Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: uh+M5tDEndeFXC1H6LwVnvYHq6DBxy+plx81/P5buHs=
Subject key identifier: FC:CF:74:B7:1E:0B:4A:8F:BE:65:14:BA:31:28:98:C7:64:B1:F1:24
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 01976E874EA609D049DCEF02F0E95F6F22CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 1523
Signing time: Sat 14 Jun 2025 13:00:50 +0000
Manifest this update: Sat 14 Jun 2025 13:00:50 +0000
Manifest next update: Sun 15 Jun 2025 13:00:50 +0000
Files and hashes: 1: 4ifvOXlGTcvZkDl3bBHXClzFH5s.roa (hash: shQ9uYhnduluD4hyOhrNavJbF1LlnObbpGDGnRChGIc=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: pftHoVW6Abr7GUEb5QBXksP3WYw+7XYU+N/UL5SGK7Q=)
3: SIC0wWMpDwMCH170jWGV4n8YVKg.roa (hash: 11XuYsn3Bm92vB4Wx8w/k47zF7w2waOFdbevLO5t4Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:4e:a6:09:d0:49:dc:ef:02:f0:e9:5f:6f:22:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Jun 14 13:00:50 2025 GMT
Not After : Jun 15 13:00:50 2025 GMT
Subject: CN=fccf74b71e0b4a8fbe6514ba312898c764b1f124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:8c:0f:0d:20:d8:d5:66:e4:0e:ca:65:86:
e8:21:3a:51:4a:83:55:d6:89:ec:dd:09:40:ed:37:
eb:29:cb:d9:ee:97:a4:bb:a8:59:69:f6:87:21:2b:
eb:2d:b9:7f:b7:0a:78:47:9b:41:c0:32:a3:0a:e0:
c7:63:94:65:79:0d:15:90:7e:e5:f0:41:8d:c0:44:
d6:4f:10:17:c2:4e:ca:e4:ee:d9:40:3b:0b:05:8a:
67:f1:50:8e:e0:7a:9b:c5:ce:cb:6c:92:e6:2c:e9:
81:94:85:81:9e:2f:e2:d9:76:ca:40:6b:6e:29:a9:
7f:ff:4e:33:f1:dd:02:5c:8c:46:c1:05:eb:c4:22:
92:5f:4f:f6:f2:3a:01:62:d6:5f:5a:1a:12:68:17:
a4:68:58:c5:ad:ce:e9:a0:d8:fb:4a:b5:72:a2:ae:
55:a2:c6:58:9e:d0:2f:c3:16:12:01:d2:6a:72:66:
b0:16:4a:06:71:2f:61:1f:f0:98:b8:4f:bb:6f:3e:
33:d9:0d:4e:8a:22:c4:11:ce:28:e7:21:72:13:ca:
ae:fe:9d:5f:94:a6:b4:2b:7a:e0:48:79:a7:c8:07:
b5:22:bd:ae:12:8a:9a:01:49:31:ca:1a:ac:41:14:
15:16:75:4f:44:c0:a1:a5:95:1d:0c:d2:27:0a:8d:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CF:74:B7:1E:0B:4A:8F:BE:65:14:BA:31:28:98:C7:64:B1:F1:24
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:cb:eb:07:5f:84:76:9f:00:23:ba:e0:84:ea:c3:3d:93:b7:
b4:6e:ff:92:6b:d6:c9:76:f1:97:50:8f:05:c1:4e:15:a6:09:
6d:a2:62:6f:32:4c:fb:55:34:e2:24:fe:00:5d:f8:30:63:73:
ab:30:b2:41:ad:a1:39:b0:d2:42:1c:7f:1a:f3:0f:45:26:27:
e8:bb:ca:92:21:bd:b2:9e:26:57:0b:09:e8:cb:ed:a3:83:0d:
6d:14:1d:1c:30:71:8a:ca:c4:88:f5:ff:fe:f6:f5:20:d3:65:
e9:3d:a9:15:45:ff:67:31:9c:70:b8:c6:d9:7b:87:8c:2c:ba:
b5:50:7a:27:87:b6:f0:7c:6b:a7:46:be:24:36:71:94:7a:5e:
e1:e7:1a:fc:3d:07:59:fe:b0:b1:26:60:50:07:d4:5e:05:65:
ee:99:40:ad:96:80:2f:86:83:63:2e:ef:c5:b0:e5:46:8e:56:
2f:37:f2:ce:c6:16:80:69:61:f7:f6:41:14:e5:b6:08:4b:e9:
f5:31:0d:c9:18:4a:9d:40:71:72:00:92:56:27:d6:ac:3d:bd:
66:79:cb:72:01:3f:70:05:fa:10:5f:71:83:ef:cf:e5:76:27:
48:b6:e6:ad:71:ad:5d:a3:71:ec:14:50:b8:76:19:4c:b1:15:
4b:ca:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:50:01 2025 by rpki-client