Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: 7igSXKM6qhRmFwFNsG6LqP8HpuJj1wf+11Taj2PDTwU=
Subject key identifier: A0:BD:A5:AD:13:0C:57:2D:18:2A:2E:93:59:A2:49:FD:AF:09:73:EF
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 0198D660A8CAA4EDB378F0A73C5AF1234043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 0985
Signing time: Sat 23 Aug 2025 10:01:55 +0000
Manifest this update: Sat 23 Aug 2025 10:01:55 +0000
Manifest next update: Sun 24 Aug 2025 10:01:55 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: L85cpjNoQ3aJHj5zUg6j/aYDjT67S0bWUsOuzVjxtfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a8:ca:a4:ed:b3:78:f0:a7:3c:5a:f1:23:40:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Aug 23 10:01:55 2025 GMT
Not After : Aug 24 10:01:55 2025 GMT
Subject: CN=a0bda5ad130c572d182a2e9359a249fdaf0973ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:f9:6e:af:cd:e1:30:ab:95:07:28:bd:86:
77:85:69:2f:28:4a:8a:f6:d5:81:47:12:65:65:8a:
da:d1:d6:09:1d:29:03:18:9b:91:ec:18:17:46:42:
41:8c:e6:c3:ef:34:0b:70:f4:6e:23:f1:29:bb:04:
26:c1:84:e2:fc:83:ee:75:db:cb:d2:1c:f9:26:a8:
52:23:eb:6a:f0:da:c5:9a:ac:9a:cf:0b:35:1f:fa:
12:05:fd:70:3a:85:55:89:38:76:f1:d2:51:05:9a:
72:10:10:84:ea:13:a1:55:9f:f6:c3:90:9a:64:26:
ef:44:52:c2:ba:cd:f7:26:39:35:5c:6a:80:17:ee:
c4:ec:2b:ba:3c:d4:31:22:94:3a:21:30:4d:46:82:
58:93:fb:d1:49:2e:fb:05:d6:91:22:dc:ca:a7:be:
fa:2d:d9:5c:0d:67:7f:e4:4f:27:e4:ed:26:d0:1d:
c7:87:9e:bd:d1:e9:32:f7:c4:dd:b0:c7:eb:f9:63:
20:36:b7:59:2d:69:82:ad:7c:ed:4e:01:70:4a:35:
16:87:cd:08:20:18:f6:b5:6a:1e:c4:bd:aa:ea:bc:
4e:6c:7b:2c:e8:61:a4:f5:f3:91:7a:51:97:56:c0:
9b:31:27:a0:e3:bf:04:37:19:47:7e:9a:a8:8f:2e:
46:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BD:A5:AD:13:0C:57:2D:18:2A:2E:93:59:A2:49:FD:AF:09:73:EF
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d4:86:35:6f:07:44:30:07:a8:a0:a9:e6:a1:28:41:34:cd:
3a:56:c0:34:2e:a2:b4:07:d9:09:29:eb:02:91:d8:c9:d0:90:
14:65:5c:c2:fb:a2:ca:5e:30:57:76:ee:ed:a6:a2:fe:86:d3:
c9:0c:df:37:71:84:f7:64:b9:b9:d2:c5:64:76:e4:68:55:79:
fd:0c:b6:90:09:d6:6b:0c:94:90:07:24:6a:03:7a:a0:32:c3:
de:59:24:a5:77:b4:36:79:d7:51:58:e2:11:99:46:d8:21:17:
8d:54:0b:b0:59:19:00:6c:dc:31:e1:e9:56:be:66:4e:56:40:
ff:da:8c:26:ea:47:6a:c4:9a:71:f8:78:bf:23:95:93:f6:7e:
f7:56:03:6f:a3:c3:00:a3:55:f0:e6:d1:38:23:9e:4b:61:51:
25:c2:41:f5:33:0c:0a:3a:d3:5a:ff:79:07:9b:c2:97:bb:a4:
33:2f:f3:5e:49:91:2d:c6:98:97:fa:a9:21:71:f8:bd:c2:30:
dd:23:94:4b:7c:9b:c5:ca:8e:45:61:88:dd:e7:d6:2b:04:0c:
08:23:9a:06:0a:4b:68:f4:b2:28:79:ef:26:87:f2:a4:40:32:
f3:be:d3:e6:6c:93:d6:23:a3:71:ae:41:5f:f0:f3:52:de:5b:
df:60:be:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:45 2025 by rpki-client