
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
File: voR-uyRJqE-_ayVcYEAo0UIgLJU.mft (raw, json)
Hash identifier: LGVrATaYEBNBo3PopkwbS+EfC5lHozeFjWBE9RkxTac=
Subject key identifier: 3A:55:20:48:68:5B:B0:E1:59:41:7B:CA:09:6C:2D:EB:C2:58:6A:E8
Authority key identifier: BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95
Certificate issuer: /CN=be847ebb2449a84fbf6b255c604028d142202c95
Certificate serial: 019A503DBA96A8864C7A98198360F904640B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 19:00:13 +0000
Manifest this update: Tue 04 Nov 2025 19:00:13 +0000
Manifest next update: Wed 05 Nov 2025 19:00:13 +0000
Files and hashes: 1: voR-uyRJqE-_ayVcYEAo0UIgLJU.crl (hash: 4JKfEFqTCBW8SzLCwj398thfJjSo1djJFxyC80AizwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:ba:96:a8:86:4c:7a:98:19:83:60:f9:04:64:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be847ebb2449a84fbf6b255c604028d142202c95
Validity
Not Before: Nov 4 19:00:13 2025 GMT
Not After : Nov 5 19:00:13 2025 GMT
Subject: CN=3a552048685bb0e159417bca096c2debc2586ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7e:98:b4:11:f7:99:16:1e:1a:d0:2e:c3:a9:
fb:00:84:69:4d:67:a6:6b:ba:e2:27:55:56:c6:f0:
49:35:c5:00:1a:f3:85:d6:41:77:d7:85:53:ff:87:
94:04:13:bb:48:32:c5:74:2c:c1:8c:7c:58:7f:f6:
48:8c:69:c6:ac:54:dc:d6:76:30:22:12:31:88:6d:
e4:f0:72:b9:c5:5c:d7:63:20:09:cc:76:c1:49:85:
e2:62:6b:5d:7d:23:f9:d5:f4:63:c7:5f:9b:f6:b7:
b3:0d:af:74:f4:60:a1:17:4c:cd:0d:05:33:9b:c6:
82:7f:18:a8:ec:8f:d8:1c:65:d2:eb:3f:f1:83:4d:
18:60:d9:fd:1e:14:50:0d:c7:bb:18:65:04:1a:02:
4b:dd:ff:c6:ee:2b:7b:fb:80:9e:c9:a4:82:2f:89:
2e:b3:c3:b8:cd:20:5f:77:88:9c:9d:e3:3d:32:5c:
ca:05:fd:ae:46:72:d1:3f:2d:b4:2c:4d:94:a6:a3:
ec:e1:c9:67:a3:4e:74:86:6c:2c:9d:f7:6d:15:a6:
06:3c:47:91:ca:f8:4e:3f:f7:54:01:86:b7:6d:e8:
0e:f4:aa:06:4d:97:af:e6:9b:83:f1:a7:87:a1:b2:
9b:59:5d:31:d9:33:ae:7e:ae:ef:17:a8:6d:00:50:
a8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:55:20:48:68:5B:B0:E1:59:41:7B:CA:09:6C:2D:EB:C2:58:6A:E8
X509v3 Authority Key Identifier:
keyid:BE:84:7E:BB:24:49:A8:4F:BF:6B:25:5C:60:40:28:D1:42:20:2C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/voR-uyRJqE-_ayVcYEAo0UIgLJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cb05f9-56be-4dfb-a4a9-893b0bebc938/1/voR-uyRJqE-_ayVcYEAo0UIgLJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1a:b5:3f:5c:c4:bd:a3:5f:56:ba:31:b4:30:54:ef:7c:ef:
22:a0:80:d6:27:71:bb:8e:9c:a7:e7:89:7f:59:23:82:4a:8f:
a8:9e:c2:ff:aa:06:b1:5f:13:19:8d:69:8d:60:91:69:c1:ad:
67:ce:54:c7:90:9d:20:bc:db:7e:e1:14:cf:df:f3:bb:53:1a:
0a:8b:37:0e:14:ce:83:8c:fe:6e:c3:63:77:35:f6:76:87:a9:
4d:5c:df:0f:c7:5b:1a:c2:b4:4a:83:e4:02:96:d6:b0:52:80:
8f:41:d7:c1:17:11:97:36:be:ed:e9:71:dc:d0:16:c4:12:dd:
03:d3:47:37:2c:14:d9:28:8a:ed:ce:81:ae:35:51:05:a5:e8:
f5:f5:b6:3e:c7:62:97:14:82:16:d9:5c:dd:6e:02:2b:db:e6:
0c:97:cc:dd:7f:b6:a1:2c:fb:b9:49:c6:ea:b0:d8:f0:51:6d:
7e:c0:4f:52:2b:29:83:cf:68:20:b3:26:b1:98:aa:47:bc:23:
d8:5d:e6:b4:30:fe:49:24:82:f7:f1:02:6b:ad:19:60:c4:3f:
c3:0f:62:4f:06:0e:6e:78:cf:73:3a:92:97:ac:cb:b1:19:f2:
a0:b3:54:1a:50:89:8b:cb:ee:82:d8:38:84:62:94:60:cf:0a:
a2:90:35:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:53 2025 by rpki-client