Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: QjyrVcWxavANxG+PWu6ksV7TW9GJieQbemUvKrYSMJQ=
Subject key identifier: 78:DB:EE:AB:0F:4C:EC:79:F0:BF:5A:33:AA:50:B5:B4:63:C4:F6:A4
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 0197B6A1A981663BFD07E4D46214506ABE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 08F0
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: WV7uaIlcsnND5zsBFu/X6wipgWTnoIObI4d+uuANgc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a9:81:66:3b:fd:07:e4:d4:62:14:50:6a:be:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=78dbeeab0f4cec79f0bf5a33aa50b5b463c4f6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:a4:5c:e9:e9:12:7c:bd:2c:d8:27:d2:11:
80:8d:ab:1d:06:85:05:ba:9e:96:fb:0c:bf:4c:d7:
eb:ac:4e:a9:60:12:31:38:5d:aa:45:27:81:73:3b:
7f:63:5e:98:5c:66:7b:7a:91:6a:5e:86:6b:09:72:
f1:de:4b:f2:ff:81:12:d1:66:5a:88:8d:9f:7b:99:
1b:03:b7:dc:7f:82:dd:a9:ba:b4:8d:38:e3:e8:99:
13:10:08:84:e4:68:b3:91:e5:4b:65:3a:d4:84:58:
9b:76:e1:cf:56:40:4b:23:27:ba:14:17:7b:ca:72:
7d:2a:9a:92:d6:21:89:55:ad:19:96:46:00:e8:27:
08:67:af:da:fe:9f:66:de:c6:ce:9b:ea:98:ca:36:
70:9e:a4:4e:1b:75:df:d7:81:d2:74:37:1d:92:0a:
75:e7:66:0e:64:44:6e:7d:b3:20:51:0b:52:3c:9d:
49:a5:87:fd:37:4a:dc:75:f5:09:06:07:90:4b:68:
ca:8a:d2:d2:63:f3:12:aa:ef:d5:69:5e:a9:a9:c5:
13:b0:35:e9:8d:65:8a:7d:0b:85:34:76:ec:6f:cf:
69:5a:ab:a1:1d:92:8c:d3:f5:76:b0:d6:d1:32:a4:
20:79:21:d6:49:8d:de:a1:2c:d0:a1:1b:8a:e6:97:
29:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DB:EE:AB:0F:4C:EC:79:F0:BF:5A:33:AA:50:B5:B4:63:C4:F6:A4
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:56:d8:7c:66:7f:11:69:eb:e7:2f:a7:58:85:61:1b:99:26:
5e:46:b5:79:1c:1e:ab:da:05:fc:67:d8:39:b9:19:53:1d:22:
ac:27:2d:fa:ce:f1:b6:d8:65:36:d4:37:e2:78:2b:63:34:a3:
b2:c8:4c:77:5b:e1:0b:33:37:62:7a:4c:d1:c9:6b:fb:41:63:
89:4f:f8:60:e2:7b:c9:8c:ff:15:7f:88:30:34:29:09:bc:5e:
50:2c:34:9c:ac:ab:08:74:dd:33:fc:88:96:ea:13:4a:d9:c0:
c6:67:f3:ac:8d:7b:a0:aa:36:af:b3:ae:43:83:e0:63:9d:42:
6b:fe:f5:58:47:73:b7:84:20:ad:e6:f2:c8:7e:27:88:4a:07:
d3:7c:7a:bc:a2:2e:c3:96:98:1d:3a:66:84:19:59:f4:bc:d8:
ae:92:65:1b:ba:98:d2:11:a7:a1:ce:47:29:35:13:5c:e9:ab:
d4:b9:e0:f0:c6:24:fd:3a:bb:6a:3d:56:03:f3:3f:8e:f7:65:
de:b2:2a:ed:80:8a:fc:12:ce:3d:be:8c:68:bb:42:cf:60:93:
eb:86:73:7b:18:f1:1d:0f:4b:d3:5a:11:af:13:ae:e2:7b:18:
a3:c0:14:f3:c5:4c:a0:2b:4f:c7:04:06:c8:39:48:55:48:45:
ce:b5:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:14:42 2025 by rpki-client