Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: VIYBeXNbAz5KBGLbmpCuxahmBGuwyuU5ODznEDN7EJI=
Subject key identifier: 6D:E3:B6:F0:A2:68:2E:1A:89:1D:4D:2D:50:42:E7:1D:39:60:D2:71
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 019848F71232CB9CDFD21DC3F55FA8789DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 0547
Signing time: Sat 26 Jul 2025 23:00:08 +0000
Manifest this update: Sat 26 Jul 2025 23:00:08 +0000
Manifest next update: Sun 27 Jul 2025 23:00:08 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: 9ciezPz+fyjDVHnmx5U53WDO1yGMT4nrH8SocRe6iIg=)
2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:12:32:cb:9c:df:d2:1d:c3:f5:5f:a8:78:9d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Jul 26 23:00:08 2025 GMT
Not After : Jul 27 23:00:08 2025 GMT
Subject: CN=6de3b6f0a2682e1a891d4d2d5042e71d3960d271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:06:ed:53:29:60:4d:68:cc:2e:86:33:d5:3b:
43:ff:e8:ac:bc:b7:12:fa:28:72:16:42:83:70:0c:
da:7f:bc:7e:9c:b4:33:89:be:4c:1a:e1:18:6b:d2:
89:2b:2e:78:ae:e4:08:6a:28:48:69:9a:c8:f7:38:
b4:86:26:6a:f6:cb:ae:6a:99:87:1a:b4:57:fe:96:
d8:a9:3b:59:9d:d7:86:bb:1f:7f:2c:ac:e4:70:b7:
34:16:2f:03:75:23:c2:42:a7:95:0e:bd:3b:4a:da:
e1:8f:43:25:c8:7c:db:fe:58:7d:c0:68:2a:47:72:
5d:27:6c:1a:01:61:0d:14:a2:92:ff:1b:6e:d5:60:
ee:fe:ff:12:c7:f4:72:cb:f8:67:a7:74:ea:31:20:
66:85:c3:49:09:12:0e:90:af:99:af:10:56:7b:0b:
8a:5f:4e:8e:ce:73:d2:fe:0e:55:2a:06:fb:cb:7b:
75:cd:3c:a5:98:56:8c:a9:06:09:b3:29:53:f2:8b:
cc:5e:82:33:45:9c:e8:de:93:f4:01:53:37:c4:c9:
4e:d5:a4:b9:bf:d2:61:71:39:14:dd:4a:41:24:ba:
44:d3:cf:f3:c3:62:c2:fa:af:db:2b:9d:55:93:04:
02:46:c8:a2:8e:74:f3:0d:03:ab:80:2c:2c:12:6a:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E3:B6:F0:A2:68:2E:1A:89:1D:4D:2D:50:42:E7:1D:39:60:D2:71
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b5:cc:76:2d:51:b0:df:f4:e7:99:15:0d:a8:0d:3c:02:7a:
0e:b9:ac:1e:af:e3:b0:ea:94:64:82:fd:d0:bb:67:ce:31:51:
ed:72:7d:78:f1:55:18:c9:27:26:02:32:65:64:6e:22:5f:7b:
97:ed:93:93:fd:78:58:fa:0a:88:4e:8d:a7:d0:0b:86:9d:25:
ea:fb:16:b9:8d:58:df:41:23:de:02:44:0c:28:d5:84:be:9f:
6b:15:19:86:f2:d1:05:f9:29:d9:9b:d8:2d:d8:f9:07:15:c3:
64:d6:35:02:29:4d:b1:d3:4f:75:ec:6b:4a:58:ab:8b:83:df:
73:4f:da:ed:44:4e:00:85:46:23:6e:00:30:7b:54:90:62:ea:
3c:c3:a8:38:a2:1e:0d:f5:d4:42:fe:ea:b8:52:25:27:19:bb:
a5:d8:c1:44:58:23:bb:43:c6:3c:9f:c7:cd:0d:ab:38:4d:d0:
0d:16:14:6f:9a:e8:e7:d1:c3:42:a3:ee:1b:64:4d:f0:cb:e3:
fc:f4:60:44:12:a6:90:8c:9b:29:d0:2e:9c:37:4a:0a:d5:4f:
46:77:9f:d0:38:4c:e4:cb:34:0c:39:33:1f:43:97:8f:e6:36:
8f:38:df:87:94:b5:cc:37:b2:93:8e:93:2d:46:b4:5e:7a:46:
1d:32:d9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:07:32 2025 by rpki-client