Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: q+v3GgrjLdXtwAHjJK8D8u4OddS0TB8OdVClkaYkeSg=
Subject key identifier: 98:D6:1D:05:D5:20:7F:DD:01:1D:23:A9:83:BE:74:AB:1D:D4:37:01
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 01989592F6C68EFB84CE9820121EF7E67047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 162B
Signing time: Sun 10 Aug 2025 20:01:33 +0000
Manifest this update: Sun 10 Aug 2025 20:01:33 +0000
Manifest next update: Mon 11 Aug 2025 20:01:33 +0000
Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: ET1x7D1jCmlFzH111GW5d+zWZ7Zcm2cD1F//ZQ5rb84=)
2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=)
3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:f6:c6:8e:fb:84:ce:98:20:12:1e:f7:e6:70:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: Aug 10 20:01:33 2025 GMT
Not After : Aug 11 20:01:33 2025 GMT
Subject: CN=98d61d05d5207fdd011d23a983be74ab1dd43701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3c:1b:1d:58:1b:26:b8:cd:b2:88:b4:f2:68:
ec:6a:e8:b1:23:d6:e2:01:d2:92:30:b4:a6:d1:db:
5e:dd:4e:aa:4f:46:1a:d0:e1:0b:c2:54:fe:4a:8b:
5d:02:50:be:72:53:5c:4e:50:59:1c:fd:3c:58:f4:
90:fe:c3:d7:50:0c:4a:7d:6d:a1:fe:f9:64:0e:a8:
3f:18:78:e8:44:b7:81:0f:5d:a9:66:76:64:cf:eb:
4e:9e:71:c9:e2:41:fd:45:9a:bf:ea:0b:2d:52:6e:
ab:52:34:a5:3b:d6:48:6c:a6:37:b2:c5:23:f5:cc:
54:3d:2b:19:9a:6c:aa:e8:06:fd:ba:ed:a5:cd:58:
93:76:c4:35:61:c6:c6:70:52:11:11:7e:c3:e4:b9:
a8:b9:3e:f2:4a:63:0d:6b:65:64:31:89:24:38:a7:
48:d3:61:e9:c7:f5:eb:42:d3:dd:5e:ca:96:33:e3:
85:59:0a:51:84:b1:a8:ea:e3:8a:60:3c:14:64:93:
0d:d8:cc:12:75:9c:0f:3e:e2:52:8b:91:53:a1:43:
7e:b4:d4:41:aa:ca:bb:13:ca:a7:b9:81:fb:79:0d:
ff:54:2b:9a:8c:86:6f:39:92:92:e2:c4:c3:ff:d8:
b1:ba:e7:9c:53:3c:14:a2:66:19:ba:c4:38:9c:37:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D6:1D:05:D5:20:7F:DD:01:1D:23:A9:83:BE:74:AB:1D:D4:37:01
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0a:dd:4e:83:b0:52:eb:a2:06:e6:f4:3f:df:d2:30:fa:47:
96:72:7f:d6:ca:94:2a:df:b5:86:0e:0f:56:0b:27:09:34:e9:
b2:87:11:53:82:5c:1b:09:a3:94:c3:f2:d7:b6:a6:47:71:fb:
72:19:95:1f:c7:e5:84:39:eb:35:0a:30:dc:86:26:31:f3:4c:
4e:2f:19:ae:25:87:01:cf:49:68:76:96:7a:b9:bf:c3:4e:21:
4b:35:cc:ed:39:73:6a:00:d7:06:e4:7f:9a:5c:9a:bb:43:bb:
bb:fd:28:c8:1b:21:a3:42:9a:90:09:1a:3a:fd:5f:b4:8e:38:
99:e8:15:a8:16:ce:24:10:f2:67:71:42:6f:2c:c4:bb:cd:b4:
ca:4a:be:3e:6d:a0:32:42:a5:70:51:5a:95:21:48:76:77:00:
15:60:7d:69:06:15:15:c6:66:30:84:bd:cf:5c:a6:62:0c:47:
2e:3c:ac:45:72:de:d9:64:02:a9:25:17:19:5b:8d:dd:be:b9:
47:d4:dd:5a:9b:6a:f6:99:24:40:88:a6:d0:7b:92:30:c8:2d:
86:d6:66:f5:83:e0:08:41:c3:e1:8a:79:bd:2a:b5:99:b2:07:
d0:8e:9f:b4:3a:a5:df:0a:e4:68:42:e3:c0:99:fe:f8:84:2c:
69:9b:99:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:04:24 2025 by rpki-client