Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
File: Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft (raw, json)
Hash identifier: FDvqxJAhdiHqPtW+jpYsgSllI3Xp37hYMXdql21Hs9U=
Subject key identifier: 40:62:0D:BC:16:90:AB:F6:7E:7B:28:D0:76:B9:61:FE:8A:F2:27:60
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 019A1AD17BA1D1082715E5CDC3BF0E69694B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
Manifest number: 0A42
Signing time: Sat 25 Oct 2025 10:02:07 +0000
Manifest this update: Sat 25 Oct 2025 10:02:07 +0000
Manifest next update: Sun 26 Oct 2025 10:02:07 +0000
Files and hashes: 1: 9LxbGWcyNt248nMDeMOo4a0XEpw.roa (hash: DwyAZVpidYTDU1EpifmtR3C3ZW/mICJ9/iyGeF329lI=)
2: Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl (hash: UghgHIxyFuBh9tCkdfca0NGiKqkBuUJTA7oXtCR1zrI=)
3: p797xYF79ghmDwX_B_VOi9b9mxU.roa (hash: e+IK2FyU17ZAcWL5rbzdLFhxA19UKsEovIWWQwVtq/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d1:7b:a1:d1:08:27:15:e5:cd:c3:bf:0e:69:69:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Oct 25 10:02:07 2025 GMT
Not After : Oct 26 10:02:07 2025 GMT
Subject: CN=40620dbc1690abf67e7b28d076b961fe8af22760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:73:7f:82:07:05:d1:66:61:2e:c4:37:30:0f:
ac:ba:f7:53:af:f9:17:2d:87:86:63:b9:4d:98:8f:
70:86:9c:46:ce:be:b6:57:5f:38:ce:33:2b:c2:9c:
3a:57:b4:6e:19:9d:a7:6a:49:6c:fe:66:2b:51:4a:
6d:3c:eb:11:fa:a0:1e:00:0f:41:1a:59:c5:54:2e:
f4:65:ae:32:df:fc:85:28:10:bf:ff:4e:bd:b2:e2:
ac:fc:e8:1c:ba:c9:d2:1a:6b:a0:39:b6:ea:44:47:
70:56:95:c0:79:9c:86:15:7c:ff:73:61:a9:31:ce:
cb:2e:9c:06:43:e6:58:0a:8c:d4:21:9c:6d:2c:00:
71:b9:ed:27:31:e4:9f:93:5f:2a:76:3d:87:75:3c:
ff:06:01:32:68:f7:e4:bb:ca:58:cf:d3:99:b7:9c:
f1:3f:83:75:b5:e4:15:dc:da:e7:b9:98:91:b9:09:
2a:ff:d5:74:cd:ec:54:86:85:7a:69:7e:5f:ae:1f:
01:66:b2:8d:00:33:a2:00:99:8e:00:cc:b9:e1:93:
27:8b:1a:35:c1:2f:25:3f:62:08:7e:f4:ca:47:30:
15:0b:86:c1:ef:f4:64:fd:ca:72:0b:46:e3:03:fd:
8f:eb:d5:27:7b:38:94:b3:46:0d:d4:28:f0:53:c6:
c1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:62:0D:BC:16:90:AB:F6:7E:7B:28:D0:76:B9:61:FE:8A:F2:27:60
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:79:78:08:ab:10:45:32:19:c9:06:ed:f3:e2:a0:8e:5a:88:
1c:de:39:06:2c:87:fc:5a:c2:aa:fd:97:eb:e5:15:41:fe:42:
b7:57:e0:91:58:45:7c:2a:b4:71:c7:73:bc:49:20:82:e1:d1:
2b:a8:f4:13:5f:f5:0b:ff:42:ca:31:99:ff:65:4e:83:a2:92:
1c:fd:23:44:1f:9c:5b:aa:9b:35:ed:18:3b:ac:d1:50:33:9b:
1b:da:ef:30:3d:c1:8e:ad:9c:35:bb:22:7c:a9:de:6c:3c:a4:
fe:88:ec:c2:f6:5a:c1:d3:9b:1d:d4:9e:05:9c:6a:53:54:5d:
0e:b8:a5:29:85:d8:b9:ba:e7:37:fc:91:1b:63:d3:28:1e:01:
e0:52:42:ca:f6:ee:6c:36:f0:83:58:e7:6a:de:4f:a5:40:ef:
af:d1:ae:0f:f7:ba:a9:10:1f:07:21:5e:fb:7a:08:19:41:11:
51:89:e5:83:f2:80:a0:ac:7a:1f:dd:ea:fe:25:75:8a:35:e0:
e2:a6:c4:6f:62:15:e3:07:ac:7b:fd:b7:30:f4:6f:24:45:b4:
76:72:0d:c1:65:37:f7:90:1c:9c:ab:3d:64:4b:04:f4:6a:31:
e2:62:4c:60:ba:7e:83:97:2a:83:78:ec:31:1d:54:ec:07:60:
1d:16:52:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoa0Xuh0QgnFeXNw78OaWlLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODhiNDIxNzVkNjIxNGEzMWE1NDA3ZGI4YjZjOTVmMWVj
NjBkNGUwHhcNMjUxMDI1MTAwMjA3WhcNMjUxMDI2MTAwMjA3WjAzMTEwLwYDVQQD
Eyg0MDYyMGRiYzE2OTBhYmY2N2U3YjI4ZDA3NmI5NjFmZThhZjIyNzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXN/ggcF0WZhLsQ3MA+suvdTr/kX
LYeGY7lNmI9whpxGzr62V184zjMrwpw6V7RuGZ2nakls/mYrUUptPOsR+qAeAA9B
GlnFVC70Za4y3/yFKBC//069suKs/OgcusnSGmugObbqREdwVpXAeZyGFXz/c2Gp
Mc7LLpwGQ+ZYCozUIZxtLABxue0nMeSfk18qdj2HdTz/BgEyaPfku8pYz9OZt5zx
P4N1teQV3NrnuZiRuQkq/9V0zexUhoV6aX5frh8BZrKNADOiAJmOAMy54ZMnixo1
wS8lP2IIfvTKRzAVC4bB7/Rk/cpyC0bjA/2P69UneziUs0YN1CjwU8bBzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBiDbwWkKv2fnso0Ha5Yf6K8idgMB8GA1UdIwQY
MBaAFFaItCF11iFKMaVAfbi2yV8exg1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84M2Q2ZmEtNDYxZC00YTU2LWE4NDQt
OWY5NDJiYzEyYTdlLzEvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84M2Q2ZmEtNDYxZC00YTU2LWE4NDQtOWY5NDJiYzEyYTdl
LzEvVm9pMElYWFdJVW94cFVCOXVMYkpYeDdHRFU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXl4CKsQ
RTIZyQbt8+KgjlqIHN45BiyH/FrCqv2X6+UVQf5Ct1fgkVhFfCq0ccdzvEkgguHR
K6j0E1/1C/9CyjGZ/2VOg6KSHP0jRB+cW6qbNe0YO6zRUDObG9rvMD3Bjq2cNbsi
fKnebDyk/ojswvZawdObHdSeBZxqU1RdDrilKYXYubrnN/yRG2PTKB4B4FJCyvbu
bDbwg1jnat5PpUDvr9GuD/e6qRAfByFe+3oIGUERUYnlg/KAoKx6H93q/iV1ijXg
4qbEb2IV4wese/23MPRvJEW0dnINwWU395AcnKs9ZEsE9Gox4mJMYLp+g5cqg3js
MR1U7AdgHRZS4g==
-----END CERTIFICATE-----
Generated at Sat Oct 25 11:18:20 2025 by rpki-client