Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: 3h4ORZ9avt2ddkxrxEHznMwk4AZrkmFS/SQ/b34x4cQ=
Subject key identifier: DD:D4:7D:DC:8F:88:64:C1:26:C1:05:89:57:7B:82:6B:5E:4F:57:40
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 0199FD6B0C1F71DD3ACCEE390FCCF07A3222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 0629
Signing time: Sun 19 Oct 2025 17:01:14 +0000
Manifest this update: Sun 19 Oct 2025 17:01:14 +0000
Manifest next update: Mon 20 Oct 2025 17:01:14 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: wWUjGi90hSrKRBnXKL4GpwcexALvcvfeC6iU4y2ygTY=)
2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:0c:1f:71:dd:3a:cc:ee:39:0f:cc:f0:7a:32:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Oct 19 17:01:14 2025 GMT
Not After : Oct 20 17:01:14 2025 GMT
Subject: CN=ddd47ddc8f8864c126c10589577b826b5e4f5740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3b:bb:16:e9:97:66:c3:e2:41:3f:cf:96:78:
91:22:d8:6a:ed:18:b1:ed:fa:99:85:d0:fb:25:32:
05:9e:d5:87:3b:b0:88:1d:2c:b2:88:ed:cd:21:6f:
67:59:68:b5:26:49:48:a2:bb:37:19:21:34:90:a3:
bd:67:a1:ba:60:05:e3:83:5c:48:79:87:81:12:36:
a9:0e:43:12:3a:a4:98:ee:69:c2:0e:e1:1f:74:5b:
88:19:ab:ea:30:fe:e9:e2:9b:b8:e1:4c:a8:73:9a:
9b:26:46:2f:7b:57:9d:56:85:7a:90:58:35:c7:d2:
70:69:0f:02:9e:6d:1e:58:9c:c5:99:ba:2f:73:d9:
59:1f:46:19:1d:d4:5e:9d:10:cf:ed:0e:91:dd:da:
66:cc:21:8d:f5:d0:6c:7b:ed:54:30:a1:98:c4:d6:
31:2c:d2:5d:7a:30:a6:3d:ad:e8:61:61:cb:71:aa:
2f:fb:ba:51:b4:3d:83:26:7f:76:1d:31:4c:22:e0:
ef:53:fe:d9:46:6e:f3:38:c3:5f:3a:ad:da:55:47:
4f:07:51:69:28:eb:c1:54:b2:47:92:e7:89:e8:9d:
11:63:55:03:1a:19:03:d7:ad:1f:f4:4d:3d:e3:46:
89:73:c7:20:11:08:2c:ae:dc:c0:3f:4e:88:3c:5c:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D4:7D:DC:8F:88:64:C1:26:C1:05:89:57:7B:82:6B:5E:4F:57:40
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:af:8f:1b:3f:5a:f2:a2:e0:15:ae:ff:04:1e:d9:6c:03:0d:
14:94:cf:cc:43:2c:e3:db:b2:ef:2a:01:99:ee:ec:7d:a6:99:
e3:90:28:12:9e:e8:c4:cc:64:61:95:d4:1b:41:c0:40:eb:bb:
2d:a3:d8:84:28:27:40:55:26:66:7f:c5:1c:e3:84:92:c2:ed:
23:06:d6:79:e9:08:6a:dd:da:3b:63:ed:12:4c:e0:65:e1:b3:
75:3d:24:14:4a:cb:b6:48:15:23:51:c7:92:ea:e3:ca:65:b8:
c7:4d:0d:66:7f:46:eb:6f:54:8a:0e:d4:eb:95:cc:94:82:49:
d3:61:f8:c3:61:1e:a3:47:d9:79:3f:64:c9:ef:63:8a:a7:d9:
06:2b:bf:6d:3d:c5:41:d6:1a:60:ca:1d:9c:19:b4:24:ab:46:
6a:ac:37:2b:f8:e6:09:16:c8:d0:a5:1f:70:0b:52:f7:7e:16:
d3:cd:ba:6e:fb:54:24:cc:8e:33:93:c8:b0:8b:77:6b:1e:e3:
3f:75:9d:57:19:1d:54:13:66:77:e3:b8:86:bf:bd:05:09:8c:
53:eb:03:46:8b:a6:3f:3c:7d:28:f1:c5:76:43:df:59:9a:7f:
83:5e:1e:80:40:a1:92:2e:83:5c:b1:c9:94:2d:e4:28:78:fa:
be:ae:46:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:01 2025 by rpki-client