Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: jOs2anLF40DmYP5QFedBf3Rhv+SsKprdOvTJjp7E/dU=
Subject key identifier: 8F:52:D4:85:46:7A:34:63:D0:C0:55:9E:EB:CA:B1:D4:44:0C:65:9E
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 019A1083A03284141254CBDBDFEB87C65387
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 0A29
Signing time: Thu 23 Oct 2025 10:00:52 +0000
Manifest this update: Thu 23 Oct 2025 10:00:52 +0000
Manifest next update: Fri 24 Oct 2025 10:00:52 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: s4RqH698lIAqdjV2xgk3T+oQi7NVRBKFPed26zr2hTg=)
2: aaJq10NBNFtvWoQuCDfpNSfnYu0.roa (hash: ShW6y/0OofG8gWfm3Z3goLVgotABbmN4Tjp6HEhaoAQ=)
3: qLD6Xk1kNZ5LOm_NPA9SKOZrDEo.roa (hash: 2EMpyRudbmzblcQQ/7M2y7TOTZvbf6HTjZbDCcTPW3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:83:a0:32:84:14:12:54:cb:db:df:eb:87:c6:53:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Oct 23 10:00:52 2025 GMT
Not After : Oct 24 10:00:52 2025 GMT
Subject: CN=8f52d485467a3463d0c0559eebcab1d4440c659e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:7f:fc:1a:61:5d:52:8b:d5:4a:32:d5:7e:
61:a9:1a:1a:b3:62:94:93:c0:5b:e8:d1:c1:5b:4f:
b5:2b:48:aa:c3:a7:78:6c:28:5c:92:24:20:80:d6:
96:8b:14:50:90:4e:09:71:30:dc:fb:4f:c0:4c:ff:
ed:25:b9:73:d5:7f:fc:ee:d5:fe:0d:c2:3f:59:77:
9a:14:c6:d9:42:48:f7:97:a4:c6:28:dc:ee:75:50:
eb:38:dd:f0:f7:c7:31:5c:39:28:50:c1:7a:4e:01:
a4:12:fb:e4:02:20:28:28:9a:3b:a4:e3:cb:b3:61:
47:86:60:af:65:a1:e9:c2:f6:d2:e5:8f:aa:69:b2:
91:23:8d:81:e4:01:b7:3a:cd:fd:7c:0e:37:3d:5f:
31:2c:5c:98:01:12:20:76:9b:d6:09:91:69:c3:54:
cf:ed:18:2f:bc:3c:ec:3b:cd:fe:b4:61:5b:84:2f:
a4:7b:a7:8c:de:be:2b:48:e8:ff:5b:50:3e:46:f1:
43:aa:a3:d4:dd:71:05:21:ae:75:2b:a3:97:35:31:
1a:1e:32:a2:76:e7:f9:f7:93:a8:3c:4e:4b:3b:84:
87:ec:83:5f:88:3f:40:7a:f4:87:6d:7c:a9:cb:94:
ad:a6:9f:15:69:6e:c2:d6:ff:a1:a3:a7:92:f6:b8:
78:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:52:D4:85:46:7A:34:63:D0:C0:55:9E:EB:CA:B1:D4:44:0C:65:9E
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:70:88:11:53:c0:f6:1e:d0:98:86:7d:b8:db:67:6a:b5:42:
96:73:df:22:9d:cf:99:1b:82:4f:97:ff:14:03:76:31:43:f3:
32:03:51:55:1b:a8:a3:9e:c5:67:0f:e9:9d:f7:ed:a6:63:48:
e0:54:b2:00:da:ac:a0:af:9e:33:43:0f:a8:3d:99:f2:da:2e:
4e:cc:50:eb:ec:21:e0:59:3c:fb:69:1c:a2:e5:1b:97:9f:ef:
53:d9:7b:b6:57:69:f2:ec:da:c1:28:81:4d:5f:21:22:40:54:
08:40:e8:18:83:e9:68:88:9f:2e:9a:7c:a7:29:02:02:29:cb:
56:95:da:22:34:de:ac:70:96:16:8a:c9:4e:42:d3:08:b7:63:
03:8f:74:a7:8d:74:0c:25:bd:69:c3:bd:23:72:13:a9:40:e8:
f9:71:59:cf:4c:82:6c:9b:59:87:d4:e9:12:ed:22:55:3f:60:
9e:2e:9d:2f:18:2e:ab:f8:16:64:7c:7e:d7:31:30:d7:9e:3d:
c3:30:9a:3f:41:46:e1:a4:65:15:74:ea:40:61:85:7d:a8:4d:
32:3a:04:2d:4c:4e:e0:da:ee:b4:fd:1c:0c:69:e4:d6:2f:53:
25:44:91:e3:b8:07:35:53:0c:ab:51:22:90:d9:fe:de:91:48:
1d:08:86:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 11:39:35 2025 by rpki-client