Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
File: RofawIN-0xE3oySWpsk-lDHGB4Q.mft (raw, json)
Hash identifier: ev+lPpP2tzVMJinuhVWeXg3Then14H1Z414Pfz9WLjg=
Subject key identifier: FC:18:2E:00:B9:70:30:A2:79:A5:0E:18:35:C8:96:90:E0:76:4F:AD
Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784
Certificate serial: 019922FA07A73FFCFCA52E25D470D151C1A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
Manifest number: 1605
Signing time: Sun 07 Sep 2025 07:00:35 +0000
Manifest this update: Sun 07 Sep 2025 07:00:35 +0000
Manifest next update: Mon 08 Sep 2025 07:00:35 +0000
Files and hashes: 1: 4ifvOXlGTcvZkDl3bBHXClzFH5s.roa (hash: shQ9uYhnduluD4hyOhrNavJbF1LlnObbpGDGnRChGIc=)
2: RofawIN-0xE3oySWpsk-lDHGB4Q.crl (hash: PrUS7BPrABCjLulQ7y7IucU8+1Ox/ywmhRoUTa5Riis=)
3: SIC0wWMpDwMCH170jWGV4n8YVKg.roa (hash: 11XuYsn3Bm92vB4Wx8w/k47zF7w2waOFdbevLO5t4Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:07:a7:3f:fc:fc:a5:2e:25:d4:70:d1:51:c1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784
Validity
Not Before: Sep 7 07:00:35 2025 GMT
Not After : Sep 8 07:00:35 2025 GMT
Subject: CN=fc182e00b97030a279a50e1835c89690e0764fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9a:c8:39:ab:ba:5b:28:05:5e:bd:67:09:8f:
59:20:0f:9c:c0:1f:b7:e3:11:07:bd:a8:c2:20:4d:
98:37:63:46:bc:0d:ea:7d:ba:d7:66:3e:f2:ae:d2:
dc:b1:17:41:d2:8b:05:70:69:fe:3e:75:e1:98:c3:
27:19:f2:6c:d3:54:45:19:2f:69:45:90:08:9f:c0:
90:dc:63:86:ab:e8:85:41:cc:64:0b:a1:28:3b:38:
b6:ea:af:58:60:84:55:f3:61:32:4c:2b:fa:cc:62:
c2:81:cf:11:4a:fc:33:97:78:0f:52:cc:fb:37:fd:
44:5a:c5:be:f8:2e:d8:51:33:66:b8:15:84:4e:38:
be:10:23:66:46:bc:4e:0d:18:09:2d:54:0e:63:90:
25:84:4a:64:4e:6d:d8:42:04:d7:9a:66:ed:ac:16:
23:10:04:81:f2:bd:0f:ea:4d:7d:75:7b:cd:41:51:
2e:34:80:1e:0b:18:ef:07:ca:8a:de:74:cb:c8:ee:
ac:3a:c0:82:98:77:08:78:e0:02:1c:f7:36:4e:1f:
e3:d5:6a:b8:ca:6d:f5:e1:c4:88:9b:28:33:f3:3c:
a6:d9:66:6a:d9:7f:23:53:85:65:2a:f6:15:5c:93:
5d:ce:43:cf:e9:6b:87:90:c9:6a:8a:26:f0:e5:6d:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:18:2E:00:B9:70:30:A2:79:A5:0E:18:35:C8:96:90:E0:76:4F:AD
X509v3 Authority Key Identifier:
keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1e:c7:89:75:cf:53:39:29:21:c9:f0:29:0e:f4:a6:df:9f:
93:aa:13:f1:fc:30:0c:bf:19:69:93:69:cf:e0:ed:58:b8:1e:
0b:77:a5:25:53:a9:e7:e6:c0:78:c4:be:26:e4:2d:f3:95:65:
a0:a0:f0:5e:b8:8b:e1:1e:3f:59:e6:e0:9e:18:24:03:13:d8:
64:6b:e4:67:ab:c1:1c:b8:51:f2:9d:70:f6:a0:75:80:6d:7f:
45:4a:f2:15:d9:38:e6:62:d5:69:a0:e4:9a:b8:12:19:40:c0:
a0:e1:cf:b0:79:9a:5f:29:90:6f:87:a0:21:48:fa:4d:ba:06:
db:99:2e:fa:07:4f:c6:58:75:90:50:8f:fe:37:e4:f6:84:c3:
5c:60:f4:8d:d6:3b:21:f3:c3:a7:30:7b:70:62:8e:b5:70:76:
fc:9a:10:59:1b:fe:0c:c9:9c:29:4d:1c:dc:dd:98:56:59:9b:
50:21:37:27:0d:40:fd:71:90:50:70:7e:1f:48:73:b0:16:48:
6d:8c:90:fd:3f:67:ef:d9:ab:db:b8:ed:ec:04:19:a6:73:8b:
5d:a5:b9:86:a7:ed:14:69:65:8b:3f:01:0c:39:6a:9b:59:e7:
7e:c0:0c:46:3b:bd:ff:ab:93:c4:ac:b2:38:f4:8b:d8:66:d1:
24:58:41:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:11 2025 by rpki-client