Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: Cq5kLHTYsF2n9pfuhYTqAEa1+kjuGMTc9CUMBNiSZbc=
Subject key identifier: E8:D2:0C:5E:4B:B7:71:90:C6:01:2C:E4:8B:C8:12:E9:EF:55:E5:8E
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 019A52639581F1B56F6877B66DAF4B31853C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 0655
Signing time: Wed 05 Nov 2025 05:00:49 +0000
Manifest this update: Wed 05 Nov 2025 05:00:49 +0000
Manifest next update: Thu 06 Nov 2025 05:00:49 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: 2RcyKRqEiE0307Se32OM6s9mai312xGkdgmMPaGBFGA=)
2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:95:81:f1:b5:6f:68:77:b6:6d:af:4b:31:85:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Nov 5 05:00:49 2025 GMT
Not After : Nov 6 05:00:49 2025 GMT
Subject: CN=e8d20c5e4bb77190c6012ce48bc812e9ef55e58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:93:ef:63:fa:66:70:f0:75:bd:d7:48:9c:8a:
da:19:2b:09:bc:df:d3:e2:a4:31:33:be:45:35:21:
87:d8:3a:3c:f0:9b:0a:ed:c5:91:56:ec:fc:e6:7f:
e7:05:26:bd:84:a8:34:65:97:fb:80:06:47:90:70:
f0:47:22:72:f8:6f:07:72:3c:d4:bf:35:89:a3:86:
d2:2e:c8:a7:ae:f1:b2:f9:30:87:7c:5e:fa:93:37:
f4:87:3b:a9:a1:2d:a9:d6:50:ce:21:f7:8d:0d:65:
97:a1:fb:48:70:34:4d:7b:e7:59:7c:6d:d2:26:d8:
10:7e:00:80:0d:b3:8c:75:0f:19:39:12:7f:0b:46:
a6:83:7f:13:36:36:aa:3d:4a:af:00:3f:90:13:37:
cc:0b:49:7b:86:f2:bc:2b:a2:67:88:e7:93:7e:a1:
9c:87:79:0e:2f:6d:2a:d6:ea:68:c1:b5:69:e4:6f:
65:a1:fd:a2:7f:2c:bd:58:9d:30:d6:6d:41:de:b4:
50:ee:3c:d7:25:54:3e:53:2c:d3:e7:80:44:e1:e9:
66:32:0f:e5:9d:f0:b6:f6:d9:a7:4e:39:a1:6f:d1:
96:42:10:ba:d9:6d:49:cb:30:e8:56:18:fd:b4:43:
2c:bc:2b:1e:8f:5b:07:c0:73:40:a1:5f:99:17:cd:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D2:0C:5E:4B:B7:71:90:C6:01:2C:E4:8B:C8:12:E9:EF:55:E5:8E
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:df:18:bc:36:a0:5c:86:06:04:49:2b:73:6c:8f:b2:52:4d:
02:71:9b:ab:35:2b:21:ad:b4:32:82:af:40:37:15:19:56:60:
98:da:3a:e3:ef:45:2e:18:43:57:d2:eb:42:db:c2:50:ce:3e:
81:b2:51:94:85:cd:12:b3:b6:2f:51:86:f8:ef:80:4d:b5:71:
ad:60:bc:fc:7d:bd:1a:aa:c3:7b:5e:e6:e9:c9:5c:db:42:13:
64:1b:19:d2:77:66:5b:cb:e5:52:38:ac:0d:17:c7:0d:d0:a1:
12:5a:96:95:77:90:75:92:e8:b3:cb:e6:08:8e:3f:18:4a:ab:
e7:d0:ca:ce:b3:9c:0d:98:b5:c3:8a:5d:c6:30:f5:28:4c:f8:
ca:bd:1e:09:20:a4:a8:65:32:b7:1c:ed:2c:af:25:58:62:ed:
22:e3:44:b3:c9:58:c1:0d:9a:3a:10:14:b2:2c:41:27:ed:46:
78:69:32:be:28:7a:7c:f4:53:7d:3a:e2:1c:13:17:fa:cc:02:
4f:97:f7:77:62:4d:4a:64:ee:1b:8c:1b:b0:2b:ef:ff:06:b3:
72:e4:82:9b:a1:fd:f6:ab:10:c9:04:4c:88:2b:07:37:d3:dd:
f4:6a:76:2d:e5:ba:e4:7b:02:6b:a8:dc:b4:23:46:1f:9c:35:
66:90:65:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:21 2025 by rpki-client