
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
File: VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft (raw, json)
Hash identifier: dnMitnLYLhBcxczqf4kHOl8i8FDn9gZ8x2Z6My7Z0XU=
Subject key identifier: 99:EC:FA:25:86:B6:75:22:65:9E:9A:D6:9E:47:4D:1D:52:FF:56:E4
Authority key identifier: 56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
Certificate issuer: /CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Certificate serial: 01992F3574CFA8D5238BE7B91CA9BD5251F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
Manifest number: 0E89
Signing time: Tue 09 Sep 2025 16:00:56 +0000
Manifest this update: Tue 09 Sep 2025 16:00:56 +0000
Manifest next update: Wed 10 Sep 2025 16:00:56 +0000
Files and hashes: 1: VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl (hash: j3LiCQOZnBKofFQ08dM5yXMsDIuFDhEIYoGo+IIg7hU=)
2: cJ5glVz4GHRzOf6IyvRRck-9UEU.roa (hash: 58bsNe/joAKOWYDPmFBrEXcY+rLRfxv60aTTZ4/yvVI=)
3: gDx_EkaHuEb4LxSm5qDhRH-UdZM.roa (hash: XHmtxgaP2vmqWx5qZWaBQh+bglRBX5m7TvdpxAwnTCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:35:74:cf:a8:d5:23:8b:e7:b9:1c:a9:bd:52:51:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b11c5f24f2e938c88a51cb49ceb135364389
Validity
Not Before: Sep 9 16:00:56 2025 GMT
Not After : Sep 10 16:00:56 2025 GMT
Subject: CN=99ecfa2586b67522659e9ad69e474d1d52ff56e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:e8:aa:63:98:98:b7:60:92:71:13:c9:3c:
34:b3:c7:b4:fd:b0:67:6d:e5:a3:39:b5:55:92:d4:
7d:8a:42:f6:6b:de:8b:e1:a4:7a:b8:c7:d7:a3:f3:
57:78:c0:6d:18:0c:e0:dc:c6:94:ac:07:19:21:f4:
fa:0a:36:db:47:49:45:db:1e:70:ab:1e:e3:6b:4d:
b2:f4:d7:c9:1e:ee:38:12:29:d1:fc:a3:bb:2b:57:
a2:c8:fe:d7:77:28:7f:ca:da:61:cb:f2:b5:f4:43:
30:cc:9d:46:4b:ea:4b:23:22:32:70:c4:3a:7c:5b:
bf:e1:05:a9:4a:6f:e6:b3:a1:10:7f:2d:41:a4:14:
bf:28:05:44:8c:b0:54:20:c6:93:e4:ee:ef:0b:53:
6b:a1:9c:4f:c9:3f:14:0b:5b:b3:09:96:e8:84:a6:
55:98:b6:b3:c2:68:f2:7d:ee:b9:85:f6:53:2b:aa:
41:22:1b:1d:40:fa:f9:a8:69:02:6e:1a:14:c6:d8:
d9:61:52:50:a9:f8:43:a6:bd:71:3d:45:15:dc:8b:
21:75:6d:96:73:a7:c7:58:fb:6b:9d:0b:7c:2d:35:
60:ed:88:51:d4:49:71:ef:5c:59:6a:76:22:79:c8:
15:bc:4b:d5:90:4a:96:f5:43:e5:0b:ca:8b:31:b8:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EC:FA:25:86:B6:75:22:65:9E:9A:D6:9E:47:4D:1D:52:FF:56:E4
X509v3 Authority Key Identifier:
keyid:56:88:B1:1C:5F:24:F2:E9:38:C8:8A:51:CB:49:CE:B1:35:36:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoixHF8k8uk4yIpRy0nOsTU2Q4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3b1657-7891-41a2-8b1d-c8421c3b6554/1/VoixHF8k8uk4yIpRy0nOsTU2Q4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:20:ff:69:92:bb:15:c2:28:70:5f:58:f0:43:08:18:1b:54:
38:65:e0:71:1f:ac:75:71:90:4d:7c:af:50:9e:a2:2c:03:37:
11:cf:bc:e9:67:10:4d:07:91:7b:36:3d:40:d3:f6:30:fe:be:
9c:0a:e9:66:53:d9:e1:d4:64:9e:74:73:44:bd:1a:1b:fa:50:
69:1b:69:00:74:2e:f6:b4:c7:2b:13:91:a6:5e:dc:10:fd:63:
fd:f2:9d:64:97:87:5b:74:8a:93:e6:fd:88:68:52:53:dc:a3:
81:56:69:4f:d5:2a:6f:6f:df:40:61:91:7f:0d:43:37:3c:fd:
02:29:3d:42:c1:a2:ea:87:e0:0f:ff:79:9e:0e:68:54:15:fa:
47:59:cc:de:eb:a2:78:43:4e:12:68:aa:ff:df:16:cd:6b:83:
4d:b0:18:6f:09:c7:1e:3f:fb:86:f8:11:d5:d8:75:7a:ad:01:
f2:23:bd:db:73:54:8d:ce:89:d8:c0:47:70:82:54:2a:2d:cc:
7d:a2:24:d2:3d:67:c6:3e:59:96:2f:c9:32:56:45:93:d3:7a:
c1:6f:ce:46:51:a1:a2:43:f4:55:26:15:e7:de:92:24:3d:bd:
c5:bf:e0:48:8d:c7:a4:d1:17:59:3b:59:b2:86:20:7e:8b:da:
90:a5:37:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkvNXTPqNUji+e5HKm9UlH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODhiMTFjNWYyNGYyZTkzOGM4OGE1MWNiNDljZWIxMzUz
NjQzODkwHhcNMjUwOTA5MTYwMDU2WhcNMjUwOTEwMTYwMDU2WjAzMTEwLwYDVQQD
Eyg5OWVjZmEyNTg2YjY3NTIyNjU5ZTlhZDY5ZTQ3NGQxZDUyZmY1NmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD3oqmOYmLdgknETyTw0s8e0/bBn
beWjObVVktR9ikL2a96L4aR6uMfXo/NXeMBtGAzg3MaUrAcZIfT6CjbbR0lF2x5w
qx7ja02y9NfJHu44EinR/KO7K1eiyP7Xdyh/ytphy/K19EMwzJ1GS+pLIyIycMQ6
fFu/4QWpSm/ms6EQfy1BpBS/KAVEjLBUIMaT5O7vC1NroZxPyT8UC1uzCZbohKZV
mLazwmjyfe65hfZTK6pBIhsdQPr5qGkCbhoUxtjZYVJQqfhDpr1xPUUV3IshdW2W
c6fHWPtrnQt8LTVg7YhR1Elx71xZanYiecgVvEvVkEqW9UPlC8qLMbh3RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJns+iWGtnUiZZ6a1p5HTR1S/1bkMB8GA1UdIwQY
MBaAFFaIsRxfJPLpOMiKUctJzrE1NkOJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9peEhGOGs4dWs0eUlwUnkwbk9zVFUyUTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zYjE2NTctNzg5MS00MWEyLThiMWQt
Yzg0MjFjM2I2NTU0LzEvVm9peEhGOGs4dWs0eUlwUnkwbk9zVFUyUTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8zYjE2NTctNzg5MS00MWEyLThiMWQtYzg0MjFjM2I2NTU0
LzEvVm9peEhGOGs4dWs0eUlwUnkwbk9zVFUyUTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApyD/aZK7
FcIocF9Y8EMIGBtUOGXgcR+sdXGQTXyvUJ6iLAM3Ec+86WcQTQeRezY9QNP2MP6+
nArpZlPZ4dRknnRzRL0aG/pQaRtpAHQu9rTHKxORpl7cEP1j/fKdZJeHW3SKk+b9
iGhSU9yjgVZpT9Uqb2/fQGGRfw1DNzz9Aik9QsGi6ofgD/95ng5oVBX6R1nM3uui
eENOEmiq/98WzWuDTbAYbwnHHj/7hvgR1dh1eq0B8iO923NUjc6J2MBHcIJUKi3M
faIk0j1nxj5Zli/JMlZFk9N6wW/ORlGhokP0VSYV596SJD29xb/gSI3HpNEXWTtZ
soYgfovakKU3MA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 23:05:22 2025 by rpki-client