Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: 4GZZCAHW6DkyqZ1ZF9iQYxinAGucRw0qc9fW08I2NUQ=
Subject key identifier: 98:06:0D:D3:60:6F:D2:DB:A5:16:B9:42:53:F9:D9:9E:46:AE:EE:15
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 01984A09EBEF7C7B52AC1D7DC2B9F576975F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0956
Signing time: Sun 27 Jul 2025 04:00:20 +0000
Manifest this update: Sun 27 Jul 2025 04:00:20 +0000
Manifest next update: Mon 28 Jul 2025 04:00:20 +0000
Files and hashes: 1: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: H2v8yC34418nLSS8tkJkWqG0vIGuDstFuKx3leFV5Uk=)
2: NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa (hash: VVaMaoTZROEEF0plazGCqpYH9htdlUUJkeqYuHZsPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:eb:ef:7c:7b:52:ac:1d:7d:c2:b9:f5:76:97:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Jul 27 04:00:20 2025 GMT
Not After : Jul 28 04:00:20 2025 GMT
Subject: CN=98060dd3606fd2dba516b94253f9d99e46aeee15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f8:8a:88:a3:61:d3:18:ac:fe:3c:2d:aa:22:
04:4f:b4:bc:50:eb:3d:c2:2b:6e:db:3d:cf:30:3b:
72:eb:5e:33:ab:68:6b:30:03:27:d8:cc:29:85:6a:
10:da:6f:be:12:0f:eb:70:9a:e6:bd:46:0b:af:9a:
3d:09:95:3f:6b:83:a5:dd:4c:f0:00:ff:a9:2e:61:
1a:cd:18:a9:cc:c5:37:c9:17:87:e6:eb:e6:99:46:
c1:b9:69:f0:ce:61:96:9b:e4:a2:b5:fd:7d:bf:fe:
54:fb:ac:4c:7f:73:b4:bf:38:06:df:55:31:6c:86:
61:e0:ba:8e:e8:a4:ff:62:20:16:24:fe:fe:9e:a5:
20:db:66:75:ae:57:82:aa:be:31:65:a5:8c:05:75:
39:59:7f:fe:06:3c:3d:85:4a:2a:5a:7c:f3:bf:2c:
ab:83:c2:2c:c8:9e:ec:76:14:8a:ba:97:80:22:bb:
c8:46:41:cb:e1:22:73:92:44:64:ef:58:2e:16:7c:
82:fd:71:11:d0:f3:0a:c4:dc:67:97:b8:b7:cc:09:
c5:6b:5c:54:88:76:0c:51:fb:65:37:c7:0d:a1:78:
b6:77:20:5c:71:27:bf:85:d5:a3:fc:e3:37:c4:40:
4c:8a:48:58:c9:e9:cb:11:bf:99:fc:7d:8f:d3:32:
ae:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:06:0D:D3:60:6F:D2:DB:A5:16:B9:42:53:F9:D9:9E:46:AE:EE:15
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:02:38:55:07:5c:8a:28:d5:0a:6f:ff:62:2c:95:18:29:e7:
66:8a:28:4b:e3:c1:97:14:4e:97:05:18:3b:fb:57:55:6e:b1:
89:f6:c2:9d:9b:b9:1f:7c:84:78:e8:69:37:68:91:79:4a:04:
1b:b7:04:d3:aa:83:71:74:12:cd:5e:3a:d9:c1:b3:ce:8b:8b:
64:96:c3:d2:18:1b:04:86:cb:14:cd:fe:cf:91:90:c8:e0:1c:
5e:19:49:a5:89:ad:18:47:cd:a0:d5:67:c1:21:4b:cb:1e:55:
46:17:79:ba:46:86:13:0b:ce:48:48:34:7d:2d:6b:40:93:d0:
4f:64:77:0c:1f:38:7c:20:e7:f8:1f:cd:82:6b:45:8e:13:66:
3f:ee:a4:c0:70:bf:6a:5b:30:9d:8d:a8:03:59:82:c1:bb:c3:
9f:0a:f8:1a:01:14:9f:be:29:38:cc:d2:62:ad:4b:e3:3b:01:
22:e9:32:5c:b0:fe:8f:87:ef:e7:c9:ec:de:1a:49:0b:05:ee:
79:7b:1d:a4:c3:5c:5c:0a:5f:81:16:02:68:e1:03:36:e6:09:
e2:4d:e0:0a:de:84:a2:0c:95:b6:f9:a6:86:78:83:27:0c:fa:
55:f8:c4:8c:5a:98:08:a2:fc:99:05:f2:76:50:21:ce:45:de:
7a:c5:7d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:12:04 2025 by rpki-client