Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
File: Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft (raw, json)
Hash identifier: AyTmaTFeN3Jpyy086piciH+YqupQd7WbiRRdTNJwXyI=
Subject key identifier: 64:A9:1E:8D:9B:97:4F:DA:3E:E5:56:41:6B:3F:D9:AB:84:7B:00:80
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 019A03A4A53A33D9B2EB9380CF5869956532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
Manifest number: 0A36
Signing time: Mon 20 Oct 2025 22:01:53 +0000
Manifest this update: Mon 20 Oct 2025 22:01:53 +0000
Manifest next update: Tue 21 Oct 2025 22:01:53 +0000
Files and hashes: 1: 9LxbGWcyNt248nMDeMOo4a0XEpw.roa (hash: DwyAZVpidYTDU1EpifmtR3C3ZW/mICJ9/iyGeF329lI=)
2: Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl (hash: C+xDOIrymplj0aiVyRQn++9IRYOrbBhe/1hhY/cc774=)
3: p797xYF79ghmDwX_B_VOi9b9mxU.roa (hash: e+IK2FyU17ZAcWL5rbzdLFhxA19UKsEovIWWQwVtq/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:a5:3a:33:d9:b2:eb:93:80:cf:58:69:95:65:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Oct 20 22:01:53 2025 GMT
Not After : Oct 21 22:01:53 2025 GMT
Subject: CN=64a91e8d9b974fda3ee556416b3fd9ab847b0080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1c:9a:16:8c:a2:43:86:1c:0b:63:63:9f:cc:
e0:c6:28:5f:2f:b8:f9:4a:85:e7:a7:d8:2d:c9:3f:
72:3e:40:a8:55:df:27:0c:43:c2:66:1c:4a:16:de:
33:ba:6d:cc:4c:f3:a7:92:63:8c:55:11:46:f0:e2:
f1:34:e3:8b:b8:7e:e6:d7:03:a0:21:98:0a:cc:01:
ab:31:0d:fd:8d:96:ed:60:39:71:48:b3:f4:64:93:
37:40:af:94:5b:67:02:85:4d:c0:27:4a:1e:14:5a:
72:6e:95:34:f7:fd:bd:61:b8:98:d5:1c:a2:9c:c5:
98:e1:67:c5:78:6f:20:df:04:74:e1:32:e6:7b:96:
b8:d0:fe:5b:1a:0e:03:5b:90:ac:63:0c:1d:ca:08:
2b:d9:e5:5d:98:e9:a2:70:36:ee:d9:4b:3a:ee:75:
0c:a5:d6:f2:b6:98:99:da:91:3d:11:36:84:8b:b0:
9f:ea:62:03:a8:44:3a:f1:70:91:f3:19:9a:b7:7a:
1b:ec:8c:67:32:bd:1f:76:cf:e1:31:7a:2a:97:4b:
0d:77:f6:ad:a3:cb:7a:b5:9b:33:1d:90:ba:ee:c0:
69:12:e4:08:ce:31:ac:af:50:02:f1:2c:5c:d1:0a:
3b:9d:00:b2:81:83:61:4a:3b:04:9f:b7:5a:1b:1f:
d8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A9:1E:8D:9B:97:4F:DA:3E:E5:56:41:6B:3F:D9:AB:84:7B:00:80
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:07:30:4a:a6:87:95:9f:81:da:73:92:5a:07:87:74:b2:74:
d1:83:43:ba:57:11:79:77:1d:f9:32:ca:35:5c:da:35:24:0b:
9a:e8:96:9e:f4:09:99:e0:e3:8d:1e:3c:bc:73:c4:aa:86:f3:
d7:06:08:3a:f8:42:95:3f:4f:bb:a6:3c:db:56:e5:61:8d:c4:
43:90:01:51:1a:73:77:d4:f5:6f:75:15:17:e4:a6:de:ea:b9:
af:87:a8:84:81:f0:bb:c8:58:d8:c4:4a:01:b2:50:c0:21:3e:
ca:fa:70:49:75:ae:59:bc:db:f3:54:54:78:64:9b:1e:32:e3:
10:f9:89:94:3a:71:39:f7:37:a4:39:6c:71:8d:1c:82:d3:f1:
31:48:e3:6a:64:93:d6:53:44:78:d8:8a:d2:ed:35:87:43:73:
ec:06:bf:e8:eb:82:eb:88:92:b7:1c:6e:d1:34:9b:85:99:b4:
a0:c9:0b:20:81:44:87:46:d5:1c:a6:0f:a6:ac:13:c8:c5:38:
e2:e6:78:17:49:55:65:b9:c6:83:d9:e2:72:65:ca:ba:8c:6f:
55:ee:92:f7:24:d0:03:89:4f:25:04:81:13:79:14:c7:98:50:
8f:a0:79:b9:34:3d:b5:f7:e6:60:0e:7c:b2:07:c5:9f:68:63:
22:39:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:23:06 2025 by rpki-client