Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: KICic2VVUuEIaCnPdRQbm7MifKIVk+Wh6uE7+TIFYgs=
Subject key identifier: 1F:24:D7:AF:0C:34:BF:6C:2C:04:93:F8:20:0C:4A:21:00:E9:74:A5
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 01974742E491C1B21804B5F67A635E12B723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 08D0
Signing time: Fri 06 Jun 2025 22:00:55 +0000
Manifest this update: Fri 06 Jun 2025 22:00:55 +0000
Manifest next update: Sat 07 Jun 2025 22:00:55 +0000
Files and hashes: 1: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: GD52XYEXChKqSXoag9rGO2/0Jhdy8v1Se3Kt3W4vyGY=)
2: NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa (hash: VVaMaoTZROEEF0plazGCqpYH9htdlUUJkeqYuHZsPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:e4:91:c1:b2:18:04:b5:f6:7a:63:5e:12:b7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Jun 6 22:00:55 2025 GMT
Not After : Jun 7 22:00:55 2025 GMT
Subject: CN=1f24d7af0c34bf6c2c0493f8200c4a2100e974a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:df:a3:a2:91:bc:11:a7:84:27:d0:60:c5:
84:1b:a7:9a:a0:8f:7a:0c:3e:2b:f6:3d:cb:e8:9c:
0a:e2:9f:27:c7:0b:01:cb:d8:00:37:41:1a:47:44:
a0:90:f2:bb:be:3e:3a:f3:05:4d:55:2a:c8:48:27:
d3:f0:29:c3:b2:de:4d:06:5c:d9:83:0e:a6:8e:cf:
4c:12:e8:16:9f:2d:b7:2c:1b:a0:f2:f5:1c:60:6c:
4c:8c:c0:6b:5f:e9:62:6b:a9:dd:91:be:1c:9f:96:
c9:8e:ee:03:19:37:9a:37:37:f2:a1:8e:a6:3e:d2:
9a:27:a0:13:bc:cc:4a:ee:5f:16:ca:43:a0:30:f1:
fa:7b:16:ad:c8:34:4f:13:6f:91:f3:54:dc:f0:ce:
96:51:74:2b:99:90:89:65:d1:b5:f8:c2:16:cc:0b:
82:f6:f6:e5:23:a6:75:8b:0e:0c:81:8c:81:1c:9c:
e9:51:6b:12:57:c8:84:61:96:cf:0a:49:9d:01:a6:
3e:88:05:af:76:5d:44:26:24:56:c0:6f:10:15:7f:
f6:3f:86:b6:a2:37:30:54:00:c9:2b:b9:e9:da:81:
11:01:06:96:0b:4f:b5:2f:9f:6f:5b:3a:d7:a9:30:
a4:51:b1:95:20:75:06:4f:bb:45:5d:e9:22:ee:07:
9c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:24:D7:AF:0C:34:BF:6C:2C:04:93:F8:20:0C:4A:21:00:E9:74:A5
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a9:5a:83:d8:1b:d5:d1:05:0a:f9:2d:24:f2:bf:bc:0c:23:
99:65:a7:d6:6a:4a:97:c1:85:b6:54:29:a8:a4:65:bb:7b:11:
bd:f6:e5:f1:42:e5:fc:4b:7c:04:11:07:1b:b2:dc:da:dd:e4:
5c:2d:db:8d:5d:b0:d8:2e:2e:7f:e0:6b:e0:41:47:0d:e1:06:
21:d6:b0:4d:f6:2a:68:21:91:5b:ba:36:e7:7b:12:e4:04:4d:
3c:8b:73:70:bd:bd:1c:c5:ff:44:9b:47:bc:8f:83:61:40:d8:
44:d8:99:08:8e:24:8f:30:c6:b2:af:3e:d0:8c:a3:f1:a7:ee:
58:5d:3c:39:88:1c:78:35:e4:1f:d8:e0:22:9f:90:c9:18:5c:
d8:20:f9:56:5f:9c:bd:c9:3c:0a:45:f2:c4:e7:2f:27:32:9f:
57:50:19:8b:b3:67:ba:ea:c6:52:ac:be:a2:62:64:6d:31:0e:
7a:76:1f:75:ef:27:9c:07:e0:d8:a6:6f:56:ba:2f:80:d7:02:
96:bf:3c:1b:5b:11:0f:fe:15:6b:d9:53:b3:0a:79:68:6a:39:
31:13:b7:27:02:d6:86:24:b9:3e:80:48:14:7d:f2:e1:ac:e0:
b5:39:5c:da:c5:b1:7a:36:94:a2:99:b4:0f:2d:f6:cb:b7:30:
2f:8e:c6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:21:07 2025 by rpki-client