Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
File: VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft (raw, json)
Hash identifier: CYHViUirkl1NWyZ9OITFBPtCi+tgWahlbG2a85pXY04=
Subject key identifier: E0:9F:3D:B7:17:DB:FB:C3:42:25:BA:E1:00:41:FA:F1:1C:1F:7C:09
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Certificate issuer: /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial: 0197B88F608B989324E4C98A494F81BE26D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
Manifest number: 0DC7
Signing time: Sat 28 Jun 2025 22:01:33 +0000
Manifest this update: Sat 28 Jun 2025 22:01:33 +0000
Manifest next update: Sun 29 Jun 2025 22:01:33 +0000
Files and hashes: 1: VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl (hash: DbSREGoTlJ0NhvxFz+pUfO4ImEEEmllQtFbLyHlO0wI=)
2: cJ5glVz4GHRzOf6IyvRRck-9UEU.roa (hash: 58bsNe/joAKOWYDPmFBrEXcY+rLRfxv60aTTZ4/yvVI=)
3: gDx_EkaHuEb4LxSm5qDhRH-UdZM.roa (hash: XHmtxgaP2vmqWx5qZWaBQh+bglRBX5m7TvdpxAwnTCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:60:8b:98:93:24:e4:c9:8a:49:4f:81:be:26:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Validity
Not Before: Jun 28 22:01:33 2025 GMT
Not After : Jun 29 22:01:33 2025 GMT
Subject: CN=e09f3db717dbfbc34225bae10041faf11c1f7c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:cb:b3:e2:72:49:23:5f:d9:90:96:b0:84:
cc:1a:94:c5:93:28:80:0d:90:38:e2:47:6e:95:a8:
77:23:ae:18:1f:5e:d1:ac:21:44:6a:94:b8:1f:aa:
90:2e:55:10:1b:ec:7a:a9:d3:90:bc:c1:99:e3:eb:
3e:3c:cd:30:e1:a4:9a:5a:19:30:d9:71:69:29:da:
c5:bf:48:bd:4a:10:6c:b8:71:3e:13:9d:e5:fa:4c:
e7:62:bc:1e:87:2b:43:5b:48:94:13:b7:c2:8e:b7:
02:19:d8:68:98:4e:ec:88:dc:e8:72:88:38:7c:b5:
f7:81:f0:38:da:c3:d8:59:e0:98:30:c6:38:15:1e:
96:96:3c:bb:71:a4:05:82:50:aa:6f:d2:41:25:d6:
ac:b5:ae:c9:77:e3:18:74:8f:15:9f:50:e1:72:5b:
d7:88:6e:94:5f:2a:26:46:41:09:00:09:e6:21:2c:
50:58:ef:1f:41:77:56:1c:9b:92:25:90:aa:bb:a7:
a0:59:42:ca:46:f1:34:47:25:c5:2e:51:54:3f:07:
1c:d2:ab:f4:2c:22:99:84:4e:0b:f5:e2:33:f2:34:
43:92:5a:e8:4f:56:7b:27:73:80:af:21:41:a1:31:
d6:65:81:5a:59:ee:51:0c:8a:85:f1:b8:6e:4a:4d:
7b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9F:3D:B7:17:DB:FB:C3:42:25:BA:E1:00:41:FA:F1:1C:1F:7C:09
X509v3 Authority Key Identifier:
keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:80:e1:74:ff:ae:26:34:d6:41:1d:a4:c1:7c:b1:27:82:49:
5f:0e:3d:77:55:5b:47:69:e2:d1:6b:48:aa:7f:98:4b:36:5a:
13:76:47:58:b5:f6:f3:4f:03:95:86:57:d8:75:43:bd:b0:b3:
cd:ce:3e:93:2a:9b:c1:16:21:a8:91:05:aa:ba:45:60:e4:2d:
1c:63:cc:a3:a2:bf:dc:b2:bd:0b:71:6b:68:34:96:02:ac:28:
ae:4f:ca:7a:55:b6:e5:87:4d:8b:53:5a:fb:34:c2:5e:32:00:
2a:3c:38:b1:07:97:10:49:cc:60:8a:d6:93:92:79:eb:7b:77:
5d:41:6e:af:c1:95:93:0f:31:f3:cf:3c:19:ba:09:25:48:50:
1a:0b:1c:76:85:ea:5a:ab:6e:5e:ad:64:3c:9e:17:f4:1c:2a:
71:10:32:af:6c:4c:8b:9d:6c:6d:58:2e:dc:e7:dc:82:0a:2e:
63:32:21:f2:55:ac:73:74:22:0d:a7:1d:63:66:8c:47:fe:e8:
74:8a:6b:e5:bd:19:b1:9a:3a:3e:98:66:7b:d4:cd:9b:82:ef:
7b:b1:f1:7d:28:72:e3:b6:ff:b7:dd:58:61:a9:47:82:ae:d4:
3a:c4:43:57:a0:52:8e:2a:a6:7f:80:e4:f2:19:0c:a2:09:50:
89:0c:07:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:22 2025 by rpki-client