Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: DFcf3PytxTzro4Fz1HguG0tsZnZU6fx0QdMotrJBkyg=
Subject key identifier: A4:E1:53:23:13:A1:57:24:D5:81:10:66:DA:A0:82:D7:17:51:20:03
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 01988BB35039CE9095C7CCF8A6C2D131389A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 0978
Signing time: Fri 08 Aug 2025 22:00:41 +0000
Manifest this update: Fri 08 Aug 2025 22:00:41 +0000
Manifest next update: Sat 09 Aug 2025 22:00:41 +0000
Files and hashes: 1: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: X4qkSifhnnnCPcHtogLe68IAsLI2hCDF4khaOnsIVFE=)
2: NZSw-wLQ_N50zg3ZOre7yTkWkXQ.roa (hash: VVaMaoTZROEEF0plazGCqpYH9htdlUUJkeqYuHZsPZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:50:39:ce:90:95:c7:cc:f8:a6:c2:d1:31:38:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Aug 8 22:00:41 2025 GMT
Not After : Aug 9 22:00:41 2025 GMT
Subject: CN=a4e1532313a15724d5811066daa082d717512003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:3a:cd:14:11:1d:d8:53:c4:e0:70:29:8e:
97:d5:b5:6b:04:0b:fd:86:5f:c7:e3:c0:b6:9d:f6:
54:6d:38:bb:8f:cd:a2:8b:d0:25:4d:00:02:3b:6c:
02:1a:ab:fe:56:07:0f:db:70:5f:bf:a9:5f:58:de:
24:43:9b:63:23:10:5a:4b:e5:45:c0:aa:d5:08:85:
5b:f5:7f:c7:18:11:04:f4:ce:7d:21:65:6f:b3:08:
4c:c2:3c:d0:79:7d:5c:7b:a3:c3:2c:cd:9e:49:d5:
c0:59:1f:4e:cc:07:cd:80:08:27:c1:49:47:d7:59:
3c:05:2f:be:1a:fe:9f:8e:58:f4:6a:3b:a4:41:84:
42:ab:7f:bc:57:89:e6:6c:e9:96:0d:ce:89:48:c9:
f6:53:28:4d:a2:d5:7e:4e:6a:2c:91:7b:d8:b0:08:
5a:94:94:61:f1:65:40:41:7d:1c:5f:42:f7:56:dd:
ee:c3:96:73:ce:d3:f4:e1:3e:e6:9a:7e:27:92:43:
be:64:2e:9d:80:d3:bd:48:aa:ec:66:83:ad:ca:01:
43:c1:72:cd:40:34:35:ec:21:b4:54:bb:83:33:e8:
f7:c3:d2:ee:c9:5b:e8:e6:48:a1:74:92:9c:43:c5:
7e:b0:4a:bf:8a:d7:29:36:10:d2:ff:d8:f7:33:cb:
b2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E1:53:23:13:A1:57:24:D5:81:10:66:DA:A0:82:D7:17:51:20:03
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d6:50:1d:9a:21:5d:13:db:e8:c7:9d:0b:86:ea:72:9a:c2:
da:59:25:7c:f5:06:42:b9:e9:80:05:1b:03:72:15:4c:1d:4a:
4a:36:4e:a6:97:a3:1f:89:db:71:4f:ec:b8:46:14:19:bb:5c:
a1:fb:0b:6d:9c:6f:7c:f5:3b:48:96:7b:60:3b:d3:00:22:18:
5b:78:df:c5:89:5d:b5:b4:04:21:c4:76:ec:04:93:fb:d3:74:
73:9a:34:50:dd:b4:03:4e:12:91:66:89:de:de:d0:d8:f4:22:
9d:19:e5:fb:43:10:c9:7e:32:4e:10:05:78:36:13:63:83:aa:
e4:8f:d8:26:5a:8d:de:ed:bc:1c:31:88:4d:01:f5:70:92:8c:
4d:3f:9d:db:b0:86:39:22:6a:17:83:ee:6a:49:62:ee:b2:a6:
07:5a:d0:16:52:f8:fa:29:65:92:92:46:dd:c9:f6:38:ee:7d:
90:47:70:69:5f:ee:7c:fc:c7:a0:65:2f:a6:a4:26:34:ef:d1:
57:b2:dc:01:e9:dc:50:8b:e2:de:f2:8c:98:69:bc:26:70:a3:
f2:17:f9:57:ab:b5:de:3a:d1:c3:71:a0:ff:10:f4:e6:ed:fe:
ca:29:7c:a8:36:bb:9c:a0:5a:33:6e:6a:b6:4f:64:d7:72:25:
7e:d1:46:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs1A5zpCVx8z4psLRMTiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzE1YWFkNTliNGExNjFhNjNmOTI1YmQ3MTRmNTZjN2Rl
YzZhOGUwHhcNMjUwODA4MjIwMDQxWhcNMjUwODA5MjIwMDQxWjAzMTEwLwYDVQQD
EyhhNGUxNTMyMzEzYTE1NzI0ZDU4MTEwNjZkYWEwODJkNzE3NTEyMDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9I6zRQRHdhTxOBwKY6X1bVrBAv9
hl/H48C2nfZUbTi7j82ii9AlTQACO2wCGqv+VgcP23Bfv6lfWN4kQ5tjIxBaS+VF
wKrVCIVb9X/HGBEE9M59IWVvswhMwjzQeX1ce6PDLM2eSdXAWR9OzAfNgAgnwUlH
11k8BS++Gv6fjlj0ajukQYRCq3+8V4nmbOmWDc6JSMn2UyhNotV+TmoskXvYsAha
lJRh8WVAQX0cX0L3Vt3uw5ZzztP04T7mmn4nkkO+ZC6dgNO9SKrsZoOtygFDwXLN
QDQ17CG0VLuDM+j3w9LuyVvo5kihdJKcQ8V+sEq/itcpNhDS/9j3M8uyuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKThUyMToVck1YEQZtqggtcXUSADMB8GA1UdIwQY
MBaAFAgxWq1ZtKFhpj+SW9cU9Wx97GqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUt
OTFkZTlmMWRlYzJkLzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUtOTFkZTlmMWRlYzJk
LzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtZQHZoh
XRPb6MedC4bqcprC2lklfPUGQrnpgAUbA3IVTB1KSjZOppejH4nbcU/suEYUGbtc
ofsLbZxvfPU7SJZ7YDvTACIYW3jfxYldtbQEIcR27AST+9N0c5o0UN20A04SkWaJ
3t7Q2PQinRnl+0MQyX4yThAFeDYTY4Oq5I/YJlqN3u28HDGITQH1cJKMTT+d27CG
OSJqF4Puakli7rKmB1rQFlL4+illkpJG3cn2OO59kEdwaV/ufPzHoGUvpqQmNO/R
V7LcAencUIvi3vKMmGm8JnCj8hf5V6u13jrRw3Gg/xD05u3+yil8qDa7nKBaM25q
tk9k13IlftFGSQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:35:39 2025 by rpki-client