Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: RPwS30CrhTIj9mITH7pHzEmOgKtepiOhMGmc0keGkLI=
Subject key identifier: 4B:06:C0:D7:7D:F9:C1:5A:2C:C9:2B:BC:32:2F:A2:10:BB:F2:92:80
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 0196C5DF1BB5511D019432C1FF0A5462D027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 088D
Signing time: Mon 12 May 2025 19:00:55 +0000
Manifest this update: Mon 12 May 2025 19:00:55 +0000
Manifest next update: Tue 13 May 2025 19:00:55 +0000
Files and hashes: 1: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: nRbmEN7fKGcp34Swc1I/B5FDm0soLCvmlC+YEvuU/rg=)
2: NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa (hash: VVaMaoTZROEEF0plazGCqpYH9htdlUUJkeqYuHZsPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:df:1b:b5:51:1d:01:94:32:c1:ff:0a:54:62:d0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: May 12 19:00:55 2025 GMT
Not After : May 13 19:00:55 2025 GMT
Subject: CN=4b06c0d77df9c15a2cc92bbc322fa210bbf29280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:38:8b:02:28:6c:fd:a2:df:24:f0:73:63:a0:
8d:d7:05:ab:c5:a9:c7:00:f0:a7:44:f1:0a:6f:2e:
34:10:e3:00:82:be:20:5a:18:50:12:bf:eb:fa:16:
ed:99:4e:b7:99:93:e6:58:ce:d2:e7:7d:ee:01:69:
d4:fb:6e:83:30:17:b7:a3:eb:2d:82:f8:31:bf:c1:
44:9d:6a:83:ec:76:6c:7e:2a:68:a7:1c:c2:8c:da:
d5:8b:33:27:c5:e5:64:14:8e:bb:6b:02:c0:6c:ea:
21:da:84:b2:48:6f:f0:07:b1:31:1f:b8:22:35:38:
58:cc:3e:f2:12:f5:f6:f8:45:0c:aa:ba:af:aa:a3:
41:c1:a1:f2:cc:ef:3f:85:81:cb:67:3c:86:11:16:
02:5f:56:d5:b1:c6:29:16:76:b8:f2:20:ea:52:27:
a3:ea:4d:b3:5c:15:1e:70:40:28:b9:f8:16:15:57:
b6:ea:05:a8:2f:8c:52:1c:ed:ec:7a:06:09:eb:fb:
b1:0f:6b:f3:7a:90:94:6b:3c:e7:d9:6b:23:b7:fb:
32:0a:4a:da:b7:9a:e3:87:ff:44:df:51:31:dd:74:
10:8a:0c:51:e6:9b:62:06:56:b5:52:83:7f:68:81:
0e:22:53:55:ba:63:45:07:06:78:ea:a2:22:d8:f8:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:06:C0:D7:7D:F9:C1:5A:2C:C9:2B:BC:32:2F:A2:10:BB:F2:92:80
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:91:2b:26:81:58:7d:b6:2f:36:8e:90:a5:48:d7:bc:d6:5d:
a0:0c:31:21:3b:1e:6c:13:f6:58:1c:01:5a:df:c2:e0:07:6d:
c7:b4:0f:77:99:bb:cc:a2:02:48:0e:b4:6e:5c:d2:0a:f3:d9:
4c:91:4f:f6:c6:47:83:8a:0b:b8:ce:bc:8c:0c:96:f1:62:8f:
2b:d1:a7:3f:55:e2:8b:5e:77:ba:32:09:99:87:24:62:0d:f2:
44:71:fb:8a:29:cb:cf:84:47:ae:6e:5b:58:7a:7d:ef:a0:5e:
ee:95:1f:38:ba:17:50:21:01:ad:18:bb:30:52:26:e6:91:1f:
0c:7f:a0:9b:93:2f:3f:f5:de:80:99:90:c4:2b:dd:81:8c:b2:
2d:a2:10:59:89:30:95:c0:0b:27:73:67:76:f2:3f:67:7f:9f:
f3:68:08:2a:ce:84:00:c0:e7:96:2c:44:d5:0f:21:f5:48:bf:
7b:36:60:e4:da:47:30:93:39:5b:a4:1c:2d:e3:b3:27:18:c1:
e3:6c:f6:ef:99:69:9c:a6:3d:2b:31:0b:5c:52:7f:5e:0f:bc:
5b:72:b3:51:c5:60:97:d4:4f:4f:90:ee:6b:73:cf:bd:6f:00:
a0:b6:03:f6:0b:35:a4:79:b5:c3:1c:59:7b:7b:71:81:87:12:
6a:f1:82:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:35:35 2025 by rpki-client