Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: eBnNAgjAzpbirv5EdOlrSaJUx7w1nDql4mlk3RcjHV4=
Subject key identifier: D6:97:6B:3E:93:53:21:B9:37:47:0A:4C:99:06:F7:6F:20:FE:91:8A
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 0198D515CE96478F6A83DE335CA132651E46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 099E
Signing time: Sat 23 Aug 2025 04:00:32 +0000
Manifest this update: Sat 23 Aug 2025 04:00:32 +0000
Manifest next update: Sun 24 Aug 2025 04:00:32 +0000
Files and hashes: 1: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: b27dndanqRo5pOxFd1EFQUEtLzOSucdLSNqMGN2Zj3A=)
2: NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa (hash: VVaMaoTZROEEF0plazGCqpYH9htdlUUJkeqYuHZsPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ce:96:47:8f:6a:83:de:33:5c:a1:32:65:1e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Aug 23 04:00:32 2025 GMT
Not After : Aug 24 04:00:32 2025 GMT
Subject: CN=d6976b3e935321b937470a4c9906f76f20fe918a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2b:1e:7e:63:b3:05:cc:9f:b4:97:22:04:5a:
4f:d3:ed:b5:3b:0b:02:fa:91:70:6a:46:5c:29:18:
c8:1f:38:03:52:b6:69:3d:c6:1f:ff:7e:0e:cb:40:
b9:9a:9a:0a:4c:76:71:1d:6a:f2:37:4b:a6:3a:f2:
67:38:26:af:b0:33:61:b7:b6:e0:95:33:aa:6e:d2:
88:e1:c0:92:cb:3f:23:ca:19:3e:75:27:3c:f7:bd:
26:29:74:40:dd:6a:e2:2e:5e:9e:df:2e:d2:2b:f3:
a7:2c:3e:ea:15:f4:d9:f6:35:8a:74:44:b3:02:77:
c5:ac:ad:96:e6:37:be:3f:4e:00:29:7b:7c:c3:d2:
b9:6a:f5:fd:43:8c:37:a3:aa:8c:d6:e9:5b:4c:31:
eb:24:aa:78:a4:f1:09:ab:1e:e4:50:9b:f4:87:ab:
28:ac:e1:4b:50:6f:e3:21:14:e6:fb:c4:3e:05:ce:
04:49:64:f7:a0:40:be:8d:2d:18:a3:15:e8:2f:f8:
dd:99:b9:cf:b9:db:04:78:4c:9e:86:f8:37:28:62:
2a:b0:d7:47:f3:a7:05:9c:a1:b2:c0:34:d8:21:77:
a5:65:38:8c:1f:df:a1:c2:f7:83:6b:33:b3:76:5b:
f0:af:a4:a4:ed:e5:06:80:62:e8:25:4f:f0:6f:1c:
9a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:97:6B:3E:93:53:21:B9:37:47:0A:4C:99:06:F7:6F:20:FE:91:8A
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1f:d2:5c:8a:60:8b:c3:16:2b:43:dd:57:84:2c:71:67:e0:
9e:63:a8:51:6e:60:d1:a0:08:e0:d0:a7:0b:7e:c0:11:42:38:
5a:e8:a3:fe:2f:33:46:b7:fc:9d:c3:8d:9d:5f:e7:d4:ed:41:
6d:10:59:a9:bc:b0:76:e7:0f:3b:d9:37:64:e2:8b:52:2f:9e:
23:b7:33:96:33:00:e8:e6:c2:0c:b8:ff:c9:fe:a6:28:43:97:
f2:31:c0:1f:f7:b9:cf:7a:f2:2c:a6:32:d8:85:7d:18:42:71:
93:e2:35:2c:d1:49:80:8d:b9:6f:5d:9c:1c:01:28:78:50:bf:
ff:36:36:70:9a:f5:ad:3c:34:2c:ad:32:d2:45:db:7e:b6:53:
81:43:30:1e:63:f6:1a:15:5c:4a:45:b0:f1:f0:06:a9:b0:d4:
81:e0:a9:77:03:6e:3d:98:70:1f:e4:fc:74:19:c1:02:20:46:
7c:63:46:84:7a:39:8c:5e:54:0b:7e:cc:e6:39:7c:53:57:72:
e9:ab:88:06:88:49:71:9b:27:3d:f9:5c:2a:a6:f3:00:e6:74:
84:07:f9:71:5a:cf:72:2c:30:50:ee:25:60:f3:85:c1:1e:87:
29:ad:cb:67:2b:03:79:67:56:9f:a4:07:45:08:7a:bd:17:b0:
44:a2:56:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:43 2025 by rpki-client