Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
File: CfbI9G_IDS-HfDX9KNigZRtwgK4.mft (raw, json)
Hash identifier: vkXXYhrwox81pIZsJdwIk8DAtOeRxCncISvMAr6JlRA=
Subject key identifier: 74:0B:5B:E5:FA:67:AF:B6:26:52:FB:66:4A:23:45:49:3B:BC:0D:AA
Authority key identifier: 09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
Certificate issuer: /CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Certificate serial: 0198737427D6F6A674D9F9D5121FD6DC4EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
Manifest number: 055D
Signing time: Mon 04 Aug 2025 05:00:48 +0000
Manifest this update: Mon 04 Aug 2025 05:00:48 +0000
Manifest next update: Tue 05 Aug 2025 05:00:48 +0000
Files and hashes: 1: CfbI9G_IDS-HfDX9KNigZRtwgK4.crl (hash: PIt0IEGZGMfKTKN+FmIrpEUq/CWTZjZivyX/RXyZXXs=)
2: gBBidudg2z0fNo8zBCL2Nh6-LR0.roa (hash: AbXLuEVY+snSI8dezEoJ15KbzI8qXwfrks+doSu2Ubw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:27:d6:f6:a6:74:d9:f9:d5:12:1f:d6:dc:4e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09f6c8f46fc80d2f877c35fd28d8a0651b7080ae
Validity
Not Before: Aug 4 05:00:48 2025 GMT
Not After : Aug 5 05:00:48 2025 GMT
Subject: CN=740b5be5fa67afb62652fb664a2345493bbc0daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:34:8e:8d:69:81:e8:9e:06:2d:4c:68:80:64:
d0:1a:b9:55:b3:4c:05:59:ad:f4:bd:21:db:96:90:
56:af:51:0c:62:4d:d4:d6:92:e8:bb:15:76:98:77:
62:25:75:fe:ef:ff:e7:df:88:9f:c0:13:33:55:80:
1d:93:e3:8a:d8:52:c7:7a:73:87:2d:fc:63:1f:49:
71:d3:d6:ee:c1:c9:c9:64:d3:79:f8:cd:31:07:a7:
c2:19:3b:06:03:7b:18:99:e1:c1:0c:0f:7d:e5:26:
ae:1a:0f:f7:b7:29:58:eb:e6:a6:73:13:75:bc:49:
02:69:38:9d:ed:d1:39:9c:d9:ce:b0:7b:96:52:3f:
b3:5a:b6:ef:dd:36:8f:59:a2:3d:7f:51:c0:c8:2c:
fb:28:2e:0f:7f:60:b4:b2:f2:a5:41:b8:7d:b0:23:
69:40:53:a4:82:e1:44:51:85:c2:a8:f8:48:b5:6a:
c5:ea:2a:14:b7:15:bb:fd:7f:16:0a:73:bc:aa:5e:
55:d3:26:0d:d3:88:02:44:d8:c9:6d:aa:7d:94:95:
80:1a:f3:6d:e7:49:0a:86:32:21:ed:2b:8f:e7:6b:
87:1c:c9:12:23:e7:39:d9:a8:aa:9d:09:21:d6:ff:
29:cc:1b:3d:c9:9b:9a:4f:39:62:a4:0b:67:1d:00:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:0B:5B:E5:FA:67:AF:B6:26:52:FB:66:4A:23:45:49:3B:BC:0D:AA
X509v3 Authority Key Identifier:
keyid:09:F6:C8:F4:6F:C8:0D:2F:87:7C:35:FD:28:D8:A0:65:1B:70:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfbI9G_IDS-HfDX9KNigZRtwgK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/197d0c-02f3-4049-a5fa-ee73c8e7047d/1/CfbI9G_IDS-HfDX9KNigZRtwgK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fa:3e:c9:a0:ae:dc:cd:3a:b6:8d:a3:23:76:5f:ab:19:62:
3d:ac:49:59:b9:41:05:fb:8f:bd:28:7d:0c:1f:21:2c:eb:33:
ee:f0:23:34:71:a4:69:38:2f:b3:d5:7c:16:95:2e:57:b5:9a:
03:82:5c:12:1b:fe:20:c0:3b:00:eb:c6:8e:0e:a6:4d:10:2d:
09:35:14:9e:2d:e8:50:f6:20:b5:b4:0d:30:f4:8a:d2:fb:74:
cb:44:4c:73:59:e3:41:0f:18:f0:b1:42:2b:ca:cb:4c:51:13:
f1:8d:0d:c9:4f:7f:f8:a9:6f:c6:9b:50:45:69:9a:34:b3:2f:
84:5d:8a:9e:13:c9:5c:27:17:2a:c7:d8:57:8b:c5:c8:42:71:
cb:c9:7f:52:f0:4e:ed:d7:4d:13:52:ec:ef:64:90:32:45:76:
5b:f0:11:5b:50:6b:c5:44:7a:a4:ec:0c:04:c8:49:d5:a1:78:
05:fa:e6:66:3e:fd:2a:5e:8b:0b:e6:69:be:a9:39:a2:11:67:
bb:a0:0a:5e:87:31:59:59:33:29:b1:2a:e4:2f:f3:44:f8:1a:
d9:43:b2:e1:e2:7f:45:25:82:82:1b:0b:7d:7e:96:b8:75:3e:
73:0f:48:4d:3b:21:de:87:10:4b:38:80:dd:8c:6a:60:a2:9c:
53:8d:e0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:48 2025 by rpki-client