
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
File: CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft (raw, json)
Hash identifier: 6NDOOmTlgx/9y9HQ/M59nlOf0Aoil/Hf6XEW1/VZrGo=
Subject key identifier: 58:32:81:46:FA:3F:BE:3D:C1:C0:54:F7:87:3D:F3:F2:18:80:70:D9
Authority key identifier: CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14
Certificate issuer: /CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414
Certificate serial: 7F07A819CF539B5A68BBADA132C505B4B4549F58
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
Manifest number: 5E
Signing time: Tue 28 Jul 2026 20:15:08 +0000
Manifest this update: Tue 28 Jul 2026 20:10:08 +0000
Manifest next update: Thu 30 Jul 2026 00:05:08 +0000
Files and hashes: 1: CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl (hash: tpyDtATmt//99r7E0B9xVaFIUrKNltQXqp2Cg0A0rrk=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl
rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:07:a8:19:cf:53:9b:5a:68:bb:ad:a1:32:c5:05:b4:b4:54:9f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD6BF4AFA241230EC583BDDA397EFDCA63284414
Validity
Not Before: Jul 28 20:10:08 2026 GMT
Not After : Jul 30 00:05:08 2026 GMT
Subject: CN=58328146FA3FBE3DC1C054F7873DF3F2188070D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c9:2c:7e:47:29:24:68:cb:06:5b:19:77:ed:
0b:8c:cc:b3:d2:67:5b:a5:41:48:d7:66:33:ab:e8:
2f:fd:33:b2:4a:1b:18:aa:c0:f7:f7:6f:c7:78:8a:
8e:15:a7:92:ae:a6:d0:17:73:d4:0c:2a:23:f6:28:
92:c3:da:8f:8b:63:ec:51:1d:0f:d7:3f:e3:dc:7c:
31:3d:22:39:72:85:71:0e:1c:00:5f:46:ff:ea:f5:
4c:ef:fb:56:10:fa:e2:45:10:6d:32:c3:f5:d7:60:
5b:95:72:bb:00:b5:7f:ee:6e:ab:94:04:23:4e:f6:
39:19:35:13:de:81:85:11:f1:be:76:ba:d6:9f:b5:
f2:fa:77:b5:b4:6b:90:d5:1e:09:b6:54:45:ca:02:
25:ec:99:65:30:b8:01:9d:a4:77:20:93:5b:6f:61:
1e:22:f2:d8:62:49:58:1c:1d:ec:30:93:09:19:8e:
62:76:a1:55:94:27:2f:89:10:9b:cf:47:71:95:5c:
a3:e8:14:72:88:e7:56:59:5e:af:c6:53:32:68:c0:
06:fa:f7:4d:8e:fb:06:e8:54:00:cd:75:8d:d7:00:
bf:e3:be:83:56:34:4a:f3:a7:21:cf:17:a9:87:0b:
d4:85:27:c7:6e:26:4e:bf:eb:93:af:35:96:5c:58:
62:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:32:81:46:FA:3F:BE:3D:C1:C0:54:F7:87:3D:F3:F2:18:80:70:D9
X509v3 Authority Key Identifier:
keyid:CD:6B:F4:AF:A2:41:23:0E:C5:83:BD:DA:39:7E:FD:CA:63:28:44:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/CD6BF4AFA241230EC583BDDA397EFDCA63284414.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_82d5f38449e942a9a9ab28180056abfc/0/CD6BF4AFA241230EC583BDDA397EFDCA63284414.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:da:fc:e3:dd:97:ca:7d:14:9b:62:75:2e:57:ca:46:29:56:
c4:d1:97:3d:9d:9a:f4:19:4b:59:af:2d:25:68:d4:34:57:31:
b2:d4:69:7f:06:cc:4c:37:78:17:78:d0:25:43:42:c0:db:7d:
57:34:52:98:39:62:a9:20:93:12:fa:79:43:73:0e:9e:73:7c:
76:7e:bc:8d:64:ba:8c:9c:6b:d3:b0:aa:ba:e9:77:0e:9c:42:
67:0a:2f:c2:33:dc:99:95:63:a8:a9:6e:0d:f3:6a:b9:ce:9a:
da:8c:c4:de:44:67:dc:3c:39:c5:bd:a8:b6:03:c9:ee:ad:25:
4d:e7:ff:09:82:62:3a:c1:b0:83:4b:aa:56:c4:92:14:26:4b:
0b:87:09:6c:90:58:e0:88:75:4b:29:c7:e0:7f:b4:6e:9d:b4:
1d:72:05:fb:4e:c1:e8:a4:d9:69:ac:7e:3d:fe:ef:ab:30:c6:
54:ff:78:2c:68:56:f6:ce:fc:14:ce:fa:39:1e:66:01:f7:ef:
ee:19:6a:66:04:b0:4d:9a:26:ba:bc:85:d5:70:dc:77:e6:43:
aa:12:90:d0:b8:2a:bc:4c:56:0f:b4:f0:26:15:44:ce:42:ca:
15:ab:fb:c9:58:7a:e7:a3:44:62:87:de:2a:da:0d:52:99:fb:
5b:19:eb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:14:19 2026 by rpki-client