
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
File: Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft (raw, json)
Hash identifier: 9nEQql+FlGXjrsyLm3Y/0TqGU7YFJFP5S/97Dd8uM64=
Subject key identifier: FA:5D:69:93:25:DB:D0:30:60:BB:BF:5F:2C:8E:77:69:E9:3E:E3:3A
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 01992E23AE3F6E9030C7BCB23BBC39E679DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
Manifest number: 09C7
Signing time: Tue 09 Sep 2025 11:01:54 +0000
Manifest this update: Tue 09 Sep 2025 11:01:54 +0000
Manifest next update: Wed 10 Sep 2025 11:01:54 +0000
Files and hashes: 1: 9LxbGWcyNt248nMDeMOo4a0XEpw.roa (hash: DwyAZVpidYTDU1EpifmtR3C3ZW/mICJ9/iyGeF329lI=)
2: Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl (hash: Jew1aE1yOwmbkCXs6aOKOJTl3qQCcqcGmsqMkbb1Emk=)
3: bTj1jsPbovrPNDKGlH2gFdMG6m8.roa (hash: 8C6MqvxN5C5hfTJy30e+9KO/XCfQ8O7cc4PWFCc/8Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 11:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:23:ae:3f:6e:90:30:c7:bc:b2:3b:bc:39:e6:79:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Sep 9 11:01:54 2025 GMT
Not After : Sep 10 11:01:54 2025 GMT
Subject: CN=fa5d699325dbd03060bbbf5f2c8e7769e93ee33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:45:be:bf:e0:06:49:06:8e:35:a5:31:f4:f9:
be:3f:c0:59:2c:7d:a4:b5:8f:66:2d:bb:3a:9a:c7:
46:cb:c8:9a:e1:be:8e:b9:1f:d8:89:96:d8:92:56:
e5:9d:0e:a9:37:20:a9:8a:0a:7a:07:97:f2:ee:72:
9b:36:be:48:a2:a3:cc:f9:87:2a:a3:77:2f:bb:aa:
81:36:eb:d9:76:56:a9:88:36:b3:e6:ad:ac:d2:90:
55:f6:71:8b:50:4a:84:ab:38:4c:c6:5e:44:e2:9c:
75:29:56:b0:4f:77:17:5b:0e:d5:85:90:1b:54:8e:
ce:e3:1d:86:13:9e:f0:1e:59:1f:e4:e7:ba:34:8b:
f6:a1:79:a6:b1:c8:b9:8c:38:a9:4f:4c:00:34:e5:
89:cf:66:50:62:d2:47:2d:0d:e8:be:a0:bc:97:aa:
b3:2e:5e:a2:f0:80:d4:ae:2c:1b:5d:a6:aa:e6:b7:
8d:a2:c8:cf:4c:1a:fd:13:7b:ef:25:e5:5d:6e:de:
6f:9a:f2:98:ca:18:e5:11:45:07:28:ef:26:89:82:
37:46:3c:b1:14:26:11:6d:26:bd:2a:fb:74:08:ed:
0b:77:3d:84:ae:c6:37:e8:b3:14:33:ea:f3:4f:85:
ef:be:ac:85:0b:6d:d7:dd:95:be:97:84:9b:78:ef:
bb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5D:69:93:25:DB:D0:30:60:BB:BF:5F:2C:8E:77:69:E9:3E:E3:3A
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:6c:d4:ba:8b:2f:86:e3:0f:c8:63:de:8e:78:0b:13:a5:7b:
f9:68:0d:0a:5f:1e:a1:2d:bd:a0:03:0a:6e:36:b4:66:eb:db:
0c:fb:f9:54:ee:4a:57:cc:7a:28:55:42:80:32:f9:c8:0d:4f:
c8:0b:ed:96:79:56:5c:76:4b:42:c7:ea:4d:36:1b:f0:bb:67:
f4:cb:4d:fa:a3:1e:6f:cf:02:f7:cd:ca:6a:22:62:4f:61:54:
34:d7:49:6e:7e:f1:22:fd:7f:66:2b:3e:75:f3:e0:e0:0d:9d:
38:86:12:28:6f:28:b2:c0:c0:9d:a0:19:52:a5:2b:a9:d8:2c:
8e:61:d5:ab:4b:ca:69:db:32:a2:d1:fa:62:b7:83:90:82:1b:
1e:9e:88:54:24:6e:13:bb:e4:d3:5f:27:c5:d1:7e:fb:3f:93:
54:b0:6b:62:f3:b3:15:de:d1:a8:ac:dd:d8:3f:64:09:35:8f:
eb:bc:15:ac:d9:b1:57:3f:5e:a1:d9:6d:c5:58:e2:87:af:44:
e1:9a:c4:05:5a:91:a0:16:d8:1f:a9:89:b1:d0:64:7b:53:fe:
98:38:f4:67:34:99:11:9a:e6:14:28:c4:92:98:10:30:e0:aa:
6d:1f:a3:a6:8b:de:68:0f:5b:1b:51:f8:0c:84:cb:4a:ee:86:
f6:f0:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:08:14 2025 by rpki-client