Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: 5x33UnLy/okPHRN7o4L2CzobfeeDi58ncVgK5Dfur1c=
Subject key identifier: C9:7B:69:FB:E4:64:E4:20:2A:27:83:3C:4A:7E:90:BE:8C:02:41:D0
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 019A4EF5266C1B3A1FC54A9A4C635E045747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0C61
Signing time: Tue 04 Nov 2025 13:01:20 +0000
Manifest this update: Tue 04 Nov 2025 13:01:20 +0000
Manifest next update: Wed 05 Nov 2025 13:01:20 +0000
Files and hashes: 1: NRZRBzkHeQf0inm9C38j74IG3bQ.roa (hash: IhzcvideV20rsOk9qK71z5e+p8/QDxcnP4qjNz1cRxM=)
2: Z0vebwduFrdGsE_iH8mJSQRQtcA.roa (hash: RqX2X64oTENUb7eOcZCl0TrlwK76jUVfDOAyoAGIoKI=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: bhacI6aD/r6B3RyA37XvOORq+W1tDqx7Uw6mLOJAuPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:26:6c:1b:3a:1f:c5:4a:9a:4c:63:5e:04:57:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Nov 4 13:01:20 2025 GMT
Not After : Nov 5 13:01:20 2025 GMT
Subject: CN=c97b69fbe464e4202a27833c4a7e90be8c0241d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:c2:49:b1:4a:f4:2d:56:9d:40:30:b6:f3:
9d:99:83:bf:2f:a4:21:15:b8:9b:d1:9c:39:67:19:
7d:7f:4e:8d:0a:de:8b:cb:ee:56:71:ed:be:95:e0:
91:84:31:b4:84:c0:d3:43:b8:49:a6:39:a7:8d:f5:
88:9c:65:69:55:e5:f7:14:b9:de:52:43:8d:8a:37:
3a:fc:1b:e7:b7:48:c3:5c:30:7d:78:3e:a9:77:f0:
53:97:57:27:d7:ee:cf:00:59:2a:d3:20:5b:07:7d:
3d:f4:8a:d8:6e:1b:8a:45:46:ae:a0:c6:b9:2e:e0:
58:65:a5:22:1b:29:d8:68:d6:8a:f1:2b:2a:75:44:
4f:94:a9:9a:38:30:0d:1e:6a:b8:a5:cc:24:13:6e:
39:7d:47:37:0a:c6:2c:78:cd:fa:3c:0d:81:bc:c2:
0e:3c:50:1b:48:06:1b:30:ce:3d:25:4c:a7:98:01:
55:dc:8d:c5:4a:6d:32:18:6c:f6:a0:82:d2:01:7f:
51:d2:b2:7e:a4:0b:2a:e0:2f:e5:a0:12:41:95:fd:
09:47:bb:ec:32:4f:85:f0:5b:c1:11:af:54:e3:4a:
81:bb:f0:94:4d:53:25:c3:47:43:40:2f:35:1a:02:
57:43:01:65:2c:69:2d:f1:d6:32:08:da:be:91:35:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7B:69:FB:E4:64:E4:20:2A:27:83:3C:4A:7E:90:BE:8C:02:41:D0
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d0:0f:99:0e:e6:42:07:3c:33:72:fc:23:b0:b1:4e:17:40:
76:e5:bf:cf:05:90:59:d5:08:85:46:89:55:f0:00:31:21:fb:
c4:52:6b:dc:a7:33:d8:fb:1a:fe:42:e7:a5:46:14:26:c9:3a:
9e:2e:8c:82:22:d7:73:4e:38:43:55:60:aa:70:c2:c7:98:7e:
dd:d2:c3:2e:c5:7b:77:15:be:de:3d:f9:01:d7:97:d9:92:6c:
51:04:db:28:b9:17:5b:62:29:69:81:8f:42:4b:6f:e3:98:5c:
88:4f:ca:a5:98:81:07:83:b4:b8:e5:3d:f3:c8:25:f4:39:3e:
0d:bc:c3:23:aa:42:57:b9:22:97:8e:70:2c:a2:14:30:b9:22:
77:5c:86:bd:07:7d:7e:4d:8f:40:ec:4b:ba:de:46:09:bf:8e:
35:15:50:37:cf:74:fa:23:91:8a:09:2b:4a:85:25:20:51:0b:
91:91:ff:0e:5f:7e:97:de:37:13:c3:df:e3:04:90:b4:63:6a:
d0:09:78:38:33:44:8d:34:22:cc:9c:29:60:17:6c:78:95:46:
fa:4f:d3:a3:58:5b:48:83:01:22:90:9d:b9:ca:c4:ae:37:b8:
65:63:ca:3a:f4:a8:d1:d6:4c:0e:2e:a4:d4:34:0b:b3:f1:c0:
90:18:c4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:27 2025 by rpki-client