Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: AdhbD3GswKyfAIJ71s9h8GD32QwEtGogLTF2Iz4ubwU=
Subject key identifier: 1C:FA:C9:74:C0:9B:9D:26:37:22:FC:EF:EC:94:4B:F1:4F:3F:3B:1C
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 0196A01ACBC7562C75E521FA1F0825B09753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 046B
Signing time: Mon 05 May 2025 11:00:32 +0000
Manifest this update: Mon 05 May 2025 11:00:32 +0000
Manifest next update: Tue 06 May 2025 11:00:32 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: 2DRM0t0z7qNeXQZqfv3ueeZ3ottHmM+KD1t0/KJIo0Y=)
2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:cb:c7:56:2c:75:e5:21:fa:1f:08:25:b0:97:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: May 5 11:00:32 2025 GMT
Not After : May 6 11:00:32 2025 GMT
Subject: CN=1cfac974c09b9d263722fcefec944bf14f3f3b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5b:f0:db:f6:c8:a9:de:96:83:17:8a:2e:ba:
2b:fb:f9:ed:9c:7d:61:39:9e:b2:b0:9e:96:eb:f1:
80:b8:e2:20:47:ed:ad:a6:0f:ca:16:f3:d7:4a:51:
05:75:16:5f:b9:7e:e9:36:ce:0a:69:5a:f8:90:58:
9c:ac:e4:8e:fa:3f:0e:e7:41:09:bc:27:06:21:01:
80:36:53:95:b0:62:9b:12:54:4a:d0:8b:0a:f5:37:
dc:56:65:c9:ad:f5:06:5f:9d:93:08:de:1c:79:e5:
1b:af:e1:dc:e7:49:37:f9:f1:f4:af:c3:c8:16:7d:
d1:60:53:c2:4b:12:ca:91:a8:a9:73:30:65:4c:02:
0d:18:96:ea:6d:f6:9b:0f:14:07:a0:dc:73:f9:7f:
0b:2f:30:a4:0d:fe:73:25:d3:a3:a6:15:82:66:65:
98:9b:8c:c4:6e:e3:5b:d1:49:e1:58:d9:f2:b8:5a:
1b:0a:2b:7e:65:46:8f:ef:e4:04:55:c4:0a:4d:6b:
20:63:71:5b:ce:0b:22:92:ec:0c:e1:df:4d:58:9e:
65:8e:6c:0e:fa:2a:8a:07:6d:93:d8:b3:a1:30:96:
ce:bc:2b:3c:2e:f4:6d:12:f4:8d:78:06:68:1b:15:
bc:0b:ec:b4:3d:ac:81:39:a0:8d:ac:2a:2b:d7:8e:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:C9:74:C0:9B:9D:26:37:22:FC:EF:EC:94:4B:F1:4F:3F:3B:1C
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d4:21:89:0f:74:89:ce:fb:18:d6:fb:c5:20:70:68:14:15:
b9:95:f6:b2:2d:c1:ab:20:52:a9:1f:5d:58:10:af:a7:2b:a1:
60:f8:2f:69:65:e3:a5:56:df:bb:4d:8c:b3:5f:4e:4b:46:27:
72:9c:b1:89:f9:87:30:5d:b5:2a:52:0a:52:d7:3f:02:98:e8:
ff:3d:49:2c:7d:bc:56:ea:be:19:c6:7c:2f:b9:7c:01:29:86:
43:af:dd:ff:35:8e:40:83:48:7d:6a:35:15:3a:64:66:7f:cf:
1c:ee:7d:1a:e6:d2:8d:64:16:fa:8f:99:ee:7a:bc:22:9f:6e:
b4:cd:a8:1b:d9:69:62:7f:b3:49:13:2d:27:38:f6:a0:a8:9b:
14:84:0a:3d:fb:9d:05:de:1d:fd:54:d9:5d:2f:2c:24:f5:71:
fa:92:69:f5:01:11:45:6b:68:06:ec:47:b2:0f:80:29:ae:35:
36:48:26:8b:cc:31:a8:b1:c5:d6:79:cb:42:ec:bb:2e:d4:fc:
59:cf:3a:6e:84:35:30:79:11:4d:4c:88:97:97:21:34:bb:e0:
6c:20:31:62:1e:8b:d9:4a:c1:86:45:13:74:7d:97:43:93:e5:
3a:53:07:d5:72:41:75:76:fa:5a:76:d2:e1:0f:2c:8d:4c:87:
87:b1:5a:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZagGsvHVix15SH6HwglsJdTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZjZjOGY0NmZjODBkMmY4NzdjMzVmZDI4ZDhhMDY1MWI3
MDgwYWUwHhcNMjUwNTA1MTEwMDMyWhcNMjUwNTA2MTEwMDMyWjAzMTEwLwYDVQQD
EygxY2ZhYzk3NGMwOWI5ZDI2MzcyMmZjZWZlYzk0NGJmMTRmM2YzYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Vvw2/bIqd6WgxeKLror+/ntnH1h
OZ6ysJ6W6/GAuOIgR+2tpg/KFvPXSlEFdRZfuX7pNs4KaVr4kFicrOSO+j8O50EJ
vCcGIQGANlOVsGKbElRK0IsK9TfcVmXJrfUGX52TCN4ceeUbr+Hc50k3+fH0r8PI
Fn3RYFPCSxLKkaipczBlTAINGJbqbfabDxQHoNxz+X8LLzCkDf5zJdOjphWCZmWY
m4zEbuNb0UnhWNnyuFobCit+ZUaP7+QEVcQKTWsgY3FbzgsikuwM4d9NWJ5ljmwO
+iqKB22T2LOhMJbOvCs8LvRtEvSNeAZoGxW8C+y0PayBOaCNrCor144WqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBz6yXTAm50mNyL87+yUS/FPPzscMB8GA1UdIwQY
MBaAFAn2yPRvyA0vh3w1/SjYoGUbcICuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xOTdkMGMtMDJmMy00MDQ5LWE1ZmEt
ZWU3M2M4ZTcwNDdkLzEvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8xOTdkMGMtMDJmMy00MDQ5LWE1ZmEtZWU3M2M4ZTcwNDdk
LzEvQ2ZiSTlHX0lEUy1IZkRYOUtOaWdaUnR3Z0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsdQhiQ90
ic77GNb7xSBwaBQVuZX2si3BqyBSqR9dWBCvpyuhYPgvaWXjpVbfu02Ms19OS0Yn
cpyxifmHMF21KlIKUtc/Apjo/z1JLH28Vuq+GcZ8L7l8ASmGQ6/d/zWOQINIfWo1
FTpkZn/PHO59GubSjWQW+o+Z7nq8Ip9utM2oG9lpYn+zSRMtJzj2oKibFIQKPfud
Bd4d/VTZXS8sJPVx+pJp9QERRWtoBuxHsg+AKa41Nkgmi8wxqLHF1nnLQuy7LtT8
Wc86boQ1MHkRTUyIl5chNLvgbCAxYh6L2UrBhkUTdH2XQ5PlOlMH1XJBdXb6WnbS
4Q8sjUyHh7Favg==
-----END CERTIFICATE-----
Generated at Mon May 5 13:28:38 2025 by rpki-client