
$ rpki-client -vvf repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
File: CABF373EADCD9376E524CE313AB868C03EEB1088.mft (raw, json)
Hash identifier: 5bmyTdU+rRdcmunyODDiQSz2mCWSb7q0jaGLbffdFV0=
Subject key identifier: 4E:9D:90:4D:E6:D7:AB:DD:AA:F2:53:37:6B:1C:CD:77:0A:33:A8:AD
Authority key identifier: CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
Certificate issuer: /CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Certificate serial: 550637CD9ACEF3F504620F9FFA0CB241F2024185
Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject info access: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
Manifest number: 02D7
Signing time: Thu 26 Mar 2026 16:24:37 +0000
Manifest this update: Thu 26 Mar 2026 16:19:37 +0000
Manifest next update: Fri 27 Mar 2026 20:16:37 +0000
Files and hashes: 1: 326131343a3763303a313030303a3a2f33382d3338203d3e20323135333635.roa (hash: sgRTwSyhVCQpHRZOTXhgdGYd5BzW5V4pFBW18sNeqlE=)
2: 326131343a3763303a313330303a3a2f34302d3430203d3e20323133383530.roa (hash: ghrsyOsNjV1vJxVSpYhOwOHrESe1ZdqgfbMmoLsZ/wQ=)
3: CABF373EADCD9376E524CE313AB868C03EEB1088.crl (hash: iW+p4ZNnLS7uS24LG4A9qUhSpFypzbr1/vKXijlNvgc=)
4: 326131343a3763303a313230303a3a2f34302d3430203d3e20323031363837.roa (hash: f/cdjCfjhlySyNuo0kgMIF/CdapB1t3ceS2H+YsmCRc=)
5: 326131343a3763303a313030333a3a2f34382d3438203d3e20323038323038.roa (hash: uvRTeITzG5dnGGKWlNSbP1RgjIMdhit9i0H0cABSxCE=)
Validation: OK
Signature path: rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl
rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft
rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:06:37:cd:9a:ce:f3:f5:04:62:0f:9f:fa:0c:b2:41:f2:02:41:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CABF373EADCD9376E524CE313AB868C03EEB1088
Validity
Not Before: Mar 26 16:19:37 2026 GMT
Not After : Mar 27 20:16:37 2026 GMT
Subject: CN=4E9D904DE6D7ABDDAAF253376B1CCD770A33A8AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:25:c5:fb:d3:67:18:4e:2e:82:36:fd:8a:fd:
26:a3:91:14:0f:3f:cb:b6:15:a9:2a:ea:37:d2:02:
05:bc:82:39:b9:16:5f:52:77:25:c0:fe:98:73:14:
7a:15:eb:22:bc:2d:70:96:e6:73:93:6e:8c:32:6c:
aa:43:6d:c7:85:69:5f:77:a8:d9:09:f7:f3:cd:5d:
5e:b5:01:ef:51:c4:88:55:83:c2:7f:f8:ff:a5:75:
20:93:fa:2a:02:07:01:f1:0f:b9:80:f4:b2:c4:5e:
52:41:e5:df:8c:29:d6:c8:a5:df:de:17:00:78:5c:
df:4f:63:23:a2:36:a9:7f:5f:6d:9a:25:88:23:02:
ca:74:2d:94:09:59:36:68:f2:6f:6c:3f:95:0c:67:
ac:6a:27:19:02:b4:43:47:0b:95:c0:9e:d5:23:3f:
d5:58:4a:3d:c7:78:b2:3f:b0:62:2e:e4:5f:1b:8d:
b8:77:ee:47:db:9c:4f:f3:42:23:3d:2c:64:28:1c:
89:7f:74:5a:c8:9d:5f:ca:95:5a:a4:6b:8a:8b:29:
fe:76:f7:75:f0:8e:f7:85:dc:60:2c:29:4a:cd:10:
f3:09:ba:ec:93:41:7e:6b:cc:2e:43:06:c9:70:c0:
70:6d:ac:90:f8:41:36:75:13:67:bb:95:1b:5e:97:
6b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9D:90:4D:E6:D7:AB:DD:AA:F2:53:37:6B:1C:CD:77:0A:33:A8:AD
X509v3 Authority Key Identifier:
keyid:CA:BF:37:3E:AD:CD:93:76:E5:24:CE:31:3A:B8:68:C0:3E:EB:10:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/CABF373EADCD9376E524CE313AB868C03EEB1088.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/pfcloud-tgewiese/0/CABF373EADCD9376E524CE313AB868C03EEB1088.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:c3:57:a1:dd:b5:c8:f7:96:46:93:56:f4:d7:5c:a0:67:55:
66:12:35:b3:f9:2e:ea:0b:b5:27:33:a3:10:a8:ee:21:0f:41:
f4:d3:94:0d:96:19:9c:29:90:73:42:ef:8a:17:1a:d3:8b:0e:
10:7f:16:ba:b8:7a:a7:55:14:f0:fb:00:6e:c9:89:a2:04:8c:
a6:db:cd:87:eb:0f:82:9c:91:0b:d0:98:90:a2:7e:93:8d:08:
17:00:16:00:78:64:63:99:ee:cf:4a:3b:31:54:15:d4:38:72:
2f:d4:62:87:70:5d:d3:30:17:30:e7:1e:64:f7:57:e6:bf:a5:
dc:da:79:9d:52:32:58:51:82:1d:a0:7d:d6:43:82:6c:3d:b1:
5b:59:16:07:d3:ec:56:82:e7:4f:75:04:cc:ca:ea:31:3b:79:
53:cb:e6:3a:53:af:2e:a4:bd:42:10:d2:7b:29:0e:37:83:b1:
34:70:cf:80:a0:e7:3b:61:bf:a5:37:2c:2d:ff:fa:ab:5b:d2:
47:52:3f:09:7f:f1:0d:4c:4d:5b:cd:d1:be:6c:8d:bf:48:ba:
df:ee:0c:29:61:63:aa:44:c5:a3:fa:5c:bd:8b:75:cc:54:8d:
14:f4:c6:1b:10:6d:c7:29:50:f2:d4:3c:89:4b:0a:7d:81:54:
e0:26:06:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:04 2026 by rpki-client