Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: 7GTsMRBKPWBLsol8CjHxTWUHSKSrPejsiAEPmrcNgAg=
Subject key identifier: 93:43:D5:D5:13:FE:6E:A3:01:AC:37:9C:01:B1:E1:0B:62:2C:FC:73
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 01969E9AF3ADD4B3A5D8D9564830A9ADBA70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 085F
Signing time: Mon 05 May 2025 04:01:17 +0000
Manifest this update: Mon 05 May 2025 04:01:17 +0000
Manifest next update: Tue 06 May 2025 04:01:17 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: psczA5ElZdI6B23z2mau6SlBhw1GmhM2Y7G+Stx2EK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 04:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:f3:ad:d4:b3:a5:d8:d9:56:48:30:a9:ad:ba:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: May 5 04:01:17 2025 GMT
Not After : May 6 04:01:17 2025 GMT
Subject: CN=9343d5d513fe6ea301ac379c01b1e10b622cfc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:d0:87:bc:b1:cf:7f:4c:60:40:c4:31:29:
16:fa:aa:bc:18:30:25:03:8b:c8:e2:bb:ad:65:50:
c9:84:e3:df:ce:54:e2:e2:9f:5c:b1:ed:bc:af:1d:
f0:b8:e5:54:40:d0:ad:64:9b:ae:4e:3a:91:4d:f0:
97:79:da:ed:8c:d9:02:93:9d:4b:59:d8:ee:3f:e5:
76:41:b1:ce:e7:d8:b7:f7:e0:9d:ad:58:d8:c3:75:
af:50:eb:4e:7c:23:c1:ce:3b:1a:af:b5:c5:1e:1a:
37:4b:01:5d:a6:4b:86:82:77:db:b6:ce:c3:db:d6:
62:d5:94:da:23:a2:15:dd:c2:49:f0:b7:68:6d:25:
1e:50:cd:fa:c1:51:42:c0:c2:91:54:17:93:96:32:
0e:e1:51:2c:2f:d6:1e:5e:b3:31:63:48:18:42:9a:
57:17:e3:e7:44:87:63:32:03:75:c1:84:9d:61:cc:
70:9e:f6:7a:37:89:19:a0:5c:ff:fd:0b:fa:75:c1:
82:6c:10:45:7d:9d:7e:0c:36:db:2b:f1:a6:22:d0:
19:d7:a6:12:70:6d:4b:3e:ce:18:e2:17:70:ad:d5:
47:fb:27:1d:8b:8f:ea:15:43:a8:6b:dc:c8:4c:19:
26:c0:48:fc:61:f9:2e:f8:b8:80:66:2b:ee:ff:77:
1c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:43:D5:D5:13:FE:6E:A3:01:AC:37:9C:01:B1:E1:0B:62:2C:FC:73
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a2:5f:15:ca:24:1f:cf:97:9f:2a:f7:e5:46:24:16:ed:79:
fb:29:ea:9a:04:ff:1e:28:65:2f:fc:54:e3:12:64:9e:d3:44:
0e:33:62:7a:a7:aa:5e:7e:80:2a:a5:80:1e:9b:59:12:cd:33:
52:64:31:a1:83:1d:74:d7:a4:40:5c:cf:ce:a1:e3:75:51:17:
e1:68:d9:26:67:f8:c2:d4:89:7b:29:45:52:4e:b7:b6:a0:e8:
5d:d3:2c:25:14:c1:7b:0b:3e:fb:36:87:4e:d5:30:cd:a2:13:
64:59:98:b1:ed:16:ad:cc:7c:9a:c5:94:14:2b:e2:99:ce:cf:
c0:e9:f4:33:21:4a:35:3e:fc:9f:13:3e:64:8b:cd:65:dd:4e:
a8:72:68:d3:9a:6a:7f:cd:b5:d0:14:9f:61:54:98:14:a4:29:
07:0d:75:a1:af:56:40:31:1d:bb:81:b4:60:d3:48:91:d3:9c:
74:1c:f6:2b:76:e6:76:a7:cf:8b:b6:f5:38:0c:99:c9:6f:47:
1c:cc:83:25:35:cd:dd:f8:7d:b9:d7:2a:a4:c8:a3:5e:1c:f2:
43:fb:a2:c7:e8:eb:60:90:db:9c:28:0d:18:ed:57:d6:26:17:
a3:3d:5b:10:e4:02:63:22:5e:d9:45:5b:83:3f:67:fd:aa:96:
1b:9b:63:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:50:11 2025 by rpki-client