Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
File: afKVoxCPXPHTJv_pv2EPvPGNct8.mft (raw, json)
Hash identifier: bPX+tsRiVQaQAZHfxX/V1hYGG9MuOMmbYclU6LrZ+XI=
Subject key identifier: 8A:23:1D:39:64:EC:1A:46:EA:E5:5C:E8:3E:30:8F:F9:3B:EC:72:70
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Certificate issuer: /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial: 019873E27A4037A8370D81EE8B8EC212D2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
Manifest number: 09A5
Signing time: Mon 04 Aug 2025 07:01:18 +0000
Manifest this update: Mon 04 Aug 2025 07:01:18 +0000
Manifest next update: Tue 05 Aug 2025 07:01:18 +0000
Files and hashes: 1: 2kKgjfyddVwBqBtbcmC591hhds0.roa (hash: J3PsfHURY5KO0r8jrXSygLDWI9PtPmq+khbJ0BwKbpo=)
2: afKVoxCPXPHTJv_pv2EPvPGNct8.crl (hash: 8EeO8wj6rdnTNeMFOmvXDWklzcMZ62pwGOFrxFg5Xkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:7a:40:37:a8:37:0d:81:ee:8b:8e:c2:12:d2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Validity
Not Before: Aug 4 07:01:18 2025 GMT
Not After : Aug 5 07:01:18 2025 GMT
Subject: CN=8a231d3964ec1a46eae55ce83e308ff93bec7270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:ad:34:37:42:9a:15:d0:74:06:fc:1f:c0:b1:
04:a3:1f:16:f8:ba:56:ba:74:c8:5b:a8:3c:98:de:
8a:99:17:3e:76:4e:f4:22:19:0a:15:20:7f:48:ca:
b9:77:e1:1d:11:d1:d5:4d:13:3d:39:7a:6d:f3:7c:
58:7a:ae:3b:e2:d7:ee:ca:84:1c:3d:72:c8:d2:f6:
fe:0c:87:a8:ee:c0:7e:2b:54:ce:cc:73:dd:83:e3:
bd:29:1d:f2:94:63:6f:aa:e8:9b:17:b8:75:25:bb:
65:6c:72:db:9b:ed:70:f2:de:3a:27:8c:5f:dc:0f:
df:6c:9b:c3:dc:6b:0d:0e:76:ff:a5:57:01:47:e2:
b1:4a:ad:04:db:48:76:da:59:c3:14:22:2d:98:36:
0f:b7:c8:39:59:5d:f5:b5:13:15:76:44:d3:b9:83:
ba:59:12:b9:70:73:37:49:45:62:f9:47:8c:61:5b:
a5:ab:43:d0:72:e0:42:13:8a:c1:84:45:d9:d9:14:
49:cd:86:ad:4a:f3:db:20:bf:6b:b6:34:fe:53:7a:
1f:96:71:af:fe:a9:60:fe:50:f3:78:8c:9d:81:7f:
f8:ed:eb:36:37:b0:6a:31:1a:1a:27:8d:4e:c4:bb:
c2:b1:e4:09:e4:c3:28:5e:da:04:c7:38:b5:fa:c1:
9b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:23:1D:39:64:EC:1A:46:EA:E5:5C:E8:3E:30:8F:F9:3B:EC:72:70
X509v3 Authority Key Identifier:
keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:22:52:19:fd:ee:e1:41:9d:07:a3:20:b6:7a:77:e8:61:c8:
e2:d9:52:0a:90:85:60:66:c4:05:38:e1:a5:df:d3:f2:2a:90:
13:47:3d:35:75:e4:f5:43:1a:8f:0c:6d:d8:f4:74:e1:6f:14:
77:64:2b:c5:da:a0:9f:3a:e8:d5:84:78:ed:54:07:b5:ec:e8:
1a:16:5c:a3:80:41:cf:b0:34:76:b8:ef:01:47:ff:35:28:9d:
e0:d6:d6:d4:fd:6c:b5:3c:7d:00:38:a1:c3:26:33:60:b6:05:
69:ca:b3:5b:ff:d7:cc:e1:79:7c:22:7f:7f:ca:5e:b0:d2:28:
e0:8c:63:94:a5:d3:fe:88:c9:55:ec:6a:6d:55:d7:41:ed:ca:
fa:9b:48:a1:e6:c0:02:42:c5:74:02:2b:3c:9c:aa:86:a0:3a:
21:a8:de:74:31:a7:a7:8c:03:49:9d:51:68:a3:9d:69:1b:a9:
4f:fd:40:e5:bc:27:7f:50:21:7a:81:da:2b:48:43:46:46:b5:
96:00:3b:b7:b1:94:f5:17:39:bc:b7:f7:36:2f:48:57:f0:1f:
3c:f2:4e:ac:5f:09:89:5d:37:be:47:59:b5:c0:51:de:1e:12:
5f:d0:24:8c:cd:97:4a:fc:ed:43:bb:22:75:a3:48:c5:ca:da:
b0:87:34:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:41 2025 by rpki-client