Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: 5gv4lweYH0uauvqb9sAQ38VTysY/Bqn7JRGHPqq4amU=
Subject key identifier: 76:D5:F2:90:F3:D8:DA:CF:1F:CF:AA:4B:DA:DB:BE:9B:F1:6A:37:82
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 01977B2FDAAEC2473FF68B92FF2A7802B7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 144A
Signing time: Tue 17 Jun 2025 00:00:23 +0000
Manifest this update: Tue 17 Jun 2025 00:00:23 +0000
Manifest next update: Wed 18 Jun 2025 00:00:23 +0000
Files and hashes: 1: M5Ss8dPr3mgOSEzIF3jmA6pApv4.roa (hash: QeN0UB5jBHieDVxeoJHOIWGc+jidnXLUOykEdgdKgwA=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: zXIGLNMclqQGPJPyrTp/9lqoxmNCXBJ0vrhbcILolz0=)
3: jhn2n6Zhnk2eAJzC6HzMRpbzBDY.roa (hash: JGVKd7N6rxJHSCarnyD9lhtED3Ke3uBCDSZH7wuHINc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:2f:da:ae:c2:47:3f:f6:8b:92:ff:2a:78:02:b7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Jun 17 00:00:23 2025 GMT
Not After : Jun 18 00:00:23 2025 GMT
Subject: CN=76d5f290f3d8dacf1fcfaa4bdadbbe9bf16a3782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a9:95:21:3b:69:6a:c3:fd:fc:12:ed:ba:ee:
23:32:5b:74:72:8f:6b:f2:31:58:71:8d:3d:59:97:
9f:84:d1:5f:3b:25:58:b0:1d:08:5a:62:f1:a1:df:
0e:7c:d9:b1:b0:9e:2c:19:a2:68:07:46:46:12:09:
3b:d0:3e:9f:ea:d6:d3:e5:63:04:a4:88:dc:40:42:
5c:87:1a:07:12:29:00:c7:3a:af:86:07:f1:bb:06:
55:b6:75:11:65:de:cd:01:83:4d:04:3a:5f:e5:35:
04:67:34:17:24:40:28:e3:7d:34:1d:3e:9f:58:4c:
7d:08:56:01:41:88:44:d0:ca:8e:17:da:06:05:a4:
dc:85:1e:cf:17:d7:73:d0:85:b6:a2:5f:38:db:e8:
0d:21:33:e7:b1:63:4a:8a:e4:b1:53:fa:93:51:d2:
31:d5:e7:e7:d6:cd:4e:19:50:db:aa:d4:fc:b6:52:
64:23:8d:86:ee:c4:c7:a1:09:9d:8e:e7:16:87:f5:
a8:76:04:a2:73:ec:82:55:2d:a1:39:b4:05:c5:ac:
57:fd:d9:49:a6:72:20:cb:e1:26:58:3d:39:1c:46:
f0:c1:33:74:b5:b8:e8:44:17:12:82:49:7d:19:fc:
0d:c8:f9:78:9f:06:e3:d1:8d:ed:83:55:2f:41:64:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D5:F2:90:F3:D8:DA:CF:1F:CF:AA:4B:DA:DB:BE:9B:F1:6A:37:82
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:1a:2f:b6:64:1a:3f:15:c6:48:b3:c2:83:ce:56:aa:9d:47:
36:d2:96:83:48:4e:b3:a8:06:d6:12:ad:8b:cf:60:fd:28:3c:
6d:5f:c6:26:77:e6:39:c8:6c:70:78:bf:48:5d:ee:f2:81:16:
51:79:0d:01:26:e6:75:d8:c6:8d:ad:ab:70:7a:4d:4b:a7:fd:
c0:28:12:1b:90:20:ac:88:79:e7:27:32:74:be:50:ee:ea:f4:
26:b7:67:c4:80:01:5f:52:ba:2b:5b:07:f1:bd:6b:d7:64:60:
ea:21:55:0d:45:01:95:7d:3b:5e:04:1b:dc:21:3a:e3:50:0f:
7f:47:00:b1:32:8f:d0:3f:5e:98:3c:65:89:7e:fd:39:90:df:
bb:55:97:e4:97:e2:b8:78:5b:a5:2c:38:c8:c5:ad:87:30:4a:
2d:f7:e9:e9:7f:95:3f:5e:62:17:d3:65:ac:48:ab:5e:61:36:
08:b5:5b:07:bd:48:a1:88:d6:15:3a:a5:47:a8:7d:9f:ea:58:
35:9d:42:0c:ed:55:67:f5:e8:6a:b8:6f:f9:c3:07:f8:e5:d9:
c2:4b:1a:e7:88:34:36:aa:20:6f:e6:2d:4d:7d:d7:93:bf:2d:
23:a1:da:d1:22:95:07:3c:e1:d1:b5:5d:d5:b8:07:3b:92:e9:
d7:70:af:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:13:08 2025 by rpki-client