Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: Bt+Vh8Qaq27BXnKrQ1iQE56xY05dtplzF5hY6uhA1dM=
Subject key identifier: 8B:AF:EA:FA:F8:2D:44:0A:AA:1A:CD:23:26:B4:64:52:DF:3D:3A:42
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 0199FBEBCEBBEB8BA28CA99FBC10FE2631FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0C36
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: NRZRBzkHeQf0inm9C38j74IG3bQ.roa (hash: IhzcvideV20rsOk9qK71z5e+p8/QDxcnP4qjNz1cRxM=)
2: Z0vebwduFrdGsE_iH8mJSQRQtcA.roa (hash: RqX2X64oTENUb7eOcZCl0TrlwK76jUVfDOAyoAGIoKI=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: jQYTfvAyym1DTU/BuFGSWq/Lz/IHjrfynwbjUOSmPns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:ce:bb:eb:8b:a2:8c:a9:9f:bc:10:fe:26:31:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=8bafeafaf82d440aaa1acd2326b46452df3d3a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:8c:2a:e9:ee:10:c3:2d:69:2d:b1:02:5a:
4d:88:2d:5f:ec:b5:7f:b6:a3:da:07:19:61:3b:41:
ce:bb:f3:c1:81:b9:c5:99:c3:4c:92:90:b9:2f:89:
e9:fe:bf:5c:9f:7e:72:60:a0:76:f0:14:8b:80:83:
b6:cd:1f:63:84:f6:1b:63:6d:03:e0:fc:3a:5f:c9:
97:9d:f3:51:c6:ba:f2:39:3b:dd:63:cd:ab:a0:ad:
03:c0:b5:dc:3f:95:19:6e:60:c1:b0:70:94:f3:de:
87:4e:99:6d:8c:a3:1d:21:10:87:40:13:88:c4:df:
f7:a4:9b:4a:ff:37:57:49:2e:ed:77:b1:b4:6f:6d:
a5:fa:14:2e:b2:16:dd:a7:8c:39:80:0a:d4:17:90:
ce:bf:99:7d:d5:2f:22:f8:74:7b:7e:b4:94:aa:e4:
92:6c:c3:e9:44:e2:f5:cd:da:3f:39:8f:11:75:75:
ce:a0:a4:b4:54:ac:93:9d:43:be:99:8a:a1:58:e6:
71:86:84:65:b0:41:77:33:49:39:70:e3:a5:c1:c9:
6a:7e:2e:5f:fa:c3:ef:94:e5:15:ea:8d:cd:d2:52:
54:55:63:86:3c:2c:e5:de:23:06:e7:3b:f7:fd:92:
91:a8:38:3b:d0:da:88:6e:c7:64:39:56:a0:61:cd:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:AF:EA:FA:F8:2D:44:0A:AA:1A:CD:23:26:B4:64:52:DF:3D:3A:42
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:39:9d:70:41:b4:c8:37:3c:03:d2:a2:d7:69:8f:f5:90:2c:
91:36:df:d4:ed:c3:df:5d:88:54:41:5a:a2:48:2b:68:3e:70:
a5:db:6a:b9:1c:e1:ae:4d:a9:61:0a:25:24:4a:25:b8:0f:1e:
9a:b5:02:d4:e3:ce:f6:80:fb:e6:db:e8:f4:d5:6b:8f:e0:4b:
dd:44:1a:78:16:22:9a:e9:da:1c:79:0c:d4:ff:4b:0d:9d:0f:
3d:e0:d9:b6:41:11:cf:f0:c8:de:1f:1c:25:18:2f:72:20:dd:
bb:08:2c:f9:cb:d1:88:07:0b:82:48:f2:38:ee:de:6a:4d:d4:
88:ff:77:a2:f4:e6:1e:ac:e9:7e:41:61:14:e5:c7:50:4d:5a:
c7:03:cf:6a:1d:80:8e:1a:75:24:6e:a7:5c:71:07:07:6f:ae:
fa:9a:37:54:a5:5d:c9:41:6f:e1:0f:7a:95:d6:d9:3a:ce:5a:
a8:39:fd:26:ba:8b:9d:e4:a5:a4:27:06:a8:2f:ff:61:54:79:
40:cb:2a:09:68:8a:7a:7a:c4:1a:57:c9:6d:97:92:1d:01:c1:
24:f5:b3:8b:bb:71:64:04:8c:82:1b:e7:1b:ba:2b:bc:d4:61:
89:55:63:60:50:0b:4a:ef:c8:d6:6b:77:7a:64:07:12:e2:47:
7a:fe:be:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:41 2025 by rpki-client