Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: Spn1hWigAPI0jUuZS5kJIXc+FyuqS2f6/M4B8AMDHQw=
Subject key identifier: 28:C7:FD:B4:3D:1B:65:DE:BE:31:3D:E3:3E:EF:BF:99:4D:A5:0A:9F
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 019A725CD4F4B1F73B802FF9845822F2DE83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0A74
Signing time: Tue 11 Nov 2025 10:01:17 +0000
Manifest this update: Tue 11 Nov 2025 10:01:17 +0000
Manifest next update: Wed 12 Nov 2025 10:01:17 +0000
Files and hashes: 1: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: Xs3xSoo79tYWgwV9pl5ONMwmSIu9No0idYXCA7Yx01U=)
2: NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa (hash: VVaMaoTZROEEF0plazGCqpYH9htdlUUJkeqYuHZsPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d4:f4:b1:f7:3b:80:2f:f9:84:58:22:f2:de:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Nov 11 10:01:17 2025 GMT
Not After : Nov 12 10:01:17 2025 GMT
Subject: CN=28c7fdb43d1b65debe313de33eefbf994da50a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4e:b0:d2:6a:d9:af:95:29:e2:48:53:cc:c0:
a1:0a:df:ba:0b:46:41:ad:9d:45:6f:e0:6b:85:ef:
38:17:c7:cb:29:b6:2b:69:aa:39:8e:4a:2c:c8:3a:
d9:69:0d:9d:bf:ce:ae:ec:6a:d0:28:36:ba:3a:74:
09:2a:34:8c:35:5f:1f:26:cc:af:f4:55:c5:e3:9d:
e7:5f:53:7b:94:2f:d6:a2:df:e1:b4:40:6c:ef:8d:
31:47:b1:e5:47:08:16:a0:82:f2:75:31:09:f6:14:
54:4a:fd:a5:b6:75:d1:f7:c9:dc:6e:b0:28:53:18:
ac:64:37:a9:b0:67:98:e7:d5:3f:c5:36:3d:a7:b2:
31:b1:c9:40:b4:b7:3b:7d:da:14:c9:31:ae:ba:02:
55:0b:65:d1:b3:ef:6d:2a:2a:7f:4a:39:69:41:1d:
f0:54:8e:13:44:b6:eb:98:27:ab:09:08:17:6a:9f:
34:0a:19:87:3e:a1:dc:7a:98:56:90:51:c9:55:97:
be:4f:93:d7:f5:41:0a:c0:48:0f:98:23:c7:7b:76:
cd:ca:1a:77:8a:ed:b6:65:b1:58:cb:96:56:75:91:
77:8d:e2:4d:ab:9a:51:97:aa:9b:68:4e:2e:ae:78:
a6:ab:a5:84:3e:8e:32:68:0b:28:9a:d1:f9:9d:09:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C7:FD:B4:3D:1B:65:DE:BE:31:3D:E3:3E:EF:BF:99:4D:A5:0A:9F
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:80:c6:99:df:68:06:78:9b:b4:d9:cf:61:58:a6:7a:9e:be:
d2:2b:a0:24:b3:37:dd:ed:1e:58:1b:09:f1:b8:fb:42:24:7a:
68:e6:91:38:2f:c5:94:69:07:5d:f6:9c:a6:27:0d:1c:9f:5a:
d4:85:d0:62:57:41:13:9a:4b:7e:75:b9:9a:64:08:97:05:e5:
e8:7d:b4:39:2f:38:51:fd:5b:9d:5c:56:66:a5:97:08:f3:d9:
a4:b9:ec:2e:d2:ba:c5:ce:b1:75:b6:94:c8:0a:d1:67:08:cd:
64:f1:30:57:7a:0a:00:34:78:95:f2:b9:53:fa:3e:a7:25:b3:
a9:0b:e5:f7:22:97:76:1a:e9:b0:46:fa:99:d3:3e:b9:5a:4a:
9e:98:a3:84:33:5e:22:69:51:b8:27:54:8a:13:34:86:1a:59:
b4:c8:07:5c:8d:51:a3:72:24:d8:a7:3a:f2:a3:4f:09:c3:12:
a4:73:69:54:89:3b:95:f0:62:d1:3f:a1:ab:30:f6:b7:07:c1:
f5:70:4b:da:18:6c:1c:cb:96:43:84:59:ad:2e:73:fa:43:5d:
52:92:d9:69:42:8a:96:4e:d7:5c:81:61:a7:83:c7:bf:c8:0c:
f2:c8:29:6a:ad:5b:60:95:0c:e6:c9:38:d1:a1:ab:95:cb:9f:
dc:5b:ff:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:39 2025 by rpki-client