Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: 5qcQzpBpU85rz2Par+c4SLnvZDEoHBT5zjZyZBHu2Y4=
Subject key identifier: 06:98:40:5F:08:76:EF:7D:F4:0D:C9:02:86:00:CD:5E:51:CB:9E:D6
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 019A7149EBF6F5293658BBFE714789AB1A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 0665
Signing time: Tue 11 Nov 2025 05:01:01 +0000
Manifest this update: Tue 11 Nov 2025 05:01:01 +0000
Manifest next update: Wed 12 Nov 2025 05:01:01 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: MR9b1CbkxraVZrr5e1p5OxxWu/dmsjA25Z5iv/QDp2E=)
2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:eb:f6:f5:29:36:58:bb:fe:71:47:89:ab:1a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Nov 11 05:01:01 2025 GMT
Not After : Nov 12 05:01:01 2025 GMT
Subject: CN=0698405f0876ef7df40dc9028600cd5e51cb9ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:c8:18:42:4c:3c:55:00:d5:31:77:6a:18:
53:59:fb:07:1c:9d:d6:f2:44:e5:da:3a:8c:53:48:
70:da:98:0c:11:24:c7:c3:85:1d:55:18:a1:68:9d:
2e:4b:93:37:ea:d9:71:0b:a3:a7:6d:b6:c8:b4:f9:
00:0c:ba:5b:cd:c6:0e:3b:34:7d:03:53:33:f0:42:
93:d8:df:ed:00:43:90:38:41:e8:b3:6a:96:43:97:
f0:c8:0f:e1:42:60:d4:0f:7e:68:f6:77:a1:a7:d6:
3c:5d:e1:af:2d:b2:c8:fe:b6:e7:5b:00:82:b1:6f:
fa:4f:7f:4b:85:fa:1a:b3:16:82:eb:c3:7c:82:10:
b2:ab:19:31:f6:79:f4:ef:08:4c:b7:9f:53:ec:51:
e8:1a:4d:6a:29:5b:6a:ec:e6:5d:a4:7a:62:3f:f5:
9a:8a:50:c4:8f:7f:71:cb:c9:9e:92:18:b8:b3:49:
76:46:64:f8:54:01:68:de:42:e0:c3:0d:0a:4b:db:
2b:40:de:7f:b3:82:04:93:d2:9e:05:5a:67:ab:f7:
a6:82:ab:63:3f:a8:b4:70:da:be:cf:b4:db:f7:aa:
bd:26:dc:8e:dc:b0:2c:3e:06:81:12:98:5a:5d:2a:
f2:5c:a2:ae:08:b2:9b:ef:6f:51:e6:d2:c5:92:0b:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:98:40:5F:08:76:EF:7D:F4:0D:C9:02:86:00:CD:5E:51:CB:9E:D6
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:86:dc:a7:36:3c:73:f0:3d:7b:67:f2:c0:de:eb:5c:bf:e0:
1d:0a:69:e0:5b:79:07:4d:f4:df:c7:0c:8d:f8:22:cf:4c:f5:
cd:01:97:f8:a2:d2:99:2f:12:13:d1:31:21:67:a9:d3:2d:16:
8a:6c:75:db:0a:07:e7:00:28:0e:e3:0f:b1:1f:2e:80:f8:46:
a5:21:57:b0:5b:18:28:36:1e:e2:6e:f1:a7:5e:21:0f:85:9f:
4e:2b:f8:c8:b3:36:b0:fc:09:58:cc:f0:7e:84:c4:b7:09:cc:
89:82:9e:19:3d:27:15:b2:34:c0:ce:5f:44:70:15:e2:7c:53:
92:73:5c:82:cf:34:20:16:72:23:61:7b:4e:ff:1d:2a:92:a5:
80:20:ef:44:3b:9d:4d:60:8b:97:c8:1d:7a:43:12:1a:71:3f:
5c:ed:4f:b0:6e:94:61:36:3f:bd:6f:b7:00:0e:75:83:7c:2a:
cf:64:fb:45:69:5f:43:7c:e0:bc:ea:f6:d2:78:7d:c6:0d:85:
98:22:1e:53:b0:6c:8b:07:7a:e6:47:ae:30:1b:85:54:d7:86:
cf:d4:3b:92:82:8b:25:c9:bf:ec:41:31:c8:0e:fb:87:f8:fb:
27:88:ee:ef:cd:a9:91:3d:9e:48:e6:1d:37:1a:ec:b8:eb:fb:
e3:fb:73:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:36 2025 by rpki-client