Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
File: Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft (raw, json)
Hash identifier: oK1LY5JjkzXKX3Wh1of/zaHI5VR3CS7aSXjdv8QwhPs=
Subject key identifier: 5B:88:D4:97:02:21:17:2B:FC:25:CC:ED:97:9B:F1:D2:7A:0A:4B:53
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 019A52D270539A1EB565C393E6842653B141
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
Manifest number: 0A5F
Signing time: Wed 05 Nov 2025 07:01:54 +0000
Manifest this update: Wed 05 Nov 2025 07:01:54 +0000
Manifest next update: Thu 06 Nov 2025 07:01:54 +0000
Files and hashes: 1: 9LxbGWcyNt248nMDeMOo4a0XEpw.roa (hash: DwyAZVpidYTDU1EpifmtR3C3ZW/mICJ9/iyGeF329lI=)
2: Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl (hash: EOm+S/oZeItZWYJTF6JPi6lZ3+y2vr1vTpO3Tfg6QBs=)
3: p797xYF79ghmDwX_B_VOi9b9mxU.roa (hash: e+IK2FyU17ZAcWL5rbzdLFhxA19UKsEovIWWQwVtq/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:70:53:9a:1e:b5:65:c3:93:e6:84:26:53:b1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Nov 5 07:01:54 2025 GMT
Not After : Nov 6 07:01:54 2025 GMT
Subject: CN=5b88d4970221172bfc25cced979bf1d27a0a4b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6f:c1:be:1d:23:41:aa:64:79:e5:78:e1:24:
60:ae:8e:d1:47:6f:8f:f3:df:98:1c:00:de:a6:f4:
55:09:ff:0c:25:21:69:3f:a2:f5:c1:3b:b8:30:e7:
a2:df:5e:88:f3:90:78:38:2f:96:e8:c9:cf:64:d1:
9d:26:1a:1b:82:c9:c0:c9:be:c1:97:1b:1a:8c:eb:
77:3c:c3:77:52:30:ac:69:f2:48:65:22:62:3c:72:
ab:45:be:b5:71:1e:a5:b2:6a:36:cb:b1:54:e4:a7:
8c:da:79:e1:a3:4e:59:c6:79:05:30:08:d9:ce:05:
46:62:1b:97:f6:05:13:ea:01:6b:54:2c:16:32:d9:
a0:e4:3c:f0:b1:e4:b7:0e:cc:c4:0b:ba:4f:00:e6:
09:3b:10:40:03:3e:d6:2e:02:c0:42:c7:fe:84:a8:
35:62:d3:4e:c2:e7:ab:8c:83:92:ed:b7:b9:d0:3b:
49:69:cc:25:d8:72:49:2d:5c:55:1f:ac:7f:a3:bb:
cb:39:dd:d8:9c:db:b7:89:bd:86:01:d1:74:e1:a8:
65:9f:f4:19:5a:a5:58:7f:8e:a0:90:66:4a:2b:30:
95:33:c2:2e:87:c5:65:96:e9:88:b7:cb:14:e0:bc:
7b:d6:3d:f4:4d:83:0f:5f:06:11:dc:27:3d:73:42:
15:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:88:D4:97:02:21:17:2B:FC:25:CC:ED:97:9B:F1:D2:7A:0A:4B:53
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:8c:e0:d1:8b:e8:45:22:e0:f1:34:19:b7:93:28:65:a6:ef:
72:68:72:fe:e3:d3:1f:31:7e:a4:65:7f:69:69:7a:be:22:3d:
59:55:ba:a4:e5:20:06:66:d1:c5:6f:96:92:b2:04:37:53:4e:
c8:ff:97:f5:8e:6f:91:1f:09:b7:1d:49:16:aa:5d:f8:c4:35:
69:26:64:33:1b:c0:a4:63:b0:5b:65:a6:04:80:7e:0f:d4:1c:
a6:6b:0d:ac:28:3d:2a:09:58:72:67:f9:0a:03:55:df:8b:99:
c4:93:e9:cb:d5:40:4c:82:71:49:6b:b8:d3:1f:ef:a3:af:3b:
2d:1e:ec:b0:6d:3b:bc:49:54:9f:82:fd:42:5a:f3:ca:55:1c:
23:a3:16:2a:df:f8:1d:0e:20:2a:33:0e:89:5e:de:ed:c5:a1:
29:fe:0b:f6:64:99:24:21:76:95:f0:9d:a2:cf:0d:11:9e:ec:
42:1a:a7:8a:d0:63:48:f1:09:ec:08:c1:be:e4:ce:19:d4:bf:
e9:8c:d2:da:c0:cb:26:f9:73:2a:8d:e8:a7:18:88:5c:2e:87:
b9:a6:7f:a5:00:b3:96:a4:b2:56:a0:e6:94:62:37:32:ed:a7:
f6:92:ba:07:68:93:aa:2b:bf:3e:35:da:f9:ba:16:a3:76:7c:
ce:e7:8a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:46:44 2025 by rpki-client