Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: cQ6v7fLhdqWZzMChPXRGQqIp95du0jBaWaCZJvn/dAk=
Subject key identifier: 45:2D:D4:83:9E:CF:6F:6F:F4:DC:A8:8D:A3:DF:39:8C:6A:99:FB:A4
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 019923A043A88DA17AED808042B3C2590065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 09AD
Signing time: Sun 07 Sep 2025 10:02:09 +0000
Manifest this update: Sun 07 Sep 2025 10:02:09 +0000
Manifest next update: Mon 08 Sep 2025 10:02:09 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: lVr+wtPywGdVUaziStmQzHYt0nHHR60KoEyAs5O6lJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:43:a8:8d:a1:7a:ed:80:80:42:b3:c2:59:00:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Sep 7 10:02:09 2025 GMT
Not After : Sep 8 10:02:09 2025 GMT
Subject: CN=452dd4839ecf6f6ff4dca88da3df398c6a99fba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:6e:69:3f:14:c7:e5:d1:b2:a6:69:7d:1a:
1a:60:af:3e:9b:f8:eb:56:d8:85:97:d2:42:91:5d:
1a:8d:28:de:e7:ba:b0:16:13:51:d9:3b:99:bd:b3:
84:e9:b8:92:40:d4:2b:a9:1b:61:3c:38:fc:b2:95:
e1:87:dc:e7:68:76:14:47:f6:27:f0:e2:29:fb:a3:
22:0e:6f:22:6e:14:be:bb:03:f7:fe:f3:d6:b4:51:
ef:d8:ac:4a:5b:23:0f:e7:df:68:af:76:9d:34:78:
2c:b6:71:d0:50:27:97:06:24:d8:1b:16:4d:8f:93:
07:78:95:bd:cb:0d:c6:00:99:ac:29:b6:7c:82:be:
36:81:1c:a7:ac:60:1d:63:00:6e:7e:10:62:12:5f:
06:aa:10:08:c7:b6:27:9e:fb:f5:30:58:b0:c6:60:
66:ef:da:61:c3:d2:34:fd:47:a5:a9:7b:c5:e8:86:
5d:c4:b6:88:f2:fd:90:c2:73:40:77:38:85:35:a3:
4a:93:d8:be:89:ee:05:95:07:57:22:a2:d4:ec:86:
c8:26:cc:ec:6c:fc:92:2a:0d:93:ef:64:6f:29:6d:
83:aa:ca:8c:4a:8b:46:9c:c7:db:34:ec:9e:89:6c:
60:e6:3c:b6:68:40:6b:57:c0:c3:a9:90:e5:c2:68:
e1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2D:D4:83:9E:CF:6F:6F:F4:DC:A8:8D:A3:DF:39:8C:6A:99:FB:A4
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ec:6d:ab:55:ad:18:61:8d:81:1d:31:b3:4e:b2:0b:73:72:
14:5d:6d:d8:70:26:ad:ae:b7:6b:6e:17:1c:94:96:05:96:0c:
6a:88:d6:68:32:43:9d:51:f8:24:02:75:df:11:c5:15:7a:7a:
b0:ba:f0:9d:23:56:37:23:ad:85:d0:f6:f1:84:5f:da:5b:1b:
65:88:10:b1:1a:2d:3a:a6:e6:2e:e2:c7:5c:bd:35:e2:35:a5:
f2:4b:3d:2d:6a:b4:f1:97:57:31:69:9f:6a:a1:83:42:4e:08:
23:49:68:92:84:38:97:29:67:04:1e:52:4d:9d:31:3f:a0:1c:
f0:ed:c8:67:fd:e1:29:88:5f:3a:89:bc:83:11:b9:14:ec:d3:
65:ca:67:49:a9:8d:34:59:61:96:c8:1a:67:9f:6b:49:0b:67:
d5:93:7e:99:34:3a:cc:27:77:9c:b3:36:13:88:13:74:1b:60:
17:4f:61:6f:a6:46:bb:b2:fe:c3:8d:61:b2:16:14:bd:4f:5c:
29:91:9c:6e:7e:14:f0:cf:a3:5f:9d:19:46:73:f0:57:b0:2f:
f6:bb:3a:2c:fd:67:e7:2e:a1:a3:20:47:33:8f:cf:4f:5c:ba:
5e:72:79:a8:03:81:d0:86:c6:94:61:05:d3:ec:10:78:85:86:
02:73:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:43 2025 by rpki-client