Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: kWK9WanCdvlH627vd9a6Gu5Hse8XzfWzdGdVpQaFNnw=
Subject key identifier: AB:A9:B7:B3:E1:EA:28:08:95:DD:7B:F5:3A:8F:C3:17:84:B7:6C:A5
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 0199FC590E97E84DC58099EEDC3357921C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 12:01:58 +0000
Manifest this update: Sun 19 Oct 2025 12:01:58 +0000
Manifest next update: Mon 20 Oct 2025 12:01:58 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: UOYUpncCbwRkXVm+nrksMgnMtz6qgEYLIjmAYFeMSO8=)
2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=)
3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0e:97:e8:4d:c5:80:99:ee:dc:33:57:92:1c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Oct 19 12:01:58 2025 GMT
Not After : Oct 20 12:01:58 2025 GMT
Subject: CN=aba9b7b3e1ea280895dd7bf53a8fc31784b76ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:b1:5b:85:69:3a:5c:c4:47:ef:b4:64:a4:
12:ba:19:16:14:b1:f0:c3:49:95:31:f4:15:6e:2d:
37:e7:c3:c2:43:82:a3:e8:1f:71:95:1f:ed:87:77:
4f:7d:70:b0:7b:7b:1b:b1:49:19:a3:bd:92:dd:6c:
85:1d:e5:dd:4b:d5:3b:57:f5:3e:27:f8:58:70:5c:
ad:e9:de:0d:87:1a:8b:8b:a3:95:61:41:b0:8f:08:
40:89:a6:95:c6:6c:cd:c8:bf:ef:49:cf:73:23:a4:
25:5b:37:ea:57:48:a1:11:47:a4:c0:7e:b0:b9:ab:
26:b2:29:84:86:31:e9:f1:e0:fa:e6:76:13:37:b4:
b8:da:fe:d4:5b:49:e5:a0:db:c8:63:21:69:9e:c7:
3b:5b:70:a2:53:0a:9d:e7:89:75:89:30:55:d4:46:
51:4b:65:e2:2a:1b:76:ba:e6:20:6f:c2:f6:58:12:
ee:3f:61:31:bf:04:a7:cc:f9:a2:4d:6b:13:78:20:
39:81:a5:2d:76:fc:dc:ef:cc:9c:9e:10:bc:5a:fd:
10:54:5d:0f:d9:0d:c2:2c:d8:f7:c2:c9:81:5e:26:
ec:e6:d3:43:71:a6:cc:a2:6f:92:0b:66:56:8d:9d:
08:97:e9:ce:11:e7:3d:c7:dc:6d:c1:f5:35:7e:ee:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A9:B7:B3:E1:EA:28:08:95:DD:7B:F5:3A:8F:C3:17:84:B7:6C:A5
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:73:5b:cc:83:71:fb:39:08:f1:b8:cc:4b:13:74:61:e7:07:
65:d9:b7:db:be:0a:6d:a0:93:3a:4f:95:88:3c:7e:99:e4:b8:
25:91:60:ef:90:3a:60:6d:e0:a1:d5:ed:ce:49:ff:79:c3:41:
1b:36:8d:99:a6:c0:fb:58:1b:95:a2:f4:86:3f:e7:c6:cc:0f:
cd:4c:87:f4:68:55:8b:c1:b5:0f:04:11:f7:59:a8:2a:92:6d:
ae:c4:0f:03:bc:e6:68:b9:a3:97:a0:05:fd:1e:b3:f7:bf:52:
d2:95:12:77:ce:78:0f:57:aa:5d:12:eb:95:a8:33:8f:bc:f0:
97:a6:04:5d:85:aa:10:fa:dc:76:52:7d:69:d6:a6:ec:61:58:
83:1b:91:1b:92:6e:a1:5e:d3:4b:9c:7e:5c:88:b4:88:b8:ca:
b5:c8:04:e3:39:a1:07:42:ef:4c:59:fa:9f:a1:0e:8d:c9:94:
4f:9e:de:03:3e:d7:af:a2:3a:36:38:65:41:be:86:4f:28:7f:
bc:9c:12:bc:84:05:57:51:1c:d5:e5:e6:4b:0f:8a:a9:d6:b9:
cf:d1:f3:cd:5b:7d:2c:b6:33:55:c7:e3:cc:c3:03:ec:75:9e:
4b:36:20:c7:27:1b:83:9e:ce:a3:e0:f5:0c:dc:3d:01:1d:03:
20:e9:73:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:20 2025 by rpki-client