Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: SnqUMyKCTyd4L3H0rX1dPiHUWmQSUahvrKgXf4Luaps=
Subject key identifier: B9:47:11:C0:E0:FB:7D:2B:12:BA:D3:55:78:F8:08:FE:F1:9C:11:2F
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 0198D54E7DD39E655074CA3C32E763A5D4EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 05:02:27 +0000
Manifest this update: Sat 23 Aug 2025 05:02:27 +0000
Manifest next update: Sun 24 Aug 2025 05:02:27 +0000
Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: Y58vQWUCznzvoJcOAoK4P/5GHfVwt7O/2LSx665O6zs=)
2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=)
3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:7d:d3:9e:65:50:74:ca:3c:32:e7:63:a5:d4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: Aug 23 05:02:27 2025 GMT
Not After : Aug 24 05:02:27 2025 GMT
Subject: CN=b94711c0e0fb7d2b12bad35578f808fef19c112f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:64:6c:4f:6f:e1:cf:b6:97:aa:61:d3:33:
2a:3d:5b:53:33:51:17:a1:d1:d4:83:3e:0d:83:b6:
86:fc:43:f6:cc:78:a4:c7:55:f3:fc:9f:e3:84:49:
0b:66:89:22:6a:09:67:30:7c:d3:13:6c:75:1b:e3:
3d:f4:eb:13:f8:ed:b0:37:f4:4f:2f:0c:48:66:f6:
fd:af:09:d9:52:df:7d:21:1e:b6:68:89:05:f0:bd:
ee:31:2b:b1:61:6a:23:a1:43:30:0c:99:7a:3d:f8:
ce:1f:58:58:97:48:5a:57:b1:2c:51:5d:a9:65:2f:
5c:1d:23:8a:07:b5:18:77:c0:df:d9:ad:59:44:64:
bf:3f:c6:9a:e4:dc:17:b4:45:34:78:df:bf:da:85:
e3:cd:84:57:db:4f:c4:e4:09:24:22:23:22:60:01:
ca:b0:e7:82:fe:20:a0:48:4b:de:cd:f0:12:7e:1a:
6d:58:64:17:02:eb:ea:63:4a:9f:37:ff:7a:a0:0d:
cb:9e:08:fd:e0:49:f2:27:c6:49:82:cb:e4:f3:b9:
20:57:26:6a:77:df:63:72:d5:78:a2:65:23:2a:28:
72:45:cb:cc:1a:84:43:eb:64:ef:2e:f2:51:d8:ae:
cb:7a:49:bf:88:ab:ac:b2:d9:df:54:dd:97:31:ab:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:47:11:C0:E0:FB:7D:2B:12:BA:D3:55:78:F8:08:FE:F1:9C:11:2F
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:97:fa:8b:6a:03:6c:d0:76:a7:01:af:da:7b:5d:d6:d9:3a:
16:5f:75:0c:35:d4:37:6c:b3:c1:ed:0c:0e:bd:e0:96:b6:d4:
39:36:bb:a0:0f:d3:37:85:56:0a:77:10:61:94:42:8f:29:ab:
3a:6c:d0:88:96:5a:5b:0f:10:ea:b6:4a:53:f5:1e:a3:f1:ff:
63:c7:f5:2d:07:44:99:32:bd:c7:0e:fd:54:6e:4b:2b:a9:bd:
2c:96:53:22:8a:24:1a:cd:ad:cd:e2:2c:f4:b2:08:78:f0:af:
e1:b3:28:d6:39:8f:4b:f6:95:0e:5b:75:04:eb:d7:cd:88:27:
05:2b:e5:8a:1a:a9:d8:c5:cb:30:1d:70:1d:ed:e1:1c:0c:89:
12:8f:bb:b9:55:45:2f:37:b1:f0:33:04:ba:3d:8b:ff:45:6d:
a3:5b:ff:9f:a4:b8:6c:a3:73:d3:5b:7a:29:a1:1d:7c:1f:56:
d0:d0:52:29:4c:d0:f1:5a:64:62:90:3e:00:9e:a4:10:87:e0:
79:91:07:b9:0f:0a:db:50:c3:f8:40:53:d3:89:7a:09:61:de:
3b:f2:4f:28:a3:33:90:22:e7:24:44:17:b2:19:c3:f2:b8:f5:
b3:d4:49:c2:67:8d:87:7e:a3:4d:c7:a3:c0:72:39:07:77:d9:
a8:19:88:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:10 2025 by rpki-client