Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: 4+ZQ7sXZnjG2eTfOnAZFAvxfFWO732wblRuBxi1lNMU=
Subject key identifier: 08:69:16:59:4C:B1:14:25:E0:58:C6:37:BF:3D:B3:2D:DD:7A:BE:14
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 0197C6153B21E18FE1BE17FF055A308702A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0B11
Signing time: Tue 01 Jul 2025 13:02:49 +0000
Manifest this update: Tue 01 Jul 2025 13:02:49 +0000
Manifest next update: Wed 02 Jul 2025 13:02:49 +0000
Files and hashes: 1: NRZRBzkHeQf0inm9C38j74IG3bQ.roa (hash: IhzcvideV20rsOk9qK71z5e+p8/QDxcnP4qjNz1cRxM=)
2: Z0vebwduFrdGsE_iH8mJSQRQtcA.roa (hash: RqX2X64oTENUb7eOcZCl0TrlwK76jUVfDOAyoAGIoKI=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: RNxAx/Biana8NwJkIkdeIIHfA3RNk9N1TNL2miz+iWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:15:3b:21:e1:8f:e1:be:17:ff:05:5a:30:87:02:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Jul 1 13:02:49 2025 GMT
Not After : Jul 2 13:02:49 2025 GMT
Subject: CN=086916594cb11425e058c637bf3db32ddd7abe14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e2:8c:51:c6:64:bb:68:12:5d:7c:0b:a1:c3:
42:10:90:01:73:31:0e:fc:e8:41:53:03:8e:de:48:
5a:03:a0:e1:5c:45:a8:0a:18:ed:95:e8:8b:44:df:
28:b0:5b:3c:63:c7:66:01:b3:b0:b2:55:4a:1c:f7:
ce:2d:7f:e5:eb:ef:01:0c:2f:9b:cf:f6:da:3d:e1:
66:20:27:e1:a6:d0:ad:9c:95:00:e1:c9:b6:96:1e:
19:1e:10:62:9c:b5:97:0a:6e:f0:68:98:48:93:f1:
8f:40:44:e3:3a:3f:68:89:b7:0e:66:6d:fb:28:df:
88:37:83:e6:08:14:4d:53:66:2a:26:14:83:02:29:
5d:f2:a2:e1:f1:ec:eb:fb:29:f8:74:9c:51:68:a0:
d2:c5:67:93:0c:b0:c2:20:c4:0c:7d:f5:2e:2b:e9:
a0:89:a8:61:ea:0b:2f:2e:86:e2:f5:a0:b5:a8:c4:
9b:7f:21:7e:e2:e5:8b:12:3c:9d:59:7a:28:66:8a:
56:5d:9d:a9:e1:e1:36:5c:de:48:cd:be:21:9f:a3:
9f:26:9a:8d:e2:68:8d:b3:93:58:f3:e6:9c:fc:0a:
55:82:14:3e:5a:54:8d:8b:92:82:44:ce:98:67:c1:
3a:5d:7a:d8:90:34:4a:30:42:ae:76:1b:21:8c:cf:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:69:16:59:4C:B1:14:25:E0:58:C6:37:BF:3D:B3:2D:DD:7A:BE:14
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8a:da:9c:1b:9a:b9:18:fc:03:69:91:6d:71:99:b8:b8:31:
ef:ff:b2:a7:63:f9:38:2c:25:26:42:74:62:65:39:c9:5c:a5:
59:08:9b:67:00:9a:d8:01:21:81:df:75:74:f8:95:79:c1:dd:
f2:97:53:e6:2c:7d:8b:d4:48:a9:50:5f:3a:31:6a:b0:3c:30:
c0:66:6f:0f:00:b0:91:96:05:bf:3e:3d:a6:2d:a9:fd:7d:3e:
7c:d9:fe:59:c7:2b:36:1f:11:3e:8e:f5:e6:42:99:d5:75:20:
22:47:82:c5:a6:4e:48:7c:89:08:a3:f8:e4:57:cd:6b:a1:8f:
2f:7b:d9:e4:b6:fc:51:fd:60:15:65:12:b0:2c:b8:17:fc:66:
6b:6f:86:31:66:a6:b2:ea:f0:6e:67:c8:85:9a:4b:2a:1a:66:
c0:5d:b8:7a:16:ad:67:80:5e:18:47:b0:dc:5e:88:45:15:69:
a3:7a:ff:98:87:99:e0:70:b5:66:ba:d7:41:e1:09:fe:49:69:
12:58:fb:12:0b:9f:1f:06:39:53:be:e3:e9:74:f6:07:c4:0b:
db:6a:62:30:69:3d:2f:d1:50:6e:df:28:56:3c:8f:93:e5:99:
70:8a:23:55:3b:3f:a6:bb:ab:ad:1d:81:cb:c2:8d:2c:30:b7:
e8:a5:e7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:17:36 2025 by rpki-client