Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: rIpbj3HQ/gjbVzlfmKWGQHaOngxqu8lC+8PrYWr9lmw=
Subject key identifier: 53:1A:2F:B2:2C:47:2A:58:7C:92:E6:BA:74:C4:90:B6:82:A0:C3:B5
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 0197B745A797819CBC0BD235F1B57BF7AF74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 090A
Signing time: Sat 28 Jun 2025 16:01:24 +0000
Manifest this update: Sat 28 Jun 2025 16:01:24 +0000
Manifest next update: Sun 29 Jun 2025 16:01:24 +0000
Files and hashes: 1: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: jrqrNjUSuytR7XzkDD6tlNsonL7rA2QtksIOiMCHvpg=)
2: NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa (hash: VVaMaoTZROEEF0plazGCqpYH9htdlUUJkeqYuHZsPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:a7:97:81:9c:bc:0b:d2:35:f1:b5:7b:f7:af:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Jun 28 16:01:24 2025 GMT
Not After : Jun 29 16:01:24 2025 GMT
Subject: CN=531a2fb22c472a587c92e6ba74c490b682a0c3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:35:f2:72:7d:e1:37:a7:f3:20:1d:3c:9b:
19:14:a6:c5:dd:1b:a3:39:64:ef:aa:e2:63:60:4c:
48:fb:f3:ab:b5:bb:58:63:b3:c7:7d:9b:c9:f0:de:
18:63:dc:db:2f:38:83:ac:e4:b4:f7:01:ed:89:e0:
1e:a4:9d:32:cb:ae:7f:79:c5:8a:65:f4:6a:67:d9:
40:12:d7:10:4f:a9:18:03:4b:b3:4d:5d:47:a6:de:
ca:79:27:e2:2f:91:47:8a:44:10:51:de:d7:0b:37:
bd:d8:80:fe:0d:b8:e0:8a:d6:f7:db:03:84:3f:94:
88:d8:02:23:24:5e:01:c0:97:a4:3e:f3:34:5c:1e:
94:fc:8a:27:5a:2f:36:26:39:b1:e7:83:ca:c0:e9:
5a:58:e9:50:22:60:cc:14:c6:67:c4:de:85:0a:ef:
4c:33:56:84:44:3f:30:12:ff:e9:75:fa:d0:b5:dc:
2d:77:fd:47:d6:48:f4:0d:26:8f:04:88:1a:e7:c7:
23:81:2c:e7:f8:c1:3b:2a:35:39:a0:80:2f:f1:cb:
b1:c0:69:48:6f:05:c2:32:7d:f5:76:38:1c:52:ec:
c3:81:d5:c8:ce:b2:14:9e:86:8e:68:22:df:95:8d:
76:1b:ff:a0:e4:0c:9b:ce:ba:74:39:17:57:01:f8:
fb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:2F:B2:2C:47:2A:58:7C:92:E6:BA:74:C4:90:B6:82:A0:C3:B5
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5d:b2:ea:c9:b2:f2:39:4e:ce:82:70:b3:e4:43:db:83:4c:
fe:d4:3f:a6:9f:0b:a2:3c:92:93:2b:b0:08:78:c3:b2:45:fa:
19:03:c4:01:b3:ed:1e:97:80:17:2d:8d:dc:b6:65:25:89:10:
cd:19:4d:da:d1:0e:5a:b4:2f:a9:e4:46:fc:d8:fc:cb:9b:04:
86:f9:4b:87:16:00:a7:d5:36:22:c7:b4:8d:5f:cc:18:67:3b:
5b:ab:3b:6a:16:94:1d:08:12:03:d7:4a:65:9d:c2:f0:33:6a:
0f:94:e6:e5:41:69:54:2c:4e:cd:f6:0f:a4:da:83:47:39:b5:
c4:37:ac:99:0d:cc:19:89:ae:35:1a:23:19:76:50:4e:b1:44:
49:51:4c:04:47:67:53:f1:67:27:a5:0d:09:89:cf:d9:a0:98:
b9:1a:f5:67:a3:fb:94:8d:6d:ed:ea:e9:ed:4d:93:f7:ea:8b:
9e:dd:45:f8:57:f2:b3:76:ed:6e:96:b2:42:0f:aa:34:46:0d:
21:6f:a6:0c:3d:d2:07:d4:1c:ec:4b:eb:04:15:a8:13:a9:bc:
bd:24:56:98:a8:02:c3:2c:52:f4:f8:df:5c:d1:16:f2:d7:88:
92:84:34:1e:14:ac:ef:0b:83:04:a7:93:48:70:68:56:cf:5b:
99:52:c7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:26 2025 by rpki-client