Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: faXQQrq5MKokQmQUs3PriZTq5yw+0jj+xQndHo4RVNc=
Subject key identifier: 71:68:B5:4F:64:EB:53:2D:CA:B6:B0:97:E6:BB:7B:B0:54:08:33:DB
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 0198D5F174B8A403CEB15E938F8CCCE85EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 0590
Signing time: Sat 23 Aug 2025 08:00:27 +0000
Manifest this update: Sat 23 Aug 2025 08:00:27 +0000
Manifest next update: Sun 24 Aug 2025 08:00:27 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: ChfaXF/hYO7ePp+X80K+unxuayCWPMvNC0TGRt0/07g=)
2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:74:b8:a4:03:ce:b1:5e:93:8f:8c:cc:e8:5e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Aug 23 08:00:27 2025 GMT
Not After : Aug 24 08:00:27 2025 GMT
Subject: CN=7168b54f64eb532dcab6b097e6bb7bb0540833db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:52:32:8e:31:ab:3a:94:ba:f1:90:c9:7a:
35:f8:f5:c1:90:e6:4f:1e:42:48:11:76:84:33:e2:
75:55:39:1e:cc:63:a0:01:cc:e1:39:91:cf:0b:07:
99:a1:c7:90:5e:6b:ac:50:ac:ac:53:fb:bf:e7:76:
c5:3f:dd:19:bf:88:28:ed:81:03:7b:09:04:4f:50:
74:b3:3b:60:2f:55:e3:ef:f6:83:9b:2f:23:fc:81:
5b:26:74:08:fe:81:c6:22:9d:4c:dd:99:a4:21:5b:
ab:d1:ad:bf:3b:9e:02:84:c6:07:07:6d:d7:78:c9:
db:80:84:e1:e8:64:59:37:4a:f0:a9:36:2b:fe:0b:
fc:50:72:2b:48:fe:c3:ce:65:be:8d:9c:19:e1:4f:
e7:74:50:15:cd:79:89:41:6c:80:a5:8d:15:e0:f1:
cd:64:79:cc:2b:ad:64:86:0f:6a:61:2d:04:1c:c9:
f4:4b:12:d0:80:3b:16:6b:01:46:2b:8b:24:16:01:
f4:2c:d7:43:5f:c3:6e:f0:0c:04:bd:b1:d6:0d:8d:
ff:53:e5:df:75:c1:d3:fd:cc:ca:f2:31:b2:2d:df:
b8:91:c4:90:b9:cf:29:8a:11:dd:9f:ec:bd:34:df:
c7:8a:8e:f5:39:eb:a4:60:16:76:10:21:3a:eb:da:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:68:B5:4F:64:EB:53:2D:CA:B6:B0:97:E6:BB:7B:B0:54:08:33:DB
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b0:16:18:a0:a1:79:75:22:1e:a3:94:40:4a:59:60:0c:40:
1a:cd:d2:96:04:d3:43:ee:fa:60:1d:f8:cf:1f:4e:22:7d:5a:
a2:d7:44:be:81:ed:11:27:38:d0:23:81:e1:e0:8e:27:73:be:
01:9f:e8:33:db:8d:b5:63:56:0b:99:f2:d4:da:b5:8b:a4:b1:
df:17:f6:8d:4e:43:5d:0a:bd:85:a5:a3:63:78:42:90:bb:3b:
2f:55:e0:46:88:0c:3a:df:e3:9f:d7:42:00:dd:32:d2:5e:48:
87:7e:26:92:00:b4:85:83:e5:70:f6:e6:e9:e1:99:5f:6a:e1:
e7:a1:8f:32:8d:76:a3:0b:54:c2:a5:b9:0f:ac:15:bd:8d:68:
3e:35:ec:f1:21:56:29:e8:a7:9c:d0:44:96:fa:c2:16:6b:74:
56:79:ff:cc:b7:f4:e3:b3:65:ab:9d:1d:39:56:65:6a:32:f4:
ec:68:1e:2b:83:e3:42:92:36:3f:39:e9:a2:d4:e7:e2:b0:02:
16:07:99:8c:80:ca:f0:0c:9a:7e:8f:b3:e0:94:06:ef:ac:e5:
83:f6:69:a3:03:b8:8c:66:07:31:8f:bf:49:39:12:97:40:89:
89:d6:36:49:3b:42:eb:39:67:c8:79:66:77:6f:be:7b:dd:fb:
78:e4:e6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:52:52 2025 by rpki-client