Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: YnM/RgbQAjoWVXBdvh0x4MBKs63mBPQRRM5Szh7u48I=
Subject key identifier: 0C:C6:8F:AD:EE:23:31:68:C7:10:30:94:8E:E3:EE:37:92:74:B1:1B
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 0196718A7DA694E5C439E845EBCE2B79C749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 14A0
Signing time: Sat 26 Apr 2025 10:00:23 +0000
Manifest this update: Sat 26 Apr 2025 10:00:23 +0000
Manifest next update: Sun 27 Apr 2025 10:00:23 +0000
Files and hashes: 1: 4ifvOXlGTcvZkDl3bBHXClzFH5s.roa (hash: shQ9uYhnduluD4hyOhrNavJbF1LlnObbpGDGnRChGIc=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: 7w1JViUcZwRWkQ3viHjchCMmOC8wtzqyDuMQIrKSsYM=)
3: SIC0wWMpDwMCH170jWGV4n8YVKg.roa (hash: 11XuYsn3Bm92vB4Wx8w/k47zF7w2waOFdbevLO5t4Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:8a:7d:a6:94:e5:c4:39:e8:45:eb:ce:2b:79:c7:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Apr 26 10:00:23 2025 GMT
Not After : Apr 27 10:00:23 2025 GMT
Subject: CN=0cc68fadee233168c71030948ee3ee379274b11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a4:e3:6f:c4:8d:4f:7e:47:0c:ff:fc:a6:b5:
8e:3b:59:50:ed:fb:d8:b7:ae:9d:21:17:16:a6:19:
10:5d:f8:52:95:18:6b:9d:9a:59:00:23:24:e4:08:
bc:b7:d8:42:63:d5:ad:82:64:19:84:8e:0f:70:ab:
80:b8:86:28:8c:c6:4c:9f:fc:8c:24:6d:17:cc:f7:
58:54:1f:7e:1b:7f:84:df:0f:e3:0b:d8:b6:15:0a:
e4:45:52:30:1b:48:80:bb:21:c7:ac:09:cb:39:8d:
0b:5e:f9:3a:26:06:9a:25:f2:1a:ad:91:2f:9f:3a:
ea:37:55:e6:12:82:5a:94:35:f8:f8:15:6a:a6:41:
06:0a:e4:f4:70:ca:1a:56:72:7c:05:db:5b:7f:8c:
d1:b7:11:aa:e1:87:e4:a4:89:e1:b4:dc:e0:40:87:
c8:d7:e6:ec:6d:38:a0:a5:0a:14:d3:67:b6:00:f6:
aa:43:6b:32:f5:3e:79:02:9a:e6:ac:78:42:13:47:
33:4f:fb:8d:06:b5:94:ae:2a:cb:8c:58:e0:a6:b3:
3a:c7:41:ea:c0:2e:35:e9:b4:cb:6b:db:fa:80:1e:
ab:c2:e0:4c:6a:46:76:5a:01:8f:21:d6:79:77:61:
52:64:a3:50:06:64:d3:20:dc:a8:1d:cb:17:ed:ad:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C6:8F:AD:EE:23:31:68:C7:10:30:94:8E:E3:EE:37:92:74:B1:1B
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:99:73:e9:9c:98:89:84:88:e8:06:da:ff:5f:bd:fd:b7:08:
5d:df:a9:be:87:4b:cf:4d:21:37:64:7f:f1:bc:29:8f:51:20:
6c:44:32:53:b1:06:00:7b:23:8d:f9:43:53:bf:c4:7a:12:8a:
e2:09:39:ab:af:b7:e7:de:93:d3:30:a5:45:8d:80:ec:a7:28:
1d:05:f3:0c:a7:28:24:db:6b:62:28:16:e8:c1:f1:2e:fa:1f:
a0:2a:39:fc:b7:87:43:eb:2d:71:88:c3:68:f8:58:66:28:12:
93:51:e6:34:34:4c:c4:3d:6b:82:b5:d1:b7:42:6b:86:88:4d:
60:7c:ba:18:ae:a0:4c:9f:da:92:a6:ed:74:08:a0:2d:8c:7d:
2c:b6:12:ee:5b:a3:92:26:42:c5:e1:42:7c:a5:b3:e7:12:9a:
21:ff:9b:5e:e8:28:8e:5d:0b:87:fb:60:35:2f:91:d4:b5:69:
c4:de:98:82:49:b5:9a:51:4a:0d:71:3d:b3:d7:29:5b:9b:28:
13:7b:70:58:56:79:37:c8:75:8c:e3:c9:3c:27:38:ee:2d:c8:
82:dd:f6:75:59:2a:3b:fe:a6:b1:77:d9:40:86:d7:ad:95:6b:
97:87:bf:aa:dc:10:88:c6:e6:2a:9e:68:a6:02:e0:57:10:c8:
cd:00:2b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:08:35 2025 by rpki-client