Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: 9l4zL4aJAsB6Liku7DqkPQqGqa0a81P1Dy/fThMJdkU=
Subject key identifier: BE:D0:6E:F0:82:3D:75:98:6C:C4:63:4C:33:33:3D:30:FE:EF:AE:AB
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 019A4DE1F21CA617D629016C66A151FAA0E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 08:00:44 +0000
Manifest this update: Tue 04 Nov 2025 08:00:44 +0000
Manifest next update: Wed 05 Nov 2025 08:00:44 +0000
Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: JeclqTBXFQ+eYKkY1A/864LbwjRqYH3XlUUL8tkrLKE=)
2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=)
3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f2:1c:a6:17:d6:29:01:6c:66:a1:51:fa:a0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: Nov 4 08:00:44 2025 GMT
Not After : Nov 5 08:00:44 2025 GMT
Subject: CN=bed06ef0823d75986cc4634c33333d30feefaeab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b1:8a:61:2e:d6:57:e9:84:7c:49:34:28:f8:
17:e2:82:16:ef:e0:22:bf:6e:d7:71:4f:b0:27:bd:
4d:83:f6:23:2c:c0:3e:cc:31:29:91:e0:78:d4:84:
4f:59:c2:ab:27:60:d5:8a:e8:1e:ab:c7:1b:2e:fd:
6d:c2:7f:f6:0e:8d:88:f7:1c:06:7b:0d:83:b5:4a:
2c:14:00:ba:3b:4f:f9:14:61:fe:c5:8a:bd:c4:96:
2a:70:71:dc:44:fc:28:d7:76:b0:c5:29:32:cd:48:
bd:e1:b9:2a:98:65:00:7d:0b:8f:1b:46:32:bf:37:
41:36:a5:2a:f8:8b:70:a6:34:95:2e:67:4c:36:25:
d3:b4:4f:b5:a4:0b:f7:7f:db:27:01:0c:bd:6c:c1:
c2:e7:6a:6b:9c:28:2d:c7:57:87:b7:21:fd:84:e3:
29:0a:11:2a:b5:cf:8a:26:d8:4c:1a:e2:11:1a:90:
be:55:08:ee:6a:a7:a8:a9:de:56:55:0b:f9:75:f7:
94:28:b2:d9:63:c1:d2:1a:97:c4:ac:cc:74:3f:de:
76:ca:c1:25:5f:05:9b:d8:0d:12:f8:24:e0:4f:c0:
2a:b1:56:ff:e0:94:6a:12:04:3a:bf:77:db:9a:87:
be:16:8e:d8:7c:9f:aa:1c:62:e2:f0:89:a9:da:4a:
c5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D0:6E:F0:82:3D:75:98:6C:C4:63:4C:33:33:3D:30:FE:EF:AE:AB
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:1a:88:2e:65:42:f4:31:82:83:90:af:5b:6f:14:92:82:a4:
d8:00:2e:97:bb:a3:b9:e7:ef:0e:b2:77:35:e5:62:4d:37:42:
a9:c6:67:b5:60:f5:87:ec:77:f1:19:c2:f6:e6:8a:15:73:9f:
a9:52:67:fe:e0:92:c6:d7:ce:94:1f:4f:9f:17:cd:ec:f1:02:
0e:00:98:26:33:ac:54:87:95:70:46:7f:d9:80:50:3d:70:b5:
3a:fd:7e:84:53:b0:fc:7e:24:d1:fb:a1:a2:41:5d:bf:4a:da:
0b:8a:19:0b:0e:d3:fd:19:cc:28:fa:20:09:cb:60:2f:8a:74:
5f:a7:6d:4a:5f:97:3d:17:21:7d:eb:7f:5c:0e:57:b4:d5:48:
11:e5:78:c1:0d:c1:c7:5b:68:77:69:5a:be:35:6f:b7:d2:a3:
bc:86:c9:ba:07:6d:5f:62:cc:6a:d9:67:40:bd:77:bf:53:34:
3b:d4:af:9e:aa:e8:a3:d1:a1:21:27:d5:82:cc:25:57:e4:08:
13:9c:d6:5e:ae:2b:e9:4a:5c:6a:b0:49:04:26:2c:03:02:65:
d8:9e:c9:7d:f5:d4:c6:2d:54:0c:dc:95:b1:d0:6b:2b:8d:5f:
16:0c:75:ce:4e:2c:79:2d:11:f1:c9:e5:d7:30:f1:e0:6a:dd:
4b:42:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:38 2025 by rpki-client