Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: x8se4AL+KkJP7W61PO9LE0p17Yu44IKrsZGtdaW4VG4=
Subject key identifier: D8:94:1F:E7:A2:6E:44:6A:7B:C0:6F:DA:26:DB:F1:08:B6:2E:6B:4B
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 019A4F629C397C552BBD8612073F4451AC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 15:00:53 +0000
Manifest this update: Tue 04 Nov 2025 15:00:53 +0000
Manifest next update: Wed 05 Nov 2025 15:00:53 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: AOvbJ83DxVWAaNf3w3KrxNJ4DzvV2KPs9O5jxUhg92A=)
2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=)
3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:9c:39:7c:55:2b:bd:86:12:07:3f:44:51:ac:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Nov 4 15:00:53 2025 GMT
Not After : Nov 5 15:00:53 2025 GMT
Subject: CN=d8941fe7a26e446a7bc06fda26dbf108b62e6b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:ca:ba:24:a5:0b:32:14:26:00:4c:2f:c5:
e4:c2:6c:a6:af:68:8c:3a:39:b7:d9:a6:c7:93:bc:
61:73:30:c1:af:f2:10:5c:6a:37:c0:e6:77:4c:30:
b3:9a:93:d6:ce:0a:9f:6d:40:08:a8:66:c4:84:d0:
1a:3c:35:b5:ae:53:ed:bc:40:af:43:1d:9e:04:15:
ba:ab:be:45:27:44:43:8e:50:e2:1a:58:d1:13:d4:
60:21:cc:5f:c4:6a:22:97:3b:f4:df:dd:48:58:a8:
13:ef:e6:c5:8e:87:40:c6:40:8e:82:bc:b4:54:52:
8a:4b:02:34:e0:96:6b:44:6b:b8:71:4b:15:9a:c7:
b5:0e:a4:ad:7c:fe:99:b0:af:3c:19:03:cf:d5:5d:
b8:a0:ce:35:bc:e4:8c:2b:f0:ba:ff:59:3a:e1:f8:
f0:dc:6a:93:1e:9b:07:51:7c:76:2e:16:ab:55:bd:
1d:5e:85:d9:9a:01:ee:e4:52:e2:f5:81:a0:c9:19:
25:75:7f:9d:fc:70:90:55:f5:0d:1e:fe:8d:9d:f7:
54:c4:2e:bc:07:11:04:06:02:f1:5c:eb:03:ef:50:
45:48:b2:cc:11:aa:71:8a:6d:ce:79:bf:de:c1:35:
6d:e4:67:7e:f7:ff:74:fb:b4:85:14:55:57:bc:38:
87:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:94:1F:E7:A2:6E:44:6A:7B:C0:6F:DA:26:DB:F1:08:B6:2E:6B:4B
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e0:2a:b7:f3:6f:d9:bc:2f:f8:38:1f:18:e8:0a:13:32:20:
39:4c:b3:07:bd:81:74:43:4e:cd:15:b0:47:ce:71:87:74:69:
1e:3f:f7:9f:f2:f9:fb:7d:55:87:0a:37:36:33:f6:08:d6:15:
91:ff:38:e0:12:95:3f:ba:39:6c:0d:46:7b:04:8e:bb:e1:ed:
16:c1:14:f2:54:ca:5a:37:0e:17:31:a8:c4:48:61:38:04:e4:
1a:07:fe:9e:a5:d2:fc:86:ef:12:2a:52:53:9d:21:e0:ac:4b:
1b:21:4a:46:3d:df:cb:91:48:b1:c1:fe:6b:d7:be:b5:19:02:
2c:e5:79:b2:b3:e7:0c:b3:2b:9c:2e:d6:6d:cd:9e:9e:3b:26:
68:9d:bf:98:6a:08:d4:8b:c1:56:55:b2:d8:2c:a1:2c:42:39:
a4:17:b8:a7:4f:fc:7b:2c:17:3e:5f:a8:54:be:08:80:6e:34:
48:2d:76:8f:1b:16:13:54:58:ff:7f:c7:c9:2f:b4:70:fa:3f:
6f:4f:92:d2:96:ae:19:3f:e1:a2:30:ee:ad:67:c6:2b:d2:42:
81:67:08:35:8b:1e:01:16:17:c3:42:01:f5:95:57:86:61:c7:
99:8e:0d:d2:27:11:d1:3b:7e:72:00:23:24:56:de:81:17:0d:
c8:dc:83:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:49 2025 by rpki-client