Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: n0fXe+klzErtOuIqXYcsdYp6oNzM99TtDCNRpUthYfY=
Subject key identifier: 15:24:F5:9B:69:26:55:BC:9A:3E:CE:4A:A6:93:E6:FD:EF:AE:A8:87
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 0199FC8F2438C486D940ACE520D6991CED51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0A37
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: MQ+1WAzNKFZ83J2jtwCa12PCjoWZmkA+JMuGwAlsf40=)
2: NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa (hash: VVaMaoTZROEEF0plazGCqpYH9htdlUUJkeqYuHZsPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:24:38:c4:86:d9:40:ac:e5:20:d6:99:1c:ed:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=1524f59b692655bc9a3ece4aa693e6fdefaea887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:11:39:9d:bb:6b:d8:10:31:b9:29:b1:12:
79:6b:b7:07:8d:5d:52:e9:f3:7a:25:96:65:96:0d:
25:5e:2e:4f:d9:7a:7a:20:f8:75:a2:4f:1d:42:72:
e5:bb:5f:e8:a1:65:2f:db:b6:c2:5f:bd:b3:d1:fd:
6c:43:8f:d5:5d:77:41:01:d4:1d:d4:13:37:ba:a9:
f9:21:d9:82:0d:bb:b0:f6:f8:2b:f3:26:63:ca:75:
93:31:5a:de:dc:a9:f6:2c:6b:f5:55:c4:b1:e1:bc:
f6:66:9c:e7:79:48:a8:16:96:ff:ae:8c:fa:5e:69:
01:01:6f:a3:88:d9:2b:3e:b9:a3:23:b9:bd:99:b9:
8a:7f:05:c0:da:cd:1a:6b:66:d7:65:6a:e9:68:a5:
28:30:59:da:81:c3:62:b8:5e:b9:91:17:4e:11:ec:
30:f0:e8:99:f9:f8:60:cb:7b:d7:7f:e7:12:3a:2e:
fe:51:4e:98:0e:a0:82:c6:de:85:39:11:88:b2:f4:
68:12:d8:c2:e3:eb:6d:59:ff:dd:4a:77:e0:58:73:
ca:25:00:f8:d6:85:7c:9e:dc:6d:c5:55:d5:52:cc:
ad:e7:16:b2:31:b1:82:8d:e2:48:95:ee:28:f7:49:
a2:4c:ce:ff:76:18:9c:5c:9a:2b:bc:83:53:3f:63:
80:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:24:F5:9B:69:26:55:BC:9A:3E:CE:4A:A6:93:E6:FD:EF:AE:A8:87
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b2:24:4c:36:6f:d2:7d:9e:2b:04:7e:9e:34:6d:ac:2b:80:
08:e5:30:db:1b:e5:80:3e:93:c8:73:ee:27:b1:29:25:46:c5:
dc:ec:38:c4:bf:c9:72:4b:3f:c1:05:38:2b:7c:4f:86:c6:3b:
50:71:ef:93:7c:c3:25:a7:36:1a:b5:9c:5e:f0:22:c1:c7:d1:
6f:7f:a4:20:4c:34:89:9f:0b:21:81:53:c4:84:c7:03:93:67:
b1:dd:8d:39:3c:dd:f3:ea:9a:0a:d2:b9:db:7a:fc:05:d9:71:
0f:68:2b:c4:56:2d:1b:7f:09:b7:93:76:9a:59:a8:a0:e3:ce:
0b:b0:5a:83:7f:7b:85:05:83:90:69:b8:45:d3:d5:b7:f2:61:
c4:e2:bc:3b:71:95:05:8d:25:c9:9f:f4:c5:e5:0a:79:28:aa:
e2:11:c2:96:3a:e0:70:cc:29:e5:78:d3:3e:b6:e9:15:98:45:
b4:61:85:ab:32:e0:a5:7d:98:27:fe:9e:ae:3d:be:73:42:f0:
77:16:7e:ec:e2:0e:74:5c:d8:a3:d9:22:b6:ec:99:8f:82:ae:
e3:e0:b6:c3:76:2c:91:69:52:a4:23:69:ce:f2:dd:3e:0a:cf:
1d:2c:4b:4d:02:46:e3:0f:7f:6d:d2:66:59:c8:d6:e1:80:cd:
66:74:ef:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:10 2025 by rpki-client