Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: 7YDVp577PpMT2NvMeuesWIBHw7FFc8ZnuEDXKT2aRRM=
Subject key identifier: 99:F9:3D:38:FC:72:D5:04:C8:95:C0:1D:AE:7D:26:8E:1F:3B:7C:1D
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 0199564348A18A50897709B959B4E60A4533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 1540
Signing time: Wed 17 Sep 2025 06:01:14 +0000
Manifest this update: Wed 17 Sep 2025 06:01:14 +0000
Manifest next update: Thu 18 Sep 2025 06:01:14 +0000
Files and hashes: 1: M5Ss8dPr3mgOSEzIF3jmA6pApv4.roa (hash: QeN0UB5jBHieDVxeoJHOIWGc+jidnXLUOykEdgdKgwA=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: KWipQKFnv0m+FWZjZSKVJ5LHTqRb/gKoy5cIIqVhq2I=)
3: jhn2n6Zhnk2eAJzC6HzMRpbzBDY.roa (hash: JGVKd7N6rxJHSCarnyD9lhtED3Ke3uBCDSZH7wuHINc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:43:48:a1:8a:50:89:77:09:b9:59:b4:e6:0a:45:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Sep 17 06:01:14 2025 GMT
Not After : Sep 18 06:01:14 2025 GMT
Subject: CN=99f93d38fc72d504c895c01dae7d268e1f3b7c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:fd:ad:d6:fe:60:9b:f8:ae:1d:3d:3e:69:
71:87:03:93:9a:39:72:77:cb:36:8f:8a:c9:6f:92:
10:bc:81:4d:71:48:e7:59:49:33:5d:2a:7b:56:96:
a7:c4:32:03:37:1a:8c:91:c7:da:a5:d2:cc:61:6a:
77:40:3c:4e:ec:58:e8:60:56:2f:10:72:f4:9a:b5:
77:bc:4c:52:bb:06:31:f6:7a:a0:8e:d7:b2:52:35:
8c:29:fb:05:37:0b:a6:11:ab:91:be:25:7f:2b:03:
05:f4:e3:21:a1:a0:60:23:ba:f2:24:e9:8b:f1:5b:
13:20:58:b8:90:0e:ec:39:f3:cc:43:17:4d:3d:d9:
13:21:59:20:f6:99:01:e6:a2:03:dd:d0:bb:be:8a:
4c:41:c3:3a:64:dd:18:7c:3f:c5:9c:ab:55:11:5e:
55:44:89:76:fc:c1:6b:64:6d:70:97:79:bf:f3:7d:
c3:58:70:75:3b:f7:f8:1e:56:e0:83:82:4c:e1:ea:
db:15:39:45:42:7c:a8:31:ec:be:60:e0:e6:41:88:
8f:03:93:0b:0e:e0:a3:17:21:c7:23:e3:c4:7a:65:
9e:82:e6:d7:fe:9f:8a:9a:ba:c1:40:c4:cd:46:85:
eb:9d:9b:04:f8:71:02:f9:26:8d:b5:0e:f0:4b:d1:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F9:3D:38:FC:72:D5:04:C8:95:C0:1D:AE:7D:26:8E:1F:3B:7C:1D
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:7b:ff:98:69:60:eb:60:d1:15:d6:5c:cb:23:7b:f2:b2:55:
cd:55:0c:c4:d6:91:a5:94:a8:58:f4:5f:60:13:80:14:45:69:
3f:ef:90:4c:7f:91:35:7f:34:90:ad:98:e9:70:4e:73:bb:f4:
d6:0e:51:d5:0e:a1:62:32:01:d6:89:a6:48:63:86:9a:dc:0c:
e8:08:7a:4c:7c:29:00:7f:e7:f4:4e:9a:f0:78:c2:c6:ae:6a:
4f:db:1b:1b:59:cb:79:d4:ab:87:1d:00:3c:31:8e:a4:db:88:
6c:d3:38:dd:32:fc:30:3b:45:c8:29:27:1c:b8:8f:c1:2a:32:
c1:47:44:b4:70:51:64:dd:13:9a:0b:87:88:4b:c1:7a:5e:42:
88:41:11:7f:fd:08:3c:ff:2e:08:db:ac:d7:0d:da:ec:33:1f:
1d:c7:de:14:92:b4:48:0d:34:5d:e4:b7:62:55:5f:c6:81:fe:
a6:26:2e:77:da:b8:7d:8d:ac:68:e2:d9:63:09:13:7c:ee:b8:
3b:2d:b2:72:7c:7c:f8:5d:c0:59:46:6d:18:51:5c:52:2c:0d:
2a:2e:c9:63:8f:92:36:66:d7:80:53:6c:28:31:f6:f9:00:ee:
76:1a:24:02:6c:51:cc:2d:92:7a:d4:cf:2b:d3:66:4a:60:67:
5e:db:d7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 07:07:30 2025 by rpki-client