Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
File: VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft (raw, json)
Hash identifier: 4tMa8QSH6lm+hr/6w2XCnnwRTad0EK6f6htoeepF9Qo=
Subject key identifier: 0A:75:68:E9:A8:B0:2A:3C:27:4F:7A:42:41:0F:93:18:DF:1A:48:9A
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 019A24E5F8C0F87DEBA94C410C6AC00EAE09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
Manifest number: 1708
Signing time: Mon 27 Oct 2025 09:00:42 +0000
Manifest this update: Mon 27 Oct 2025 09:00:42 +0000
Manifest next update: Tue 28 Oct 2025 09:00:42 +0000
Files and hashes: 1: 8gXUkKQw8arTOvKo91QrTIhhgLM.roa (hash: 3FKGGmL5ZFlUUkm/8Tty8cDyN60SEeEzpNytHf+rPGY=)
2: HSdlh2QFEpGM_46Ow4vGDv79v_E.roa (hash: 1ypzUErprDZDRYPQT+U1/uxj8msJvU+nPJ/mnvBhz8M=)
3: VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl (hash: twLJYUq2w1aSfQXm7lnXZhlKVor8DgYlBeoBFSi6A2U=)
4: bOWi-Km4EdNL2RWwyu6fkO8cIac.roa (hash: bBX5W0vrQkhD//eKPSX/Grh0TmEf+XdqKDRiX0ii7jA=)
5: elIaIJuXbpWatRWeZpRoJLAB6RM.roa (hash: QMxGtNIR9eV06fnxcnLZU8NRPRckOjRHuOBGgCXj72Q=)
6: k9_h63CkyTFP9dp8XuNDvCxNzms.roa (hash: Im4uKqma1iWFJ1wc2qRnkE5lMnQ4ol3CcsuFcdhwEn0=)
7: qmXSBo6ZQHf5SBcPKJaq60n1DpQ.roa (hash: jnR4myiAxP2Qb03Ouublrmfx01PiIWyUlSrg/eITJIY=)
8: y2v6-6CCLmifQ83qZdjogrFre-M.roa (hash: oYIyUisFgSWQrEZe7E7GOqu26OhZjK1CM4VjnsKMVLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:f8:c0:f8:7d:eb:a9:4c:41:0c:6a:c0:0e:ae:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Oct 27 09:00:42 2025 GMT
Not After : Oct 28 09:00:42 2025 GMT
Subject: CN=0a7568e9a8b02a3c274f7a42410f9318df1a489a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0d:29:1f:4b:a4:0d:d5:47:68:7f:df:67:58:
95:fa:d7:cf:f2:76:a6:bc:1e:02:93:c8:a5:45:94:
ea:1c:fb:83:68:19:95:ee:f4:a1:88:57:e0:ee:1f:
a0:2e:2f:45:3b:c4:ba:07:9d:5f:f8:76:45:34:6c:
87:c5:35:d6:d5:e0:9d:66:92:c1:f1:34:c3:e6:ae:
1e:54:4d:c8:f1:3b:b6:ef:69:6a:b4:73:e8:16:38:
ad:30:39:97:d6:44:f5:ce:b6:f4:95:68:7b:d1:0b:
e7:54:22:c7:2f:db:d7:22:da:b6:54:c7:97:9c:d8:
dc:00:15:45:0b:e8:86:6f:4d:78:c0:ea:44:da:ff:
2f:5e:50:89:a0:cf:a6:5b:be:3a:ab:83:a2:f7:53:
1a:2a:14:cb:bb:45:f0:0b:a1:55:62:16:ff:ea:d7:
90:3c:2a:fc:44:2f:c9:1b:83:b1:59:2d:37:ff:73:
25:3b:a4:f5:93:2d:a7:d0:9c:50:84:9d:a4:90:27:
e5:b0:2e:e3:ef:ef:f5:f2:75:1c:ec:c8:57:f3:37:
85:47:49:ca:3b:aa:48:66:56:3a:cf:d4:f7:b2:a4:
43:bb:5b:b5:17:85:5b:32:33:2a:69:74:50:84:04:
c8:62:bb:74:44:9a:a1:5e:4d:3c:fc:a8:af:2d:bc:
36:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:75:68:E9:A8:B0:2A:3C:27:4F:7A:42:41:0F:93:18:DF:1A:48:9A
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4d:fc:35:28:52:eb:61:30:91:77:0d:48:0c:2c:d4:2a:99:
13:ab:a1:1d:26:c1:1e:81:71:80:0c:f3:e7:7f:8f:89:f4:67:
f7:0a:c3:8c:5e:4f:df:9f:33:ae:e9:b0:f7:2d:bf:89:b6:5c:
d7:08:91:de:7b:3f:8f:d2:62:e1:4c:bf:b7:c8:7d:ce:bb:e8:
79:3f:50:7e:ae:38:99:3e:af:48:01:22:46:79:27:25:d4:20:
3f:4b:40:ca:d9:c3:3c:55:29:fd:fa:e6:9a:6a:85:b0:cd:3e:
98:41:93:64:49:0f:ce:cf:fb:60:bf:d6:27:ae:b3:09:e7:31:
77:94:6b:14:69:b9:26:01:52:d5:84:0c:6f:f6:43:f5:b1:82:
6e:bf:6d:aa:88:bd:6a:fb:8a:da:f8:49:f6:8b:3e:9a:fa:f7:
28:b0:c1:ee:d7:33:e5:3a:8a:c2:b6:cb:30:ed:bf:f1:ca:5f:
ca:8a:58:ba:ed:a1:bf:e8:2d:ec:46:1f:d8:2e:5c:3c:55:35:
2c:40:88:ef:b6:7f:0f:00:08:02:fb:4c:74:61:11:ea:3e:c9:
b8:8c:07:87:06:8d:ba:4a:c3:5e:75:98:cc:be:bc:03:c3:64:
27:72:86:83:ce:fb:3a:ad:c2:a1:10:3f:ca:58:3d:d2:60:36:
f4:8a:0b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:12:01 2025 by rpki-client