Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier: /EBK/eIohZjcaJZTPQbOwVm3xf0tO3IcSZkRvD9ZXTY=
Subject key identifier: EB:06:82:94:4C:A2:DC:31:BD:6B:DF:10:B6:37:55:4C:0C:C2:82:97
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial: 019A1D2C743B9FE1CF6E3109C6A437AA27A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number: 16F6
Signing time: Sat 25 Oct 2025 21:00:43 +0000
Manifest this update: Sat 25 Oct 2025 21:00:43 +0000
Manifest next update: Sun 26 Oct 2025 21:00:43 +0000
Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: b+RVh1DlWgF7llwTHRBqMg4R37Rx2RWecHX4UHX9Uko=)
2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=)
3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:74:3b:9f:e1:cf:6e:31:09:c6:a4:37:aa:27:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Validity
Not Before: Oct 25 21:00:43 2025 GMT
Not After : Oct 26 21:00:43 2025 GMT
Subject: CN=eb0682944ca2dc31bd6bdf10b637554c0cc28297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e6:cf:8d:21:8c:5a:0b:1e:17:df:4d:9a:2f:
f5:61:d2:be:3a:ba:44:77:55:cd:53:e2:3e:93:0a:
50:9f:d7:ce:d7:2f:71:de:c9:89:a6:83:02:c3:9f:
87:6a:0b:d9:5a:50:f3:99:4d:cb:e8:4f:ec:77:96:
95:1c:09:1a:05:b8:20:0e:25:5b:ef:bc:84:65:d1:
b8:d5:60:86:1c:ea:cb:00:d1:e8:19:de:4c:bb:01:
21:50:9a:45:91:96:0f:17:00:82:fe:a9:f7:01:22:
ef:78:d7:ab:6a:50:9f:47:5d:74:ae:52:87:92:1b:
20:10:2b:77:ed:9e:f1:b6:a7:f0:d6:39:b1:cc:ed:
dd:8b:df:3b:3a:41:e1:20:a2:f4:4a:dc:d3:be:7a:
89:e7:6f:ce:ab:2f:43:50:38:eb:1b:c3:e8:fa:c9:
e8:72:5a:17:9d:02:a6:53:07:24:f0:ab:4b:5e:f2:
6d:51:48:07:21:73:ea:67:ea:64:1b:a9:de:0f:39:
4d:59:86:9f:c2:18:c3:5d:9b:0d:b7:9b:a4:28:62:
1a:ef:f7:86:a9:e4:e8:6f:82:6d:ba:17:08:83:33:
0f:9c:04:f9:49:f6:2a:7a:e9:9d:bc:33:b7:dd:49:
98:f6:b7:0d:db:e8:23:f8:c6:7f:9b:52:8b:d7:53:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:06:82:94:4C:A2:DC:31:BD:6B:DF:10:B6:37:55:4C:0C:C2:82:97
X509v3 Authority Key Identifier:
keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8a:ee:02:ec:8f:0d:14:c9:8f:4b:f6:e7:bd:5a:c0:73:cf:
ff:49:17:91:98:60:f6:b6:b6:36:10:fc:25:12:ff:f6:80:65:
ad:1e:e5:6d:92:80:82:c3:30:1a:e7:f1:66:ea:0f:ea:9b:71:
d1:cc:de:10:f5:03:b4:07:ba:38:d1:4a:96:8c:83:03:3c:aa:
6b:ce:39:76:1c:c7:3c:8e:98:ae:20:13:8c:12:3e:6e:db:a3:
fd:aa:14:52:fa:8c:9c:a9:ec:cc:bb:5a:c4:33:05:c5:d4:5a:
e3:47:dd:27:6a:42:da:d3:66:8d:9d:95:0c:83:22:fa:3f:58:
d9:a2:6c:fe:73:c2:13:d2:ea:28:21:bf:4a:1a:04:4a:01:30:
71:b9:9a:9d:c0:71:de:78:09:71:da:ff:ef:dc:c9:f2:14:54:
9f:24:30:8d:52:f7:92:d3:bf:c6:68:f8:b3:1b:a9:d3:f1:1d:
12:1c:05:52:23:20:a0:a9:ba:57:43:38:cd:36:ab:e1:48:88:
95:f7:c1:e7:b3:01:c5:10:d1:7e:48:8a:7f:69:e7:04:8f:5b:
b6:75:63:4e:ad:bf:d8:9e:e2:c9:6f:89:24:95:13:23:5b:04:
05:5e:19:33:02:a5:89:18:62:60:b6:f7:e0:81:27:ec:c8:40:
b7:62:4f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:52:47 2025 by rpki-client