Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
File: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft (raw, json)
Hash identifier: xHMkVCeFlAOop3Q1WzApygeMv5Vj7x4YRx6Hnl/kes4=
Subject key identifier: 9F:C7:9E:6D:82:8E:51:25:0A:26:8F:30:4B:8A:93:A7:CE:97:00:7F
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 0198610061C0DD9E5F1766338EC34A62293D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
Manifest number: 14C1
Signing time: Thu 31 Jul 2025 15:01:11 +0000
Manifest this update: Thu 31 Jul 2025 15:01:11 +0000
Manifest next update: Fri 01 Aug 2025 15:01:11 +0000
Files and hashes: 1: M5Ss8dPr3mgOSEzIF3jmA6pApv4.roa (hash: QeN0UB5jBHieDVxeoJHOIWGc+jidnXLUOykEdgdKgwA=)
2: VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl (hash: wK+wrflIoDLpAuxNSrEgJtgPV03CFRt5qejirjHYFRg=)
3: jhn2n6Zhnk2eAJzC6HzMRpbzBDY.roa (hash: JGVKd7N6rxJHSCarnyD9lhtED3Ke3uBCDSZH7wuHINc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 Aug 2025 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:00:61:c0:dd:9e:5f:17:66:33:8e:c3:4a:62:29:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Jul 31 15:01:11 2025 GMT
Not After : Aug 1 15:01:11 2025 GMT
Subject: CN=9fc79e6d828e51250a268f304b8a93a7ce97007f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bb:26:15:b0:d1:aa:0a:7a:92:85:45:85:22:
07:ea:6c:4f:b0:6d:a7:e1:6b:47:6b:2e:b5:b3:2f:
3d:1c:b6:22:0e:25:01:e4:6f:bd:c9:36:94:b9:af:
35:94:5d:42:ad:37:a9:6e:73:f2:0b:33:38:98:84:
cb:f7:c5:bf:fe:71:24:be:b2:20:c1:35:17:91:4c:
7e:6d:f8:98:c6:97:5d:99:9c:23:45:4d:6a:47:9a:
f9:6d:52:4f:4e:41:d3:e2:67:7b:6d:08:21:2d:d1:
ba:ba:bc:f2:5e:24:c6:0f:0e:92:9c:71:5e:ba:03:
a7:1c:79:6e:30:cd:60:6b:2d:f3:9a:6c:09:0a:7c:
be:29:41:83:2a:79:6b:33:c4:ca:ba:b8:e3:f5:20:
7b:69:a8:40:5a:c4:6d:5d:f4:e3:62:d9:12:dc:6e:
66:c3:1e:f9:b7:a6:c2:b0:b3:a8:2c:f0:0b:d3:2b:
f5:2e:b7:1c:cf:21:bb:46:6b:28:c6:40:2a:04:be:
a1:89:22:e9:da:35:47:bc:5a:71:0f:27:82:e9:ff:
4c:56:90:f2:69:b0:54:38:49:ad:78:cd:c9:a5:13:
00:f9:2b:ea:2e:dc:55:32:7d:9c:03:cf:02:23:76:
f1:fc:d1:8d:88:8a:10:23:b7:62:f7:bc:f6:bb:25:
aa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C7:9E:6D:82:8E:51:25:0A:26:8F:30:4B:8A:93:A7:CE:97:00:7F
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:19:18:4b:a7:8a:eb:bb:f5:60:c3:f0:70:be:2f:80:e0:cd:
53:da:cd:4d:c2:e7:90:06:94:99:35:65:2e:4d:cc:b6:38:50:
c1:82:c6:0f:d1:59:3c:ee:81:0a:b2:e8:9f:68:3a:aa:97:2e:
81:44:7e:88:1b:e8:56:4e:d0:d8:06:4a:be:9d:a4:23:b8:90:
b8:fb:a0:19:d4:06:6d:74:1e:36:e4:53:79:81:40:31:e1:b8:
34:71:2c:6c:7e:d9:d3:16:69:19:32:9d:5c:36:03:b0:f1:0f:
95:60:7e:2a:36:8e:00:54:3a:6d:68:00:31:a6:9d:8b:c7:e5:
40:17:97:5c:ba:a7:09:da:60:d2:0d:0b:1c:19:f5:18:fa:a6:
96:90:a5:49:3e:a5:44:33:e5:89:30:ed:47:4f:4f:a3:56:c4:
9c:fb:cd:0f:5c:f5:18:2d:b3:1f:a4:1e:97:2f:7c:fb:5d:e6:
46:de:55:6f:57:8b:f3:b9:b5:1c:d3:cc:ca:9e:e9:b7:81:29:
10:ab:c7:48:17:ed:61:11:c7:11:89:43:3d:e5:f6:ee:55:20:
c0:a0:61:d9:ca:fd:1b:14:92:ce:4c:e6:ff:fd:d3:51:72:74:
40:f8:21:2e:dd:a8:80:36:9b:b3:77:e3:67:9b:3b:c0:9d:fc:
e9:d0:54:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhhAGHA3Z5fF2YzjsNKYik9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZTVkNjkxN2RjMmRhYmZiNWNhZjkwN2MzZTc0NTE0OTUw
MmM5MGUwHhcNMjUwNzMxMTUwMTExWhcNMjUwODAxMTUwMTExWjAzMTEwLwYDVQQD
Eyg5ZmM3OWU2ZDgyOGU1MTI1MGEyNjhmMzA0YjhhOTNhN2NlOTcwMDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bsmFbDRqgp6koVFhSIH6mxPsG2n
4WtHay61sy89HLYiDiUB5G+9yTaUua81lF1CrTepbnPyCzM4mITL98W//nEkvrIg
wTUXkUx+bfiYxpddmZwjRU1qR5r5bVJPTkHT4md7bQghLdG6urzyXiTGDw6SnHFe
ugOnHHluMM1gay3zmmwJCny+KUGDKnlrM8TKurjj9SB7aahAWsRtXfTjYtkS3G5m
wx75t6bCsLOoLPAL0yv1LrcczyG7RmsoxkAqBL6hiSLp2jVHvFpxDyeC6f9MVpDy
abBUOEmteM3JpRMA+SvqLtxVMn2cA88CI3bx/NGNiIoQI7di97z2uyWqMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/Hnm2CjlElCiaPMEuKk6fOlwB/MB8GA1UdIwQY
MBaAFFTl1pF9wtq/tcr5B8PnRRSVAskOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS80NzlkMDYtOWU4NC00Zjc2LThhZTAt
MTMxZDI5MTY0ODhjLzEvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS80NzlkMDYtOWU4NC00Zjc2LThhZTAtMTMxZDI5MTY0ODhj
LzEvVk9YV2tYM0Myci0xeXZrSHctZEZGSlVDeVE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRkYS6eK
67v1YMPwcL4vgODNU9rNTcLnkAaUmTVlLk3MtjhQwYLGD9FZPO6BCrLon2g6qpcu
gUR+iBvoVk7Q2AZKvp2kI7iQuPugGdQGbXQeNuRTeYFAMeG4NHEsbH7Z0xZpGTKd
XDYDsPEPlWB+KjaOAFQ6bWgAMaadi8flQBeXXLqnCdpg0g0LHBn1GPqmlpClST6l
RDPliTDtR09Po1bEnPvND1z1GC2zH6Qely98+13mRt5Vb1eL87m1HNPMyp7pt4Ep
EKvHSBftYRHHEYlDPeX27lUgwKBh2cr9GxSSzkzm//3TUXJ0QPghLt2ogDabs3fj
Z5s7wJ386dBUCw==
-----END CERTIFICATE-----
Generated at Thu Jul 31 20:04:52 2025 by rpki-client