 2025 10:00:45 +0000
Manifest this update: Sat 23 Aug 2025 10:00:45 +0000
Manifest next update: Sun 24 Aug 2025 10:00:45 +0000
Files and hashes: 1: VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl (hash: yrmJGxF+/23nOWEFzLhUvtN8zH9XpR3wUqk9Bud4jv4=)
2: cJ5glVz4GHRzOf6IyvRRck-9UEU.roa (hash: 58bsNe/joAKOWYDPmFBrEXcY+rLRfxv60aTTZ4/yvVI=)
3: gDx_EkaHuEb4LxSm5qDhRH-UdZM.roa (hash: XHmtxgaP2vmqWx5qZWaBQh+bglRBX5m7TvdpxAwnTCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:96:89:fc:bb:96:7e:0e:93:34:26:ae:58:d6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Validity
Not Before: Aug 23 10:00:45 2025 GMT
Not After : Aug 24 10:00:45 2025 GMT
Subject: CN=4a896b015265d5c6968565b75bd8617c3b296e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:52:55:fc:fc:f0:06:65:73:e7:dd:83:c8:
13:70:0d:13:26:5b:53:75:af:73:93:dd:b2:5f:6c:
81:c0:ff:0d:31:b9:db:62:70:04:43:d4:03:4d:e5:
61:80:f5:80:23:72:1a:71:1b:c0:c5:f6:6a:c0:fb:
ff:2e:e4:0d:e6:a8:36:c7:e0:88:e8:9b:88:d7:9f:
8d:dd:6a:e4:32:09:03:07:c7:ab:8d:9a:73:db:02:
89:e0:3b:66:5c:13:91:79:21:5b:9b:aa:01:32:38:
2d:54:c4:8c:90:7e:18:36:84:b1:e5:94:4f:92:db:
b3:d5:ac:13:7b:f4:9a:32:af:a3:49:3b:55:d1:e1:
cf:59:93:b2:6c:9b:de:40:50:5b:72:de:d7:e5:b9:
d3:89:27:cb:8c:66:01:77:98:e9:ff:01:94:36:20:
fb:3c:0b:f8:51:dd:88:81:9a:dd:3f:55:d7:b9:e6:
11:2d:37:85:10:0f:74:ae:30:6c:c4:6a:a4:7e:f7:
89:70:e7:87:7b:ff:a8:dc:07:1e:7f:14:0e:fb:2f:
7c:7f:54:d7:d7:91:da:67:fe:0d:2f:43:49:52:ae:
a9:7f:fd:d8:ef:6a:9b:49:96:e4:b1:56:a3:78:45:
3d:1b:26:e8:9d:48:66:14:17:e1:49:ba:de:27:07:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:89:6B:01:52:65:D5:C6:96:85:65:B7:5B:D8:61:7C:3B:29:6E:25
X509v3 Authority Key Identifier:
keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:42:65:3d:3f:41:c0:bf:24:bb:a4:c9:4b:46:d0:6f:a6:e5:
b7:3f:3d:63:83:36:c8:3a:62:be:2d:4e:5a:da:d4:21:fe:0d:
e2:0b:32:14:f5:04:6e:74:b2:e6:9b:25:ab:f8:4c:2d:d5:cd:
de:40:d3:e2:25:1a:bb:81:32:e0:15:db:f1:1c:9b:00:ef:2e:
81:e6:7b:e7:27:5b:0f:24:66:5a:f8:9a:50:41:97:76:29:78:
2c:3e:7a:34:b5:f9:d2:67:1d:4b:47:a8:c0:6d:e5:68:d3:1f:
74:f9:e5:b0:c5:a6:d8:b0:b1:56:4e:3e:fb:66:15:dd:f5:f4:
ca:98:9b:0e:21:84:11:95:6f:e6:00:ce:de:67:e3:9f:73:65:
ac:77:75:7b:fa:d9:2d:29:a3:fe:4f:90:3d:2a:10:39:ac:8f:
75:c7:36:63:eb:be:e6:9e:1c:ae:71:9e:f7:3f:b8:53:c1:22:
f9:a5:f0:c5:9b:6f:20:32:99:91:4a:77:47:8f:34:4e:63:03:
d6:2b:87:68:0a:50:2d:01:cd:ed:f3:c8:6b:5d:eb:dd:0f:e4:
85:7c:30:f8:62:96:50:24:7b:b1:5c:f3:f0:48:ec:52:51:ae:
12:1c:b9:2a:2e:89:58:8f:93:cd:91:70:c2:c7:3b:96:99:c7:
d0:e0:c7:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX5aJ/LuWfg6TNCauWNbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODhiMTFjNWYyNGYyZTkzOGM4OGE1MWNiNDljZWIxMzUz
NjQzODkwHhcNMjUwODIzMTAwMDQ1WhcNMjUwODI0MTAwMDQ1WjAzMTEwLwYDVQQD
Eyg0YTg5NmIwMTUyNjVkNWM2OTY4NTY1Yjc1YmQ4NjE3YzNiMjk2ZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2hSVfz88AZlc+fdg8gTcA0TJltT
da9zk92yX2yBwP8NMbnbYnAEQ9QDTeVhgPWAI3IacRvAxfZqwPv/LuQN5qg2x+CI
6JuI15+N3WrkMgkDB8erjZpz2wKJ4DtmXBOReSFbm6oBMjgtVMSMkH4YNoSx5ZRP
ktuz1awTe/SaMq+jSTtV0eHPWZOybJveQFBbct7X5bnTiSfLjGYBd5jp/wGUNiD7
PAv4Ud2IgZrdP1XXueYRLTeFEA90rjBsxGqkfveJcOeHe/+o3AcefxQO+y98f1TX
15HaZ/4NL0NJUq6pf/3Y72qbSZbksVajeEU9GybonUhmFBfhSbreJweiGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqJawFSZdXGloVlt1vYYXw7KW4lMB8GA1UdIwQY
MBaAFFaIsRxfJPLpOMiKUctJzrE1NkOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9peEhGOGs4dWs0eUlwUnkwbk9zVFUyUTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zYjE2NTctNzg5MS00MWEyLThiMWQt
Yzg0MjFjM2I2NTU0LzEvVm9peEhGOGs4dWs0eUlwUnkwbk9zVFUyUTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zYjE2NTctNzg5MS00MWEyLThiMWQtYzg0MjFjM2I2NTU0
LzEvVm9peEhGOGs4dWs0eUlwUnkwbk9zVFUyUTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUJlPT9B
wL8ku6TJS0bQb6bltz89Y4M2yDpivi1OWtrUIf4N4gsyFPUEbnSy5pslq/hMLdXN
3kDT4iUau4Ey4BXb8RybAO8ugeZ75ydbDyRmWviaUEGXdil4LD56NLX50mcdS0eo
wG3laNMfdPnlsMWm2LCxVk4++2YV3fX0ypibDiGEEZVv5gDO3mfjn3NlrHd1e/rZ
LSmj/k+QPSoQOayPdcc2Y+u+5p4crnGe9z+4U8Ei+aXwxZtvIDKZkUp3R480TmMD
1iuHaApQLQHN7fPIa13r3Q/khXww+GKWUCR7sVzz8EjsUlGuEhy5Ki6JWI+TzZFw
wsc7lpnH0ODHfQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:31 2025 by rpki-client