Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: kv8LnIEWAxWWv3pA/PvcKjIotn9Tj79HTl5CmFbVd1w=
Subject key identifier: 0C:FC:96:51:B5:F1:5F:54:E3:82:8E:1F:F4:08:7D:21:23:35:6E:16
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 01965E71EA4209FE34CF6DC06E1A5CC9A56B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 0449
Signing time: Tue 22 Apr 2025 17:00:45 +0000
Manifest this update: Tue 22 Apr 2025 17:00:45 +0000
Manifest next update: Wed 23 Apr 2025 17:00:45 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: Ydk8Jt/YiAcbSOMYtjiOyARLG2yH+e25rxoDEbm6tf0=)
2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:ea:42:09:fe:34:cf:6d:c0:6e:1a:5c:c9:a5:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Apr 22 17:00:45 2025 GMT
Not After : Apr 23 17:00:45 2025 GMT
Subject: CN=0cfc9651b5f15f54e3828e1ff4087d2123356e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:41:6e:ac:88:7d:de:e7:c3:19:04:bb:4c:
8b:53:47:20:f9:de:47:f2:70:f0:fe:a6:28:93:78:
69:a1:4a:d1:32:d9:ff:e6:ab:6b:66:8d:36:9e:9c:
62:bf:de:d2:fc:53:b6:5c:77:2a:d1:03:27:1d:e5:
c3:ad:b0:49:8b:71:25:6d:5a:0f:96:6d:26:25:2a:
23:b4:92:f5:ce:22:b8:eb:f6:9b:70:e1:b7:8d:34:
51:f7:ae:ff:86:0a:d0:12:16:16:d0:85:99:1d:20:
a3:32:65:01:75:62:c8:86:9c:8b:e2:1c:17:9b:ed:
12:74:b2:1c:b6:b1:5f:9d:5d:de:82:04:09:ae:01:
20:93:81:62:dd:39:5a:51:ee:1b:84:83:4e:5b:d2:
d7:1b:42:e8:2f:10:ee:08:51:49:62:44:ed:70:ea:
0e:26:f8:4d:20:a9:2d:5b:58:e1:15:1f:e1:f8:7f:
3e:6e:96:7e:31:ee:02:5b:4a:a6:94:8a:4b:6b:e4:
40:33:d4:8d:6c:d3:32:2a:b2:da:97:0f:8f:45:51:
54:ed:9d:f5:d8:53:6a:75:2f:f8:22:a9:b4:e6:fc:
39:6e:57:5a:40:c2:d7:99:ce:e8:7e:cc:ff:09:f2:
05:2e:25:fb:39:e3:fd:74:8d:b7:75:c0:0b:1b:2f:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FC:96:51:B5:F1:5F:54:E3:82:8E:1F:F4:08:7D:21:23:35:6E:16
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8b:33:5d:f2:ea:34:67:41:8a:1b:0b:94:e7:ba:53:13:c2:
ee:80:19:99:be:ec:47:ca:ae:e9:4d:ff:1a:c9:65:22:bb:0c:
48:8b:0a:27:61:87:4a:18:14:c8:c3:db:6c:fc:b6:1a:87:26:
fb:55:2e:51:07:32:8e:a3:6e:24:52:26:b1:40:31:ce:33:84:
ae:d1:fe:2f:a4:b9:34:af:29:8c:0e:19:63:b6:dd:61:9e:d2:
88:e9:40:fb:16:5e:99:bf:5c:7a:45:2a:af:e1:39:19:23:13:
30:49:18:65:e7:84:f7:e8:ea:ed:78:0b:5f:44:a9:18:4f:8f:
96:1c:8c:43:05:dd:df:78:21:5d:e9:07:cb:e1:05:71:cd:1a:
44:d7:e2:a3:56:96:aa:b2:e1:77:64:f0:00:b4:1b:67:a4:99:
f8:96:3d:a8:51:49:27:15:f9:6a:ae:4b:f8:44:82:23:6c:9b:
4a:96:10:7f:7b:fc:9f:53:79:d9:7d:94:af:59:4c:d9:6f:c4:
1f:2a:71:b1:a9:ed:d0:bf:c4:a8:55:73:1f:8d:a8:81:08:e7:
9a:4f:7a:3a:53:dc:bd:d8:a9:b1:1d:0d:0c:c6:86:8d:7d:6c:
5a:a5:85:c0:68:65:d3:9c:55:10:92:13:48:2f:84:0f:93:c6:
44:5c:7f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:24:17 2025 by rpki-client