Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: wmf7msUx+8/HpaJg1kMPpco21lYhdEm5+AVtiSAS7zQ=
Subject key identifier: ED:3C:5F:91:78:CB:E5:40:76:2A:B1:EE:B5:96:3D:96:A4:DD:32:E0
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 01988F592E5137589434EE4B44123CFA75E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 1628
Signing time: Sat 09 Aug 2025 15:00:43 +0000
Manifest this update: Sat 09 Aug 2025 15:00:43 +0000
Manifest next update: Sun 10 Aug 2025 15:00:43 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: pGh9nDqi8+j16VuTJgZl/C9vrjs9n7BIZmJpiu2cYrs=)
2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=)
3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:2e:51:37:58:94:34:ee:4b:44:12:3c:fa:75:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Aug 9 15:00:43 2025 GMT
Not After : Aug 10 15:00:43 2025 GMT
Subject: CN=ed3c5f9178cbe540762ab1eeb5963d96a4dd32e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:20:8a:fb:f8:60:8a:8b:d0:d9:c6:d1:7e:ca:
75:f8:e1:05:99:13:79:28:b0:84:18:74:4b:71:ec:
39:12:7c:7d:db:c3:cf:74:35:38:8c:c6:f7:43:8b:
f1:64:23:9c:19:d0:59:a4:ea:60:20:dc:a9:98:e5:
c9:b3:6a:96:6b:28:ef:4c:d0:58:0e:94:11:b8:59:
01:74:fa:57:c3:6f:8a:76:8b:b9:c6:09:55:a6:cb:
8c:ee:a7:ad:9b:f5:44:34:f2:7c:b7:b7:b2:95:e1:
2c:2e:c8:0d:e0:e8:4c:85:4d:6f:46:23:27:6d:5f:
a6:1c:2e:29:4b:a6:d8:8e:26:70:70:85:38:e4:c2:
03:3b:49:1e:86:62:a3:e7:be:cf:70:31:74:e0:27:
72:f0:64:06:77:59:b8:a7:d0:94:ab:8b:c9:07:f5:
b2:38:4d:b3:c3:aa:a2:9e:24:0d:04:2a:f6:a8:ba:
be:47:00:ba:14:0f:93:1a:a6:6c:91:fb:f7:1a:15:
2c:c8:f7:1e:cc:57:49:ba:f4:6e:04:b3:11:b9:1f:
67:2b:b9:fc:14:fd:d8:47:62:c1:63:61:d3:f8:8d:
28:93:a0:18:c2:11:7f:41:98:4e:c6:70:b1:83:ee:
de:05:00:76:22:84:01:61:b6:05:bd:07:65:a2:a1:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:5F:91:78:CB:E5:40:76:2A:B1:EE:B5:96:3D:96:A4:DD:32:E0
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:50:4c:d8:b8:a0:a2:1d:dd:f7:df:29:23:7b:5c:c8:2e:0a:
fd:36:2a:8b:25:37:9c:43:b7:f2:1f:b6:12:d5:50:55:1d:71:
52:5c:61:d2:ef:a7:40:26:44:8f:c8:c8:da:b5:a6:25:4a:e8:
42:95:11:21:bb:54:3a:3b:f4:cc:34:2f:1f:01:2c:be:b4:1f:
90:fb:f8:11:ac:68:27:92:ea:2a:bd:79:ba:4f:ff:5a:b3:0b:
6c:24:30:e6:52:50:bb:bd:d7:11:d3:bb:8d:3f:b1:f9:fb:95:
cc:22:11:7a:ea:89:02:df:e4:9f:12:6f:b9:be:9a:4d:55:02:
ab:81:8d:6a:f2:4c:18:dd:7c:42:82:39:72:f5:97:fd:a0:79:
c5:c4:01:60:ba:97:ad:49:e5:e9:4d:75:7f:a0:9b:b1:23:40:
54:ab:84:e6:01:e1:62:40:f8:96:2b:13:47:d3:5a:bc:c0:39:
dd:6b:6a:9a:2d:13:67:89:65:48:d6:2e:dc:f4:f9:56:b2:ed:
fb:c3:4e:b8:53:9c:3d:d6:47:7e:71:4e:80:db:22:e5:fc:8c:
b5:04:eb:a2:ae:88:ff:01:a0:93:c9:ed:a9:04:99:c8:13:89:
1b:0a:43:94:ae:ba:73:0a:cc:31:c8:3a:23:e3:b5:af:16:31:
46:b3:2a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:49 2025 by rpki-client