
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
File: Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft (raw, json)
Hash identifier: LPZ/U5AMhaw8W01hheBUMq7psRYSyyrYv61/MOGSvJQ=
Subject key identifier: 2C:BA:DF:3B:AF:8F:00:9B:D8:47:EB:0A:9A:A4:A5:B6:61:DF:D6:13
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 019A01B61739DC55AC784E355F80DF7EB8F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
Manifest number: 0A35
Signing time: Mon 20 Oct 2025 13:01:41 +0000
Manifest this update: Mon 20 Oct 2025 13:01:41 +0000
Manifest next update: Tue 21 Oct 2025 13:01:41 +0000
Files and hashes: 1: 9LxbGWcyNt248nMDeMOo4a0XEpw.roa (hash: DwyAZVpidYTDU1EpifmtR3C3ZW/mICJ9/iyGeF329lI=)
2: Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl (hash: 8hV+/kxQkRMDvwTUzx5IEsxh17IewHolHsltgNUPGXM=)
3: p797xYF79ghmDwX_B_VOi9b9mxU.roa (hash: e+IK2FyU17ZAcWL5rbzdLFhxA19UKsEovIWWQwVtq/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:17:39:dc:55:ac:78:4e:35:5f:80:df:7e:b8:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Oct 20 13:01:41 2025 GMT
Not After : Oct 21 13:01:41 2025 GMT
Subject: CN=2cbadf3baf8f009bd847eb0a9aa4a5b661dfd613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:b4:f3:cf:5f:fb:10:2c:55:ec:83:55:7e:
02:4f:0f:31:1f:cb:5a:c5:8e:a8:0c:b4:f4:69:5e:
cb:47:a8:69:4e:c1:42:ba:da:f3:68:1a:20:a7:ba:
fb:b5:65:37:c2:8e:2d:7f:67:6e:b4:00:e7:16:d5:
e2:43:c2:6b:b5:81:98:75:a8:33:f3:7c:a4:8a:ea:
61:ba:61:98:bd:24:c2:41:c2:31:7d:07:84:5c:80:
31:65:c3:95:18:a8:81:12:ce:d2:04:fa:98:8b:d1:
3e:14:93:af:ed:94:8c:c7:a4:0e:93:f2:6d:21:2a:
e1:03:10:7a:6a:b7:37:8f:b2:24:3b:07:18:c7:b6:
12:3e:32:94:ad:f6:88:44:c6:4f:72:48:23:4f:60:
a4:87:be:2b:c8:a6:32:ff:a6:db:8d:13:8f:94:e2:
ac:7d:25:b4:b7:75:38:d9:3a:47:dd:ba:b8:b2:1b:
6b:a2:af:2f:e4:85:80:8e:60:f4:e2:90:e2:b0:dd:
c5:82:9d:ed:9b:cd:10:84:25:33:dd:8d:c3:3e:08:
5d:14:d7:44:03:41:03:ad:c8:86:04:36:bc:a3:b6:
d6:6a:80:ab:ee:6b:5f:b7:39:ac:f2:4b:f6:dd:bb:
68:44:34:6f:cc:a5:fd:1f:9e:a4:f0:0e:8c:6c:fb:
3d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BA:DF:3B:AF:8F:00:9B:D8:47:EB:0A:9A:A4:A5:B6:61:DF:D6:13
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c2:3d:ed:3e:93:fc:21:f3:c4:08:1e:27:ab:5d:00:2e:40:
af:70:34:98:84:61:c9:f8:b0:44:f8:4a:a6:b8:67:14:bb:cb:
97:cd:0a:2e:d7:2b:25:83:ef:da:63:48:75:2f:d5:71:ac:08:
7b:10:af:03:d7:e6:23:86:32:b1:ba:a0:2d:be:06:cc:cb:25:
a0:00:a8:9d:64:9f:05:4a:a5:86:60:72:22:5a:2f:3d:a4:d1:
f9:44:a0:49:0c:b8:79:0b:a9:c9:e5:39:14:1d:ee:67:58:b4:
1c:11:53:71:87:44:d6:dd:a7:83:37:4b:05:2a:6a:c8:f3:e2:
94:97:2e:24:64:59:02:eb:dc:b7:c5:13:aa:b3:11:25:08:23:
af:cd:6a:3c:19:32:79:1a:a9:58:89:03:4d:0d:4f:fa:ae:cd:
7d:6c:51:14:f2:7b:e6:49:80:34:94:bb:c9:d2:19:59:3a:ac:
2f:a3:8f:1b:62:4c:29:50:ce:c0:91:2e:b5:fd:3a:de:e9:b6:
15:e5:eb:3e:b8:51:28:68:94:70:45:22:19:71:45:9c:d5:8b:
dc:ab:a1:0c:b0:3d:8f:9c:bc:55:63:7c:98:c6:b4:a7:90:69:
cd:dd:db:b0:c9:62:cc:54:73:82:cf:20:76:89:bf:ba:3d:83:
7c:69:66:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:21:48 2025 by rpki-client