Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: nPBfsZ4wUTP88+VbmZzBLBr3lG+EqtBJla+7SzQJ61I=
Subject key identifier: 62:E3:BE:00:7C:9D:73:D1:34:28:F5:6D:E9:ED:4F:1F:44:8B:FC:FF
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 0197B77C1AEAECF4E4123EFE2DC6D7E25874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:00:53 +0000
Manifest this update: Sat 28 Jun 2025 17:00:53 +0000
Manifest next update: Sun 29 Jun 2025 17:00:53 +0000
Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: 0tmV42DsA0dy/T3R8TbIEc5Ysh0wa57vqNmS/BVoNFo=)
2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=)
3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:1a:ea:ec:f4:e4:12:3e:fe:2d:c6:d7:e2:58:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: Jun 28 17:00:53 2025 GMT
Not After : Jun 29 17:00:53 2025 GMT
Subject: CN=62e3be007c9d73d13428f56de9ed4f1f448bfcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:d7:e2:34:f6:08:0f:b9:c9:3d:5e:0a:a4:
6e:0d:05:aa:47:b3:af:b8:76:80:51:64:50:19:4f:
cb:a1:da:e5:ce:a8:4b:40:4d:7e:a3:74:38:b8:64:
c1:45:dc:34:19:53:1c:f3:60:56:63:f9:3d:fa:3f:
01:42:f2:2f:60:59:16:3a:2d:d4:d2:95:29:8f:2d:
26:5d:04:a5:13:67:e5:e8:01:73:5d:f7:41:0d:b4:
13:bc:64:c4:a6:af:23:2f:04:20:42:9d:51:3f:ed:
54:2b:87:7f:be:07:d7:50:7b:6d:46:c4:08:8f:5d:
c4:28:c7:34:fb:91:d4:7e:46:98:6d:26:17:00:11:
33:e2:dc:26:5d:89:94:56:f5:03:be:f9:79:6e:24:
f4:c0:f0:4f:11:f7:0e:05:c3:e0:ad:df:1b:8e:fb:
c4:c9:0a:47:b3:e4:ab:c7:76:24:f7:8c:6f:47:bf:
d0:0c:35:fe:3c:1e:2b:89:54:42:c6:69:de:fc:f3:
5b:54:ca:56:33:af:48:64:40:e3:b5:c1:ee:65:c4:
4d:76:e6:6d:e2:6a:85:40:4c:c1:b5:95:c4:db:ec:
d3:2d:fb:4c:db:41:53:e1:06:b8:f9:27:f0:d4:22:
17:59:48:2b:c1:91:4e:06:44:f3:12:36:f2:b3:a8:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E3:BE:00:7C:9D:73:D1:34:28:F5:6D:E9:ED:4F:1F:44:8B:FC:FF
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:71:84:c0:48:e8:c6:a3:bf:24:96:b1:47:71:1c:a9:7c:8f:
24:ff:d3:42:41:85:1a:40:e1:9e:a8:cb:ac:06:dd:a6:8b:f2:
8f:2d:f4:d6:c9:3d:95:dd:d2:1d:1a:31:88:9a:9e:ba:95:30:
ad:6d:55:d5:16:ce:22:2a:92:00:55:ff:dd:58:29:a1:ab:bb:
1a:c2:fa:ef:59:50:ec:00:ac:80:86:19:7c:b1:92:36:f6:ff:
4d:e0:62:5b:09:2f:94:92:a0:7f:b9:f3:2a:2d:1e:45:52:ef:
12:c0:f6:99:e0:a8:e3:bf:7a:84:3f:8e:45:7c:bd:3c:9e:54:
0a:d8:df:8c:9a:f2:cb:46:9a:1f:6f:f6:1b:6d:c3:4b:b0:22:
33:82:04:47:61:57:58:85:fd:fd:23:23:56:b9:e8:4d:d3:f3:
54:6d:fa:8c:a7:18:0a:95:d8:1a:2f:f1:f3:47:0e:ce:12:c4:
62:d3:6e:61:10:27:18:c7:fc:92:84:f8:ad:b2:b5:ec:30:b7:
b0:f6:a2:f5:46:05:38:ed:fc:f8:38:b7:09:5d:9d:d8:2d:b8:
a2:59:d9:e3:29:aa:f2:f9:43:9d:c1:c7:46:24:15:d4:da:90:
63:49:50:c0:85:b6:10:da:ff:96:9f:4f:c2:7a:1a:a3:6b:95:
f2:7a:72:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fBrq7PTkEj7+LcbX4lh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ODE1Y2ExNWQ3MmE1YTY5NmY4YmNkZjQ4NmY1ODAxOTY2
NzcyYmIwHhcNMjUwNjI4MTcwMDUzWhcNMjUwNjI5MTcwMDUzWjAzMTEwLwYDVQQD
Eyg2MmUzYmUwMDdjOWQ3M2QxMzQyOGY1NmRlOWVkNGYxZjQ0OGJmY2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLHX4jT2CA+5yT1eCqRuDQWqR7Ov
uHaAUWRQGU/LodrlzqhLQE1+o3Q4uGTBRdw0GVMc82BWY/k9+j8BQvIvYFkWOi3U
0pUpjy0mXQSlE2fl6AFzXfdBDbQTvGTEpq8jLwQgQp1RP+1UK4d/vgfXUHttRsQI
j13EKMc0+5HUfkaYbSYXABEz4twmXYmUVvUDvvl5biT0wPBPEfcOBcPgrd8bjvvE
yQpHs+Srx3Yk94xvR7/QDDX+PB4riVRCxmne/PNbVMpWM69IZEDjtcHuZcRNduZt
4mqFQEzBtZXE2+zTLftM20FT4Qa4+Sfw1CIXWUgrwZFOBkTzEjbys6hPOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLjvgB8nXPRNCj1bentTx9Ei/z/MB8GA1UdIwQY
MBaAFEaBXKFdcqWmlvi830hvWAGWZ3K7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWIt
ZDM4YTc2NjBiNTFlLzEvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWItZDM4YTc2NjBiNTFl
LzEvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3GEwEjo
xqO/JJaxR3EcqXyPJP/TQkGFGkDhnqjLrAbdpovyjy301sk9ld3SHRoxiJqeupUw
rW1V1RbOIiqSAFX/3Vgpoau7GsL671lQ7ACsgIYZfLGSNvb/TeBiWwkvlJKgf7nz
Ki0eRVLvEsD2meCo4796hD+ORXy9PJ5UCtjfjJryy0aaH2/2G23DS7AiM4IER2FX
WIX9/SMjVrnoTdPzVG36jKcYCpXYGi/x80cOzhLEYtNuYRAnGMf8koT4rbK17DC3
sPai9UYFOO38+Di3CV2d2C24olnZ4ymq8vlDncHHRiQV1NqQY0lQwIW2ENr/lp9P
wnoao2uV8npynw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:27 2025 by rpki-client