Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
File: afKVoxCPXPHTJv_pv2EPvPGNct8.mft (raw, json)
Hash identifier: hhQM1cLXAx+8fP7E+hmlsGv8+xQpuepspnv2nMJjjk0=
Subject key identifier: 4D:25:A0:2C:69:8F:25:51:A2:EA:29:56:15:9D:E8:AF:48:80:D0:91
Authority key identifier: 69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
Certificate issuer: /CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Certificate serial: 01984966A9DA02641F3288CF1B5CEE99923B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
Manifest number: 098F
Signing time: Sun 27 Jul 2025 01:02:01 +0000
Manifest this update: Sun 27 Jul 2025 01:02:01 +0000
Manifest next update: Mon 28 Jul 2025 01:02:01 +0000
Files and hashes: 1: 2kKgjfyddVwBqBtbcmC591hhds0.roa (hash: J3PsfHURY5KO0r8jrXSygLDWI9PtPmq+khbJ0BwKbpo=)
2: afKVoxCPXPHTJv_pv2EPvPGNct8.crl (hash: fn/u7A3cWVCifSFp2Pa5uzHKy+K78UM4SWNB+fiuHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:a9:da:02:64:1f:32:88:cf:1b:5c:ee:99:92:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f295a3108f5cf1d326ffe9bf610fbcf18d72df
Validity
Not Before: Jul 27 01:02:01 2025 GMT
Not After : Jul 28 01:02:01 2025 GMT
Subject: CN=4d25a02c698f2551a2ea2956159de8af4880d091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8a:b1:41:5f:30:29:29:a6:ba:1e:6b:5b:9e:
d9:5e:f1:8b:d1:0f:9f:75:42:a8:67:19:a5:14:cc:
01:78:02:a2:54:db:f3:a0:9f:5c:40:e1:56:33:7e:
cc:ec:41:78:b7:cd:c3:a1:82:2a:d4:14:2c:0b:d0:
b1:34:56:a9:2a:0b:d0:3f:81:93:8e:4b:ab:28:b1:
42:d7:13:e2:92:85:7e:a9:bf:63:aa:29:f1:71:f9:
16:6e:ba:20:a4:53:e7:45:08:fb:62:b6:30:c7:46:
94:b2:00:ed:85:b8:85:28:c4:5d:cc:70:89:27:d1:
c2:46:2c:bb:d1:94:47:cd:65:c7:4f:07:1d:c2:32:
54:b2:bb:58:9c:59:fe:e5:16:d8:f1:a8:0c:79:db:
da:34:37:38:68:6a:9d:37:c4:5e:81:06:be:1d:a0:
5d:63:95:fd:60:3b:38:ef:06:6d:fb:08:1e:32:96:
b7:ed:93:74:cd:43:43:c6:b0:f2:e5:b9:a3:6f:a3:
e7:5a:7d:8f:21:32:2f:1a:f5:b1:f1:e6:c0:ea:e4:
53:e6:6a:bd:7c:4d:c0:76:1b:2a:8f:ea:1d:d4:84:
a7:dd:d6:75:88:28:96:43:61:7d:2c:d5:ac:3d:2e:
ed:89:b2:c7:ce:ff:e5:d6:e3:3a:16:b5:a1:0e:5a:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:25:A0:2C:69:8F:25:51:A2:EA:29:56:15:9D:E8:AF:48:80:D0:91
X509v3 Authority Key Identifier:
keyid:69:F2:95:A3:10:8F:5C:F1:D3:26:FF:E9:BF:61:0F:BC:F1:8D:72:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afKVoxCPXPHTJv_pv2EPvPGNct8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/430cf7-4407-4247-b2da-5a10d19cf1f3/1/afKVoxCPXPHTJv_pv2EPvPGNct8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:af:01:e6:4a:ed:78:1a:a4:71:d8:41:aa:12:37:cc:db:1c:
ad:e4:01:4a:15:57:83:8a:19:81:58:c9:b7:f8:0b:9e:6b:ff:
73:c7:8e:eb:5c:74:83:b0:fb:30:9a:30:0d:9c:ba:1b:81:94:
57:e2:0c:0c:0a:fd:15:3b:37:27:a9:30:60:c6:8f:29:e5:75:
74:2a:fb:f4:a2:ec:8b:42:b6:97:5c:21:be:7b:fa:2a:6f:a0:
61:ae:55:a8:2d:20:50:95:9f:d2:00:2c:bd:81:c6:01:5e:97:
5b:de:81:e6:61:4b:7d:a5:48:8c:a0:4f:22:32:4c:79:fb:49:
0a:e8:81:ec:92:2c:70:ad:d5:5a:d0:aa:e6:20:7f:e2:70:dd:
d4:96:a0:98:d6:ee:c1:ff:ba:6b:fa:73:11:65:f6:b0:98:3e:
0c:f1:64:be:45:db:fa:65:d5:a2:5f:fd:89:08:d5:3d:d8:73:
ba:33:77:bf:e0:38:91:9d:8a:6b:d8:2a:f4:06:cc:45:2f:7c:
5e:62:e1:e4:71:5f:b2:3e:0c:01:57:cd:1e:f1:2a:f8:6b:b8:
43:90:ea:a7:6d:56:c4:f2:86:37:2d:7d:9b:09:d3:51:07:4c:
13:e9:19:64:58:52:8a:39:1d:f2:84:1e:ac:c8:67:9a:b6:8d:
a8:02:b0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:07 2025 by rpki-client