Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
File: sRofl3C6sHdRW3cSy41JVQsxOKE.mft (raw, json)
Hash identifier: bc8Z8KIuAx8Jh/tsyCG08g1EQYc73UFxXte7ZMnb1Vw=
Subject key identifier: D5:C4:21:D3:DC:FE:12:60:0A:D3:A3:37:DD:5B:C3:22:DC:20:03:D6
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 01984776E9F59AC42787D38773453F9159FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
Manifest number: 0B54
Signing time: Sat 26 Jul 2025 16:00:32 +0000
Manifest this update: Sat 26 Jul 2025 16:00:32 +0000
Manifest next update: Sun 27 Jul 2025 16:00:32 +0000
Files and hashes: 1: NRZRBzkHeQf0inm9C38j74IG3bQ.roa (hash: IhzcvideV20rsOk9qK71z5e+p8/QDxcnP4qjNz1cRxM=)
2: Z0vebwduFrdGsE_iH8mJSQRQtcA.roa (hash: RqX2X64oTENUb7eOcZCl0TrlwK76jUVfDOAyoAGIoKI=)
3: sRofl3C6sHdRW3cSy41JVQsxOKE.crl (hash: X1RRBMw9xWR0IyEvTNp6oIx/AqEwqOfOIgY5qdEyxS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:e9:f5:9a:c4:27:87:d3:87:73:45:3f:91:59:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Jul 26 16:00:32 2025 GMT
Not After : Jul 27 16:00:32 2025 GMT
Subject: CN=d5c421d3dcfe12600ad3a337dd5bc322dc2003d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4a:9c:fd:eb:f0:f9:11:41:eb:ab:d7:f8:5c:
2a:a9:3a:a6:5c:bb:e7:72:20:4d:d9:de:48:14:c4:
bd:ab:37:8b:15:24:3c:e1:0f:90:01:9a:c7:25:25:
84:0b:fe:d2:4a:ce:6d:38:e7:f7:f3:5c:ba:1a:fa:
77:05:7a:37:f6:47:e0:19:71:96:26:5d:b1:37:3d:
22:23:42:ce:28:ab:9e:aa:97:61:21:bb:cb:bf:f6:
ff:8e:11:c1:d9:1d:1d:50:9e:77:cf:fe:13:56:96:
1b:a7:68:74:69:e6:2e:60:ce:90:33:e3:75:e8:79:
7a:74:cf:74:31:af:30:61:a8:0e:0f:38:cf:12:5d:
67:a1:27:01:22:ea:89:96:49:f3:7e:cc:da:33:58:
e4:66:a5:f0:f8:24:33:73:bb:37:d7:57:54:40:20:
fd:34:d9:ee:1a:27:01:54:55:f6:87:12:47:ca:df:
59:33:bb:d0:11:c6:d7:d2:4a:60:1e:b8:9b:c5:85:
50:8a:45:11:5e:4c:01:7e:33:ab:a3:87:4d:18:2a:
fa:34:b1:0f:ba:d1:67:a6:61:97:e7:6d:94:f1:a4:
e8:01:52:37:c9:a0:94:30:ea:8d:f6:8e:f8:f2:7f:
15:b7:2e:0a:e0:66:1c:90:84:10:dd:20:10:62:9e:
73:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C4:21:D3:DC:FE:12:60:0A:D3:A3:37:DD:5B:C3:22:DC:20:03:D6
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:53:c1:d0:f0:2b:28:d4:79:1c:1d:7d:6d:f5:06:e4:9a:b9:
41:e0:ad:34:9c:0f:07:07:c4:60:d1:a3:c9:a9:9e:7e:56:f6:
f8:c6:d2:c8:30:4b:08:52:74:2c:04:c2:b6:16:21:e5:b1:fb:
b4:29:1e:01:51:cb:dc:49:43:9f:2c:e7:f7:be:3e:98:2b:0d:
0c:2d:4d:1f:e5:24:f4:f6:48:06:78:1f:63:39:55:cf:ca:1a:
61:a2:70:89:ae:94:c8:e4:63:31:43:11:31:52:c8:b6:d1:e8:
4c:93:15:50:96:62:67:e3:08:f0:eb:15:6f:34:6c:fe:1d:ff:
12:e7:bb:be:14:ca:21:0e:a7:5e:b3:30:c8:d2:1a:95:c6:09:
1c:fb:e3:b5:28:15:33:25:e0:a5:80:e5:45:71:2b:13:92:56:
2b:9e:b9:37:37:d2:03:59:aa:ce:61:36:44:10:a1:08:83:72:
0c:f3:92:11:b6:8a:3a:a6:4b:10:83:db:fd:62:f9:56:67:3a:
81:c5:02:2c:18:ef:99:fb:1b:1b:98:81:b5:ce:bc:63:b0:5d:
53:07:11:cc:50:82:0b:fb:7b:d6:9f:aa:40:f9:5d:90:c7:da:
98:c0:fd:ed:f6:b2:87:12:27:8f:1d:5c:3b:ec:f6:d7:f9:95:
c5:43:39:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdun1msQnh9OHc0U/kVn6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMWExZjk3NzBiYWIwNzc1MTViNzcxMmNiOGQ0OTU1MGIz
MTM4YTEwHhcNMjUwNzI2MTYwMDMyWhcNMjUwNzI3MTYwMDMyWjAzMTEwLwYDVQQD
EyhkNWM0MjFkM2RjZmUxMjYwMGFkM2EzMzdkZDViYzMyMmRjMjAwM2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0qc/evw+RFB66vX+FwqqTqmXLvn
ciBN2d5IFMS9qzeLFSQ84Q+QAZrHJSWEC/7SSs5tOOf381y6Gvp3BXo39kfgGXGW
Jl2xNz0iI0LOKKueqpdhIbvLv/b/jhHB2R0dUJ53z/4TVpYbp2h0aeYuYM6QM+N1
6Hl6dM90Ma8wYagODzjPEl1noScBIuqJlknzfszaM1jkZqXw+CQzc7s311dUQCD9
NNnuGicBVFX2hxJHyt9ZM7vQEcbX0kpgHribxYVQikURXkwBfjOro4dNGCr6NLEP
utFnpmGX522U8aToAVI3yaCUMOqN9o748n8Vty4K4GYckIQQ3SAQYp5znwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXEIdPc/hJgCtOjN91bwyLcIAPWMB8GA1UdIwQY
MBaAFLEaH5dwurB3UVt3EsuNSVULMTihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS84ZDZjMzMtYjJjMS00OGRhLWE2MDkt
ODIxN2E5MjlmZDhkLzEvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS84ZDZjMzMtYjJjMS00OGRhLWE2MDktODIxN2E5MjlmZDhk
LzEvc1JvZmwzQzZzSGRSVzNjU3k0MUpWUXN4T0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzlPB0PAr
KNR5HB19bfUG5Jq5QeCtNJwPBwfEYNGjyameflb2+MbSyDBLCFJ0LATCthYh5bH7
tCkeAVHL3ElDnyzn974+mCsNDC1NH+Uk9PZIBngfYzlVz8oaYaJwia6UyORjMUMR
MVLIttHoTJMVUJZiZ+MI8OsVbzRs/h3/Eue7vhTKIQ6nXrMwyNIalcYJHPvjtSgV
MyXgpYDlRXErE5JWK565NzfSA1mqzmE2RBChCINyDPOSEbaKOqZLEIPb/WL5Vmc6
gcUCLBjvmfsbG5iBtc68Y7BdUwcRzFCCC/t71p+qQPldkMfamMD97fayhxInjx1c
O+z21/mVxUM5dw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 00:59:49 2025 by rpki-client