Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: 1qwxB9c0ASmCDGOuwAu/63Pn20GBNPXJsU6Vbylmy/M=
Subject key identifier: 3C:D9:F7:0C:85:BB:F6:F1:63:1D:BF:41:C0:7F:02:19:B7:F2:31:6F
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 01974A0CC8DA98BCE89C28748AE96EF6652E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 04C3
Signing time: Sat 07 Jun 2025 11:00:41 +0000
Manifest this update: Sat 07 Jun 2025 11:00:41 +0000
Manifest next update: Sun 08 Jun 2025 11:00:41 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: 7FD6ul/2h2Km+GQ3ZKpyhJ+/9DI4PPS5ARg+5kgSMn0=)
2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:c8:da:98:bc:e8:9c:28:74:8a:e9:6e:f6:65:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Jun 7 11:00:41 2025 GMT
Not After : Jun 8 11:00:41 2025 GMT
Subject: CN=3cd9f70c85bbf6f1631dbf41c07f0219b7f2316f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:72:57:c5:06:26:ac:69:22:63:d9:76:80:
6f:c3:67:c7:0f:dc:9d:f7:43:2c:59:3f:d9:dd:1a:
55:14:4a:32:7d:be:bb:b6:87:08:7e:82:51:bc:81:
07:d7:73:a4:c7:f5:24:bc:80:c6:4b:d0:36:2a:ce:
73:8f:47:c7:b1:5a:b5:04:26:dd:8d:e1:d6:55:25:
68:e1:43:57:e6:b0:b9:87:06:2b:58:14:1e:e8:6a:
a7:40:0e:93:a8:6b:e2:3e:5c:e5:95:43:59:d2:8b:
0f:05:bc:69:5a:e4:60:49:59:91:08:e6:98:1b:42:
63:e9:4d:29:4c:23:9e:c3:be:e9:95:4c:97:62:56:
bf:a0:dc:1f:f9:2c:a5:e6:95:c8:3e:9e:5c:ce:79:
c6:9e:72:d6:48:dd:8d:10:fd:99:e0:ff:47:05:b3:
f2:27:0b:a0:5a:5f:97:31:52:ff:4a:5e:ea:3d:30:
0a:9f:84:7e:fa:82:e4:b3:90:a6:c1:a1:32:5a:41:
09:6b:09:8d:72:36:ee:be:40:8e:83:24:7b:ce:af:
13:1c:df:dd:2b:9b:00:0a:92:63:1c:2e:92:a5:1d:
39:a4:e5:70:8c:a6:d0:ff:82:1c:1b:92:4f:b5:24:
26:a0:b4:0c:c9:1d:27:47:9d:1d:87:8a:40:b6:40:
5b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D9:F7:0C:85:BB:F6:F1:63:1D:BF:41:C0:7F:02:19:B7:F2:31:6F
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1e:41:4d:52:85:7a:85:fc:82:51:d4:bb:22:6d:36:81:b4:
3c:6b:8e:f9:53:68:2c:da:f0:5d:6b:af:8e:fb:b7:3a:48:6c:
a2:4f:bb:89:c9:d2:ec:6d:26:f1:f5:7c:4e:ee:46:0b:c6:34:
31:90:22:78:6b:cc:88:79:69:73:79:30:93:02:04:7d:f8:19:
ce:81:b5:be:69:f5:c8:e6:f6:5f:21:58:0d:c6:0a:13:d3:a8:
1c:8b:2b:8f:96:17:c2:5f:4d:14:0d:e8:1e:db:fd:f0:df:44:
e7:25:75:97:ba:35:d9:07:85:20:14:a7:14:97:01:c4:cb:82:
e5:3c:16:36:5d:bc:2e:21:c6:a2:1c:11:a9:97:12:1a:e4:c1:
1c:eb:e0:81:9c:71:2f:ec:a9:40:f1:4c:ce:70:d2:f6:05:40:
21:40:da:a2:cf:a3:2d:21:f7:cd:ae:ad:06:71:21:8f:a7:6a:
fb:20:07:26:be:64:69:3a:a8:2a:9e:db:29:e7:db:22:c9:58:
f1:3a:13:13:2f:77:8e:c1:a7:6a:fc:48:65:00:17:10:37:19:
34:9a:87:4c:f6:67:30:c2:76:15:fd:ac:8b:eb:f1:af:80:e1:
63:36:42:a3:b2:bd:04:9c:bd:cc:3f:ce:34:f8:63:b2:97:ae:
18:ab:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:56:27 2025 by rpki-client