Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
File: RoFcoV1ypaaW-LzfSG9YAZZncrs.mft (raw, json)
Hash identifier: 8DeJ/9VvyK/bgmsSNdksyBzLFUL38MedXwzbSxjPvAc=
Subject key identifier: 54:3B:BA:84:7D:40:22:A1:49:71:06:F3:04:7A:EE:84:D5:F8:50:7A
Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Certificate serial: 01974967B364D3CB9D285DBCDF7C5D671E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 08:00:22 +0000
Manifest this update: Sat 07 Jun 2025 08:00:22 +0000
Manifest next update: Sun 08 Jun 2025 08:00:22 +0000
Files and hashes: 1: RoFcoV1ypaaW-LzfSG9YAZZncrs.crl (hash: mYWULUjzJib+n9VTSEaugRLIWdHbXmN/gq6vtbxe5LU=)
2: y-V1yK9vxrj09da641p9Hiek_2g.roa (hash: udxLfSkFKIgNgCHKRTpeUD7DXLySMYrTSVkfdRkc/p8=)
3: ylDxYeIa2SMufUNoGN045nwzMh4.roa (hash: sRZ+peR7WDCmRDdGsVvnCpA1L4kwjYlkcczeyuG+uuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:b3:64:d3:cb:9d:28:5d:bc:df:7c:5d:67:1e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb
Validity
Not Before: Jun 7 08:00:22 2025 GMT
Not After : Jun 8 08:00:22 2025 GMT
Subject: CN=543bba847d4022a1497106f3047aee84d5f8507a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a9:1b:99:7b:d5:e9:09:36:02:f6:b1:ae:4c:
47:77:2b:cb:8d:86:67:84:40:1b:7e:9d:ae:de:23:
2c:4c:e8:7c:26:ba:0d:03:1b:ff:6e:59:1c:39:f0:
a3:d7:51:3d:34:0d:84:45:6a:c6:b0:7e:44:43:c1:
c5:20:73:f0:fe:0e:12:63:52:85:0b:63:28:f3:f9:
bb:45:6f:c1:db:03:16:92:72:69:17:8a:01:91:3a:
be:0a:c8:11:94:79:55:f5:92:9e:aa:31:73:72:d9:
33:94:cb:3f:41:e7:4a:92:44:b4:b2:8d:a4:9c:97:
d7:9b:b9:7f:33:fb:74:ff:21:0f:03:ad:f0:53:33:
4f:2c:67:2a:e9:4a:ff:da:96:31:ba:8a:f0:f5:b6:
31:d0:60:7e:9a:5e:82:b1:1a:2b:de:b2:ac:7c:b9:
ef:1b:ab:a4:c9:88:fb:53:1b:ce:b7:d4:4b:a9:ee:
82:79:62:18:d0:89:64:03:36:b9:d3:d1:cb:d9:b9:
72:0e:e6:20:be:80:d7:2d:c2:c1:cf:04:43:f6:e7:
46:7c:af:59:82:1c:c4:b9:79:d9:df:d1:e4:62:e8:
b8:ca:47:07:c8:c8:8c:51:9d:fb:3f:cd:5b:85:7e:
92:34:36:4d:09:3b:d0:e9:d0:a7:e9:cb:b9:f9:04:
69:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3B:BA:84:7D:40:22:A1:49:71:06:F3:04:7A:EE:84:D5:F8:50:7A
X509v3 Authority Key Identifier:
keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:37:3c:18:b7:d9:34:7c:f2:d7:5c:af:af:71:21:12:89:fe:
94:00:7d:01:27:6a:8b:26:fc:a6:73:b3:22:07:c7:b0:db:a9:
ec:96:48:86:a8:f5:c9:0b:17:de:df:da:d6:45:42:2b:a0:38:
9b:8f:e8:99:83:24:ce:bb:82:06:cf:1f:14:db:8b:8e:b3:f2:
0a:be:a3:65:6e:af:cd:6a:68:7c:ad:18:46:bb:f9:3b:4a:1c:
a7:fb:d0:58:86:40:4c:53:f2:c7:42:4b:3c:b3:6f:95:98:4c:
83:b8:75:a8:ad:b2:9a:ca:dd:29:10:b3:11:33:b5:60:15:64:
6c:21:d1:4e:13:3c:24:96:1d:2b:35:d3:0c:ae:fe:d0:12:ac:
86:8c:02:b0:e2:8d:85:db:39:d9:9d:5e:70:19:3b:0a:24:06:
d9:00:66:de:8b:66:ad:73:9f:9a:24:cd:89:bc:30:03:de:be:
22:30:67:62:97:4e:59:5a:f5:9c:45:2f:54:dc:c8:ad:1a:bc:
e4:a8:d9:80:23:31:e7:50:d9:fe:b2:a9:87:66:b9:31:b1:67:
4d:2b:73:90:08:1c:92:e7:0d:2f:cf:70:86:ab:69:75:e6:01:
b0:b8:12:6e:a3:19:8e:4c:cc:e7:d5:02:93:ea:f4:8a:5f:00:
12:f2:b1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:48:48 2025 by rpki-client