Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: Oi5v405i7XUVNHPh7StJCe9z0Z6eWZxdanIVm8kdkUw=
Subject key identifier: 31:DC:D9:9F:44:37:90:FD:48:C0:24:FE:4C:CF:4D:90:ED:1D:3B:B5
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 0197B820E31A522B5D74830D913901E5B338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 04FC
Signing time: Sat 28 Jun 2025 20:00:52 +0000
Manifest this update: Sat 28 Jun 2025 20:00:52 +0000
Manifest next update: Sun 29 Jun 2025 20:00:52 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: ZFPzFgcUF+awvu3nENY4id4wWJfqIxOHBQDu41KuMc8=)
2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e3:1a:52:2b:5d:74:83:0d:91:39:01:e5:b3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Jun 28 20:00:52 2025 GMT
Not After : Jun 29 20:00:52 2025 GMT
Subject: CN=31dcd99f443790fd48c024fe4ccf4d90ed1d3bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:7e:d0:89:2e:6d:23:d5:96:1a:a6:40:37:2f:
23:6d:ad:91:ef:ff:5d:5f:f8:7b:47:eb:a9:1b:12:
24:1b:22:e2:07:f4:3f:94:bf:0f:4a:9e:37:33:ab:
f2:66:fc:80:d0:2b:a0:0e:ec:8a:6b:ee:d5:63:55:
b5:79:96:d7:08:a9:f9:d3:6e:f6:7d:77:c4:a5:a7:
e3:95:e4:9e:27:14:6d:a8:e6:29:ab:16:36:d1:ae:
97:68:a2:e5:13:c7:c4:90:3b:20:8b:66:bf:52:82:
8a:4a:67:1b:a7:b0:45:e4:1a:f1:6d:42:a8:31:3e:
b0:72:10:0f:61:93:2a:19:af:fd:ee:ff:d9:8d:49:
ef:e9:38:ed:56:33:69:19:6d:97:78:ea:90:15:12:
2b:5f:84:e6:b2:43:f5:30:fe:6e:13:3c:83:85:d7:
58:7b:66:ac:ef:c6:76:8d:9d:ad:08:95:6a:8d:f6:
53:ed:bd:d5:61:6c:59:0f:a1:59:2a:53:24:3f:78:
00:ad:54:89:2b:02:a4:9a:35:4d:b1:52:62:03:8f:
c1:97:d5:70:60:1b:3b:0d:16:d1:ec:e6:ef:08:ce:
7d:07:f5:ba:b5:84:37:0a:11:3d:9f:df:4f:98:f5:
b7:50:8a:29:bd:a0:7a:a2:ba:57:7a:d0:3b:3a:50:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DC:D9:9F:44:37:90:FD:48:C0:24:FE:4C:CF:4D:90:ED:1D:3B:B5
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cb:70:c7:6e:75:d9:3f:dc:21:24:7f:38:f3:91:30:1c:25:
d8:7a:38:c5:aa:f8:6a:cc:25:cd:46:13:7f:72:72:b8:5e:39:
4c:bd:9a:bd:c5:c7:c5:4f:c9:19:32:85:13:7c:69:d0:75:f1:
ec:34:bc:5b:cd:10:39:57:fb:e4:0c:e9:6b:0c:f5:47:b9:aa:
4a:86:0e:0f:c9:bd:69:85:b4:53:e5:f8:e5:a6:d1:6a:87:f0:
63:09:c2:57:b6:22:b2:74:50:57:ba:17:4c:86:7e:0a:bf:6b:
df:b8:0b:3f:cd:b6:59:cd:ee:0c:7c:7a:9a:d6:26:b7:8c:bc:
32:20:bb:84:a7:6c:2b:e4:62:9e:3d:73:22:1f:6f:b4:92:bb:
cb:21:aa:a7:32:41:03:ce:57:cb:a5:81:55:ef:6f:df:60:5f:
e9:3d:b1:17:88:ad:e7:06:49:9d:22:af:f2:39:c4:4c:00:fd:
d0:74:6a:0d:4d:58:e7:47:3c:cc:54:4d:fe:c6:45:ab:08:b6:
78:5f:3b:63:8f:11:fc:c5:9f:b6:cd:e2:19:60:88:f1:68:6d:
88:71:cc:75:f4:63:7e:8e:eb:79:51:cd:87:21:37:f6:f9:f8:
00:a8:95:7b:81:73:a0:ae:2d:ae:9a:b7:f4:ed:7c:16:57:52:
dc:08:8b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:55:22 2025 by rpki-client