Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: W+/KIlm22shj7pSgudUvZnR8tjZL2LoKlb3DNg+1fqc=
Subject key identifier: B3:6B:F0:5A:A3:41:B6:85:B2:FD:8D:4A:17:57:7E:48:76:61:4D:C0
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 019738745097CFAE510F054FF4C8EEDDDC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 1507
Signing time: Wed 04 Jun 2025 01:00:36 +0000
Manifest this update: Wed 04 Jun 2025 01:00:36 +0000
Manifest next update: Thu 05 Jun 2025 01:00:36 +0000
Files and hashes: 1: 4ifvOXlGTcvZkDl3bBHXClzFH5s.roa (hash: shQ9uYhnduluD4hyOhrNavJbF1LlnObbpGDGnRChGIc=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: FV7JS2GaMXVGfvPunjywFqd5Y/p3p/RpEFzfxhi5oFg=)
3: SIC0wWMpDwMCH170jWGV4n8YVKg.roa (hash: 11XuYsn3Bm92vB4Wx8w/k47zF7w2waOFdbevLO5t4Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:74:50:97:cf:ae:51:0f:05:4f:f4:c8:ee:dd:dc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Jun 4 01:00:36 2025 GMT
Not After : Jun 5 01:00:36 2025 GMT
Subject: CN=b36bf05aa341b685b2fd8d4a17577e4876614dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:35:15:4f:4e:81:4a:e8:78:b5:e7:f4:ea:
08:a5:41:b0:a5:a5:8e:a1:bf:b1:1a:2c:a5:2e:e3:
7a:49:c2:6a:d7:bb:12:dd:e4:8d:23:86:3d:10:dc:
61:27:ab:c1:a9:a2:69:80:00:ce:fc:26:cd:3e:94:
08:45:2d:38:f9:9c:cb:4d:4d:b7:d7:37:17:84:71:
45:cd:58:bb:e1:6f:1c:09:88:8e:0e:79:d7:99:ae:
7d:84:98:b2:dc:cc:7d:07:f7:f8:78:5a:51:d9:e7:
6f:3e:f7:0e:5d:9e:0c:a9:38:7f:a2:1d:5c:0d:b8:
d9:2c:1b:79:2f:27:3f:31:1c:dc:12:ca:9f:60:64:
51:e1:bd:93:79:a4:8a:11:9e:0d:30:df:c2:a5:87:
51:29:68:26:81:f5:12:db:3b:8d:74:fe:11:31:66:
b6:4e:f2:ca:ce:41:11:65:2c:87:b6:18:02:4f:45:
76:4e:9c:5b:ef:fa:fa:6a:0b:29:81:dc:6b:36:be:
8e:29:95:98:e2:10:b5:59:6d:b4:c0:77:37:bf:fc:
13:6c:74:79:af:ed:0f:39:86:71:12:8c:74:5d:b9:
e0:fe:e7:a0:45:de:8c:d3:87:3d:17:34:35:da:dc:
5d:e0:63:f4:01:38:de:70:ac:a5:b5:bb:c9:ef:30:
63:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6B:F0:5A:A3:41:B6:85:B2:FD:8D:4A:17:57:7E:48:76:61:4D:C0
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b8:1d:32:98:83:03:46:ea:8d:9a:3e:7d:13:69:f8:39:76:
e2:97:fb:58:83:88:89:51:cb:da:e0:b4:9c:86:2c:ba:b0:eb:
62:4a:a5:b1:6c:8f:08:ca:d5:76:83:5f:19:99:18:3f:2a:4d:
51:5f:8d:5f:f6:49:b2:ae:8c:91:58:ba:1b:81:c1:c7:6f:bd:
5a:8f:8c:58:18:0a:e6:5a:e3:ba:c2:7f:e3:6f:da:a2:ae:78:
d8:b5:0f:a8:f2:0c:df:2f:fb:cc:e1:05:8e:48:8e:15:ca:1f:
29:75:ed:e8:d6:5e:f7:eb:53:ed:01:a5:0a:54:86:8e:09:89:
85:d6:55:4f:b3:20:42:9e:c6:61:34:0d:ac:74:56:ae:51:e4:
73:69:7e:32:79:19:93:22:8b:ff:5e:f5:62:dc:d1:21:34:b1:
b0:5b:dd:22:19:b4:b8:c8:4b:a0:29:52:0c:ac:b4:a7:cd:3f:
5f:f7:9d:93:d1:29:19:49:e9:49:1e:27:ea:13:12:b8:60:c7:
db:89:12:7a:6f:ea:7a:25:66:1f:98:17:08:56:b9:0d:d9:2e:
85:9b:53:7c:e7:05:21:fd:8f:dd:8d:f8:5e:b9:ff:dc:9d:4b:
a3:e9:d8:9f:86:dc:ac:84:14:47:e8:56:b8:18:ee:0f:90:ff:
5a:a4:a6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:59:02 2025 by rpki-client