
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: QasP08YXbJ5Zd7LSYl6AwnJvEAkD2EC4gcCd84l3g6k=
Subject key identifier: 0A:CC:DF:E6:11:42:0F:0D:DE:C1:F5:A8:AD:47:34:35:A3:01:37:57
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 01984407B6A4C55C7AE37406DBB87068F8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 00:00:12 +0000
Manifest this update: Sat 26 Jul 2025 00:00:12 +0000
Manifest next update: Sun 27 Jul 2025 00:00:12 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: 65X3le7zP1/zVNtgRGpqMmSpBNZU1RVsgv2V0/0Fzco=)
2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=)
3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:07:b6:a4:c5:5c:7a:e3:74:06:db:b8:70:68:f8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Jul 26 00:00:12 2025 GMT
Not After : Jul 27 00:00:12 2025 GMT
Subject: CN=0accdfe611420f0ddec1f5a8ad473435a3013757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:70:15:c3:12:49:1e:54:aa:00:f0:09:bb:55:
bf:33:5f:67:f9:0b:1c:e4:00:39:20:2b:fa:f4:61:
79:80:96:aa:03:ab:53:c5:e8:25:20:ab:16:78:10:
bf:c3:1c:8d:cd:16:cf:fb:38:22:63:ae:2f:86:cb:
de:02:61:a2:a6:6b:20:db:cd:a6:4e:af:2d:74:a0:
8e:d4:2e:e0:c3:7f:6b:ee:32:6b:49:12:4f:06:85:
c5:1c:c6:65:40:71:67:8e:e5:f8:99:ce:81:43:b2:
45:84:a3:1f:fd:66:5d:69:59:cc:22:d6:38:b7:53:
1c:1e:8c:0c:d5:9e:3a:ea:f5:ac:10:60:b8:17:a5:
9e:c4:5a:d7:44:6c:59:20:69:40:73:0b:41:f1:35:
30:7c:9d:93:90:63:54:21:7e:6a:cf:c4:f4:4a:62:
e6:b4:5c:ab:18:35:cf:6e:9e:5f:8d:52:9f:2f:8a:
08:55:29:6f:b9:ad:a7:ce:8a:e2:68:93:04:c1:44:
1a:df:9e:7e:74:4f:fc:46:f8:e2:31:0a:5b:23:7b:
d1:39:c8:40:80:5f:ea:53:4b:1e:de:d7:95:87:fd:
65:65:90:dd:8d:9f:48:01:b9:b5:ca:3d:84:3f:9b:
2d:ce:83:1f:21:5b:49:ee:ed:a8:48:0d:09:bb:58:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CC:DF:E6:11:42:0F:0D:DE:C1:F5:A8:AD:47:34:35:A3:01:37:57
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3a:3e:6f:39:8f:de:7e:6b:a0:c1:b7:98:7e:ef:43:b1:de:
23:ae:bb:c3:f8:b2:00:ee:aa:a9:73:f7:d5:7d:e3:88:2b:c6:
25:6c:f9:cb:c8:c8:36:21:20:b0:21:a3:66:08:83:54:56:fd:
1d:fe:58:b4:74:f4:9e:6e:ca:30:ba:95:2b:c3:57:04:a3:e8:
33:fb:69:5b:bb:58:65:f1:bb:f1:1e:cb:f5:b4:86:5c:13:be:
ef:e1:22:44:e0:83:00:c5:99:1e:d2:a4:ef:f0:15:ff:5e:28:
71:39:4f:25:27:1e:82:d3:41:7d:73:e3:fe:1d:88:14:f1:ca:
2a:ed:34:4b:d4:de:3b:5c:0a:09:54:d3:3d:7e:af:c8:40:4d:
23:87:8e:27:40:4f:51:4f:48:85:43:21:f4:41:88:91:07:85:
ce:00:11:31:8a:48:75:04:0f:3e:4a:38:f9:52:fb:36:d8:32:
3d:a6:f1:91:0f:00:e3:fe:f1:62:1c:2c:d2:f3:e7:82:cd:1d:
39:9b:5f:94:b5:da:5f:82:c1:61:60:27:80:8c:63:c2:83:c6:
6b:b5:f4:47:c0:38:39:d2:bd:d1:18:35:c0:ae:a0:d0:78:30:
c9:41:30:3d:bd:93:ac:b8:cc:4f:30:7a:fe:0a:55:9e:16:8b:
31:6d:15:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 09:25:56 2025 by rpki-client