Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: 7VlJfR59yjOxfbZPqYfZwy4wF2M8VKybvDR6I6UPFYM=
Subject key identifier: E9:BD:E4:40:24:1F:74:8B:FB:BE:69:EC:12:A4:BB:13:5A:F9:B1:8E
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 0198485302A1BD29EBA295FED44BF13B360B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 20:00:56 +0000
Manifest this update: Sat 26 Jul 2025 20:00:56 +0000
Manifest next update: Sun 27 Jul 2025 20:00:56 +0000
Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: Cj25257aTqcqksCbUd3WQt/fVrmhFsdbrkwYCtrmZF8=)
2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=)
3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:02:a1:bd:29:eb:a2:95:fe:d4:4b:f1:3b:36:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: Jul 26 20:00:56 2025 GMT
Not After : Jul 27 20:00:56 2025 GMT
Subject: CN=e9bde440241f748bfbbe69ec12a4bb135af9b18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:6e:4e:47:a9:15:cf:d3:7e:90:0c:94:78:
80:17:0c:ce:9b:31:ce:00:7d:ea:55:d6:3d:0b:d7:
0a:b9:6e:b9:de:64:52:60:89:a7:69:2c:5d:fe:1a:
39:15:7a:99:c2:fd:7a:86:28:ca:31:f2:e0:3f:8c:
4e:50:f7:de:df:cd:de:c3:37:16:b3:6d:7d:68:71:
d8:e7:79:4a:aa:2e:e5:3b:5b:12:80:3d:04:27:b4:
33:40:06:e6:c3:ac:b1:64:5c:9c:ae:e5:de:c3:e5:
a0:3c:31:e4:e8:f9:18:00:d7:ec:3a:6c:c0:53:bc:
39:f2:ea:89:8c:c8:07:2c:6b:60:8c:00:ff:61:22:
77:49:a3:1e:ec:94:c2:3d:5d:dc:d8:03:97:cb:53:
76:91:19:cc:e8:53:28:e3:4d:5c:77:d1:cc:07:ad:
91:57:cf:1f:34:26:8a:95:b8:8e:be:94:d4:b8:46:
9e:6d:98:3c:89:5b:cd:07:d4:b0:33:bf:40:61:40:
11:f7:07:11:62:25:8d:44:d9:96:71:e2:44:2a:35:
10:8e:c1:10:f8:c3:8a:ce:fe:59:e7:ba:10:92:24:
86:43:ef:d7:b6:00:c3:fe:2b:10:8f:a1:cb:e6:26:
56:32:48:56:c0:b9:28:04:f7:c1:18:be:91:dc:e8:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BD:E4:40:24:1F:74:8B:FB:BE:69:EC:12:A4:BB:13:5A:F9:B1:8E
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:fc:6b:29:b9:ad:9c:61:38:e2:39:a4:1c:1d:e2:8d:60:1b:
42:e2:54:7c:bc:5c:42:f4:08:a2:73:f9:3f:95:d5:ce:a3:4b:
75:e2:7d:c4:5e:4f:b1:8a:cf:ab:70:b6:67:58:d8:5c:e5:b3:
a5:4e:90:86:43:a1:2a:4b:a5:7e:f4:63:46:61:72:41:9e:f9:
56:4d:18:af:a4:e0:06:f8:9f:d3:89:f7:19:61:15:99:87:85:
5e:f7:06:74:30:ea:b8:4e:2b:eb:4a:ce:24:ff:ed:fb:50:85:
b3:79:1f:3c:b7:cb:96:68:96:c3:04:5f:0e:ee:69:f9:7e:74:
26:fd:bb:e6:97:e8:6b:d6:0a:64:ff:8f:61:ea:41:e0:ee:75:
a7:b2:6d:57:e5:f7:4c:3a:21:5f:4c:d8:a8:6b:26:3d:91:8b:
71:24:1f:b3:94:c2:3e:01:07:07:91:15:00:b8:97:8d:d0:28:
6d:74:da:ca:36:5d:7e:4d:c2:0e:c6:20:57:86:61:57:98:f1:
bc:9a:0a:47:1d:58:87:aa:ad:67:cb:df:b4:a3:fb:85:6e:35:
0b:ba:18:fe:9d:e1:8d:01:2f:05:85:c2:3f:08:70:28:eb:3a:
0f:70:2b:63:86:6d:13:94:d0:f6:c8:8c:1d:07:c1:eb:ab:77:
ab:be:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:12:54 2025 by rpki-client