Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: Ys2P80buuIBniiYB/GXOrU+QaW/OQA72N5XR3c/5uo0=
Subject key identifier: 42:49:97:B1:16:C3:22:2E:A4:87:C5:20:A0:07:19:4F:D0:49:9A:00
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 01988A69BB26546D659DE1EA1DB09B6096D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 15B6
Signing time: Fri 08 Aug 2025 16:00:41 +0000
Manifest this update: Fri 08 Aug 2025 16:00:41 +0000
Manifest next update: Sat 09 Aug 2025 16:00:41 +0000
Files and hashes: 1: 4ifvOXlGTcvZkDl3bBHXClzFH5s.roa (hash: shQ9uYhnduluD4hyOhrNavJbF1LlnObbpGDGnRChGIc=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: JFKi7tpFK715Btrtduu9IzK7N6XqlnbZH1mJcTg2Q1o=)
3: SIC0wWMpDwMCH170jWGV4n8YVKg.roa (hash: 11XuYsn3Bm92vB4Wx8w/k47zF7w2waOFdbevLO5t4Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:69:bb:26:54:6d:65:9d:e1:ea:1d:b0:9b:60:96:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Aug 8 16:00:41 2025 GMT
Not After : Aug 9 16:00:41 2025 GMT
Subject: CN=424997b116c3222ea487c520a007194fd0499a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a1:58:3c:9f:68:de:3b:7f:6b:b6:9a:63:3f:
99:b1:38:91:a7:fa:29:91:22:a2:e2:a9:59:38:4b:
d0:17:39:65:3b:08:d9:38:fb:c8:ba:b8:dc:a9:19:
de:aa:1c:e8:24:e6:19:f6:30:da:71:b0:ef:19:b3:
1f:d1:1c:8c:48:53:31:cf:b7:22:d1:92:ce:43:b0:
70:c1:27:5b:91:97:5e:9b:f2:2f:6d:bf:34:51:28:
9b:15:cd:02:fc:8c:5f:8f:4c:d0:d4:19:05:ad:c9:
ed:6c:0f:dc:66:08:fb:19:66:c1:50:07:ad:52:3f:
79:8f:a7:f0:49:ff:d0:e1:8b:47:6b:56:b2:40:f9:
06:a1:16:70:45:21:e0:ed:30:56:c2:53:56:fa:bf:
0a:56:91:bc:bf:de:b7:52:e7:16:f0:eb:e4:88:71:
50:a0:6b:bb:09:a7:91:9b:08:8d:38:72:2e:9a:4a:
16:ee:7a:43:e4:11:b2:e9:2e:a1:bb:ef:03:a9:b8:
d3:07:cb:b2:08:09:f0:34:4c:93:82:24:67:55:d3:
46:64:50:20:87:b9:cb:a0:33:a9:b1:97:14:b3:79:
7e:a6:ac:d1:e6:85:cd:9b:06:52:cf:91:91:63:6b:
6a:f3:42:de:be:80:a0:3b:9b:5f:14:25:5d:38:3e:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:49:97:B1:16:C3:22:2E:A4:87:C5:20:A0:07:19:4F:D0:49:9A:00
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:17:78:0b:c1:47:44:ff:a9:3e:2b:55:2e:e4:f0:90:80:a4:
a7:fb:47:8a:00:72:58:ac:21:c9:a6:7c:aa:e8:68:7d:30:a8:
3c:c5:8a:c5:ab:60:c8:db:7c:87:13:44:c4:60:4c:d8:3f:d0:
ab:da:75:5f:1e:d7:63:c1:30:1d:bd:06:37:cf:0a:d5:b8:5a:
3f:a7:f7:ef:d2:5d:4c:9d:96:2f:87:55:eb:5b:f6:75:ec:21:
55:ed:40:59:a2:da:7d:69:e7:19:f1:03:cc:5d:26:5a:88:90:
e7:6c:16:1b:67:bd:19:45:ff:32:f1:02:b8:55:fc:75:ef:9d:
e7:48:2a:0f:ef:73:69:3f:b6:b1:e8:79:8c:91:ee:de:73:5c:
ca:fa:20:37:3f:54:2d:81:8d:f9:3e:54:12:0b:55:b4:e5:9d:
71:45:ec:15:30:6e:a1:3d:bd:23:d7:87:84:c1:00:bd:d6:f9:
51:ac:3e:97:5e:88:6f:14:ed:a1:fa:be:75:b1:5c:7b:88:d9:
5b:5e:bc:51:b4:b1:a6:bb:3c:ed:38:66:f3:49:db:05:75:38:
71:48:c4:47:8b:82:b2:78:40:d5:93:fd:c1:09:c8:c4:ba:0b:
4d:60:76:43:1c:ed:db:ae:89:b1:a5:61:87:5b:b6:e1:8a:0d:
3a:f0:f9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:43 2025 by rpki-client