Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
File: VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft (raw, json)
Hash identifier: 3Op/n0ULiemZ/tpbYDpjoT/h5t+9kYvm8SVc9pOJo30=
Subject key identifier: F2:07:47:37:B4:AE:B3:26:CA:0E:87:94:7C:AE:3C:37:DC:D8:F1:98
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 019A4D73C5F50C2CC0BD16A79F666B460396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
Manifest number: 171D
Signing time: Tue 04 Nov 2025 06:00:24 +0000
Manifest this update: Tue 04 Nov 2025 06:00:24 +0000
Manifest next update: Wed 05 Nov 2025 06:00:24 +0000
Files and hashes: 1: 8gXUkKQw8arTOvKo91QrTIhhgLM.roa (hash: 3FKGGmL5ZFlUUkm/8Tty8cDyN60SEeEzpNytHf+rPGY=)
2: HSdlh2QFEpGM_46Ow4vGDv79v_E.roa (hash: 1ypzUErprDZDRYPQT+U1/uxj8msJvU+nPJ/mnvBhz8M=)
3: VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl (hash: 00mqmGd8pwBCpzUewJTS03h8g+dTuuEk7hpoHvaNo+I=)
4: bOWi-Km4EdNL2RWwyu6fkO8cIac.roa (hash: bBX5W0vrQkhD//eKPSX/Grh0TmEf+XdqKDRiX0ii7jA=)
5: elIaIJuXbpWatRWeZpRoJLAB6RM.roa (hash: QMxGtNIR9eV06fnxcnLZU8NRPRckOjRHuOBGgCXj72Q=)
6: k9_h63CkyTFP9dp8XuNDvCxNzms.roa (hash: Im4uKqma1iWFJ1wc2qRnkE5lMnQ4ol3CcsuFcdhwEn0=)
7: qmXSBo6ZQHf5SBcPKJaq60n1DpQ.roa (hash: jnR4myiAxP2Qb03Ouublrmfx01PiIWyUlSrg/eITJIY=)
8: y2v6-6CCLmifQ83qZdjogrFre-M.roa (hash: oYIyUisFgSWQrEZe7E7GOqu26OhZjK1CM4VjnsKMVLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:c5:f5:0c:2c:c0:bd:16:a7:9f:66:6b:46:03:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Nov 4 06:00:24 2025 GMT
Not After : Nov 5 06:00:24 2025 GMT
Subject: CN=f2074737b4aeb326ca0e87947cae3c37dcd8f198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:27:71:b3:22:92:02:e3:ed:e5:a4:4b:b3:ab:
9a:4d:5c:0f:a6:65:e7:44:b0:c6:62:52:2f:98:1e:
30:5a:c3:ca:00:10:99:b7:8e:30:36:3a:66:15:73:
6c:2c:44:7c:20:4b:1a:52:ad:46:25:a9:04:d0:02:
4f:5c:22:fe:c0:5b:46:16:61:4b:d1:76:ee:04:99:
19:94:5a:91:f4:03:ad:80:26:c8:d6:dc:01:57:44:
14:1d:4b:4c:0e:97:9c:c5:77:34:8e:4f:15:34:bb:
e6:7b:35:93:b8:a0:43:87:b6:07:5a:db:23:09:d7:
0e:da:ce:ff:bf:df:cd:72:61:b0:84:f9:b4:c5:2b:
24:37:ce:18:32:2f:20:50:c2:d3:5c:ec:54:c6:e2:
2e:01:c1:73:0a:d5:cc:1a:19:6e:96:05:e8:86:e6:
ec:98:bd:d4:fc:31:b1:d2:8a:33:e2:71:3b:01:0d:
8f:aa:0f:36:48:95:7f:a4:3c:06:d1:a3:34:1f:73:
f4:a1:62:49:39:95:9c:ab:f2:75:21:15:85:67:ea:
5f:d5:cc:a1:d8:7c:6b:18:ce:c2:78:0d:e6:b3:2d:
ff:85:ea:8c:67:03:80:36:f3:68:2b:fa:bf:d6:42:
c0:a6:fe:01:ed:a3:d6:00:82:98:4f:6d:a6:fe:c0:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:07:47:37:B4:AE:B3:26:CA:0E:87:94:7C:AE:3C:37:DC:D8:F1:98
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:43:39:04:29:cd:63:45:c5:83:83:e7:d8:a8:1b:0d:e3:24:
fd:0a:ec:bb:fe:f4:e2:d0:fd:f0:b6:aa:6e:26:d0:4f:b1:f2:
99:d1:ca:2b:27:12:a1:74:d1:ce:00:34:e7:e8:35:a1:73:f8:
97:7c:ab:0f:97:0f:1f:dc:7a:49:86:dc:ef:ea:b8:fa:6c:79:
5b:29:44:19:79:28:b5:2f:bf:0f:29:ed:92:ee:2b:71:1b:fa:
0b:33:c4:e4:9a:21:c0:60:54:92:06:fd:1a:b2:76:24:74:10:
ab:1b:a3:d3:4d:fb:c7:68:a8:fc:20:1c:a7:65:2b:f7:d4:03:
5f:b0:60:21:c1:ea:f1:51:52:42:b1:12:31:57:ce:06:81:e8:
36:62:86:f4:c8:c7:43:9c:86:82:b5:56:7f:2a:51:1a:cd:9d:
3c:fb:4a:e9:34:3a:6f:4f:2d:a1:df:8a:88:57:4c:94:8d:7e:
97:50:3e:8b:7c:4a:0b:52:b5:0d:87:77:98:78:92:16:34:f9:
88:12:ee:56:bc:2d:4f:52:39:0f:23:dc:92:19:8f:f8:c2:4f:
ed:df:bc:c8:fe:73:e1:d9:86:22:9e:b7:6f:35:e6:8f:1e:94:
38:22:bb:fc:58:3b:07:5d:f7:e3:56:98:9e:fa:9e:1f:5a:8b:
b0:2c:08:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:19 2025 by rpki-client