Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: gyH5LmmFrpu3dCUt21THOsz8M2B5VqU3+2GkBghmvnU=
Subject key identifier: 61:77:7B:9A:AC:3D:05:32:17:94:A9:6D:54:15:19:8B:F5:F2:CF:60
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 01976CCF9A70B2996E6500363CADE498E5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 04D5
Signing time: Sat 14 Jun 2025 05:00:34 +0000
Manifest this update: Sat 14 Jun 2025 05:00:34 +0000
Manifest next update: Sun 15 Jun 2025 05:00:34 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: hlWIaJiaGlbh0JbVpocEuaew9vbH4mia5tsnG2emtE8=)
2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:9a:70:b2:99:6e:65:00:36:3c:ad:e4:98:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Jun 14 05:00:34 2025 GMT
Not After : Jun 15 05:00:34 2025 GMT
Subject: CN=61777b9aac3d05321794a96d5415198bf5f2cf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:ea:93:8a:67:12:01:f5:76:ee:a5:0f:33:
dc:8e:44:f6:97:de:3a:36:6f:4a:25:4c:3e:b5:69:
98:0f:bc:2b:69:a8:39:13:87:c4:ef:a1:db:0d:54:
1b:49:0c:da:5c:c6:61:87:96:32:95:fc:86:91:b2:
4c:6f:75:c0:9e:9f:44:3b:4c:1b:b8:46:b3:e0:96:
1e:3d:8d:81:fb:11:ef:5a:be:83:0e:f2:8a:e7:7b:
d6:07:a6:50:e2:45:d2:3e:5e:e1:d2:df:4e:d3:a5:
87:3e:42:4e:9c:37:f8:01:32:f6:7e:88:a1:9b:e8:
1b:ff:59:2a:0c:71:39:39:7d:45:90:57:bf:21:57:
5b:5e:af:31:02:7e:76:b1:af:bc:c9:44:c1:76:9e:
9f:10:b2:c9:7b:e3:ae:0b:9e:20:81:bd:ae:05:07:
8f:31:66:6e:1f:20:78:83:4a:cc:9d:5f:59:4b:2a:
25:da:cf:2f:ce:ac:08:50:99:8b:34:de:12:6f:17:
a6:ea:bc:ca:43:a0:65:63:38:90:d6:de:44:e0:2c:
ef:43:e9:45:54:d5:d0:20:bc:15:72:b2:de:77:2d:
41:5e:bd:c2:0c:e9:e5:f4:cc:94:62:8b:4f:ff:87:
6f:2d:c7:9f:c5:56:e6:cb:44:8d:02:e8:8d:56:45:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:77:7B:9A:AC:3D:05:32:17:94:A9:6D:54:15:19:8B:F5:F2:CF:60
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7c:b4:b9:fb:6d:d2:7b:7b:c1:ad:4f:7d:08:10:12:53:c0:
ba:a4:6b:84:19:fc:36:83:20:9c:cb:7c:ea:40:f6:03:26:a1:
18:f4:c2:88:3f:c9:d5:c9:12:da:4f:73:7c:c1:0b:97:dd:44:
81:a7:f5:1b:92:29:a7:09:ec:d9:8a:07:9d:72:63:08:63:6d:
5b:09:d8:65:5d:ff:79:fa:c3:af:37:1e:2c:42:67:79:b4:4d:
4f:18:e4:8c:67:ee:6b:e9:3f:86:1a:ec:15:18:ad:22:ad:5f:
09:58:a3:7d:9c:ab:81:13:79:03:a7:50:cb:ea:26:19:5b:77:
ca:6d:5c:c2:ab:11:a0:af:2d:01:b1:92:cb:cc:01:32:67:97:
ae:c3:49:2c:d6:de:c0:4c:b4:79:c5:6d:48:19:83:80:83:8c:
32:fd:a7:f5:30:c1:1c:b4:d6:35:89:bf:0a:a0:df:8b:82:f3:
71:0c:7f:92:a1:60:4b:1a:07:8b:32:f2:c9:7d:04:6a:78:36:
cf:35:00:34:a9:cb:20:cd:a0:3b:cc:20:32:3a:47:e6:41:25:
1a:63:eb:49:da:90:82:b7:8b:37:44:d1:7c:2f:3f:82:a4:47:
44:d1:87:9a:36:78:5c:a8:0f:08:37:a8:fd:72:f3:2b:ce:47:
f6:bd:23:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:06:49 2025 by rpki-client