Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: 6B3C57sKeZFJkOZ4TbIY5QBpCZm1Foih2Zif0a2nlys=
Subject key identifier: ED:82:67:47:A2:3D:5A:9A:CF:67:4C:C5:B2:45:16:91:08:EC:7D:57
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 0199FD34523AD45471B177D2BE064F2B11EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 1676
Signing time: Sun 19 Oct 2025 16:01:28 +0000
Manifest this update: Sun 19 Oct 2025 16:01:28 +0000
Manifest next update: Mon 20 Oct 2025 16:01:28 +0000
Files and hashes: 1: 4ifvOXlGTcvZkDl3bBHXClzFH5s.roa (hash: shQ9uYhnduluD4hyOhrNavJbF1LlnObbpGDGnRChGIc=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: u+t41149VNRrdi9PZYgTRe5dsJAGl3YxkdaTZAwwjrU=)
3: SIC0wWMpDwMCH170jWGV4n8YVKg.roa (hash: 11XuYsn3Bm92vB4Wx8w/k47zF7w2waOFdbevLO5t4Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:52:3a:d4:54:71:b1:77:d2:be:06:4f:2b:11:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Oct 19 16:01:28 2025 GMT
Not After : Oct 20 16:01:28 2025 GMT
Subject: CN=ed826747a23d5a9acf674cc5b245169108ec7d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:97:02:98:46:1f:b9:9d:11:7e:37:e8:c5:
19:aa:41:a3:d9:3d:ea:31:c9:d9:e2:cb:58:70:26:
f7:13:a8:ad:05:78:e2:a7:79:6e:38:3c:42:b2:44:
c3:3c:83:90:ce:c8:7a:d2:3a:86:3d:36:87:de:fb:
5b:7c:7c:5e:c5:0a:3d:5f:a4:15:44:a2:a3:a7:77:
58:3c:5f:99:41:d7:d0:86:6c:17:9d:87:ab:6e:9f:
6c:2b:95:dc:9c:63:37:39:b0:22:49:d1:84:e5:d9:
20:aa:06:e0:cf:30:5c:d4:17:30:37:50:62:6d:0f:
b7:c6:ae:f5:65:15:88:7b:46:b5:fb:df:1e:c3:6d:
c7:57:89:5d:e2:32:55:d3:0b:4a:99:16:aa:cf:c6:
c4:af:b3:b9:55:47:fd:33:b5:eb:3a:a6:b6:fa:bf:
2a:03:4a:de:59:51:d0:a8:a2:75:4e:8c:be:b1:7e:
d2:9f:23:97:be:90:ae:93:f1:1b:e7:ae:cd:03:7b:
3c:69:95:20:5c:43:7d:8b:68:66:04:0a:24:fb:6c:
02:55:f2:d5:bc:a1:df:27:99:b6:27:6a:49:44:9f:
a4:05:ac:f9:27:95:98:ec:16:8d:fb:0f:bc:78:86:
83:fc:47:53:89:41:84:fb:4d:21:d0:58:ab:73:56:
29:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:82:67:47:A2:3D:5A:9A:CF:67:4C:C5:B2:45:16:91:08:EC:7D:57
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:78:dd:4a:4b:ba:d9:80:fc:3d:39:f1:35:76:33:38:43:2e:
62:21:3c:c6:31:56:e1:64:25:9c:5d:68:ba:fd:c5:d8:4a:b5:
45:ec:34:1d:37:0c:93:5a:f7:58:fe:d0:96:83:93:25:2f:b7:
98:0e:bc:d9:02:21:9d:39:f2:e0:02:d6:50:33:73:4e:08:b0:
6e:86:2f:16:78:b0:93:8b:aa:85:80:d1:91:d6:59:13:22:55:
d9:f5:7b:1f:5f:d4:fc:ed:6c:29:25:c0:7e:5f:ee:2f:ab:f9:
6b:81:ce:ee:6d:4a:f0:d3:21:d3:65:4b:6a:53:ec:bb:ab:eb:
3d:27:6f:83:13:15:43:9f:6b:f4:18:e0:d1:b8:a2:64:ca:fb:
5b:27:e6:2c:5c:8a:b7:dd:00:fc:9b:19:5a:f3:10:a3:49:e1:
e7:a9:99:56:99:a2:e4:b0:97:b8:d8:91:21:99:67:81:77:c8:
c0:9f:ee:60:69:f4:85:31:ea:ee:e0:cf:af:68:d4:5d:93:b0:
11:93:00:0d:be:56:e9:a7:3e:10:28:a2:71:b6:c4:e3:44:84:
00:9b:06:06:5e:56:cf:3e:a0:68:33:60:08:7c:9e:1f:3f:95:
06:fc:c9:dd:b3:8e:45:0b:a4:dc:e4:e0:dc:30:d9:99:d1:64:
d1:dc:90:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:30 2025 by rpki-client