
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json)
Hash identifier: qFV6tKIV9eLROcDGQpysrNLNWjkKPJx1AXLuhfagsTA=
Subject key identifier: 0F:25:8B:28:AC:E5:B7:76:5E:CB:55:E6:AD:F1:B0:5F:4F:EB:4C:EC
Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Certificate serial: 019873E2F5DA63B24411D81F3578669D90C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
Manifest number: 0952
Signing time: Mon 04 Aug 2025 07:01:50 +0000
Manifest this update: Mon 04 Aug 2025 07:01:50 +0000
Manifest next update: Tue 05 Aug 2025 07:01:50 +0000
Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: UR9mEm1Hnq3VGiKKqscHlWwSSzidKyEKz4S6WQYT/cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:f5:da:63:b2:44:11:d8:1f:35:78:66:9d:90:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94
Validity
Not Before: Aug 4 07:01:50 2025 GMT
Not After : Aug 5 07:01:50 2025 GMT
Subject: CN=0f258b28ace5b7765ecb55e6adf1b05f4feb4cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:92:15:4c:cb:d5:50:f2:0c:21:88:4c:70:
2a:7a:00:7b:90:40:34:77:59:ff:2f:68:fd:a1:11:
73:6d:fa:2a:3c:6c:84:28:08:56:cf:12:21:00:a2:
5f:45:38:59:ee:a1:ae:51:91:07:a0:05:95:84:d1:
fa:f7:24:b7:65:90:ed:ca:31:f1:f7:f7:6b:52:12:
12:04:91:0d:64:56:70:57:08:18:76:48:c2:55:54:
ae:7b:ad:03:dd:2d:fa:60:d8:e7:61:39:18:62:6d:
bd:14:d5:7c:8d:c0:91:2e:2e:f0:0e:a5:47:9d:c9:
c0:b8:57:9e:5a:4e:ea:0a:c4:2f:c4:37:a0:4c:ae:
14:e4:64:b5:82:07:b4:55:73:2b:dc:4a:92:26:24:
14:ee:95:58:cd:cd:13:68:f4:a9:23:2b:5f:6d:f6:
70:f9:b1:ff:06:ae:61:87:66:4b:64:af:50:6c:ee:
51:1b:30:8f:a5:ea:e3:d5:de:9a:4d:43:96:bd:1b:
d9:69:02:06:3f:91:ba:41:21:36:a8:7b:f8:b8:ec:
1d:9c:05:8a:26:fe:73:cb:b3:c4:98:50:a3:59:34:
7c:37:4f:f7:55:8e:0f:4b:29:43:e0:55:9d:1a:86:
7f:1c:0b:75:cc:9f:29:f8:c0:42:f6:3a:fd:e6:0f:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:25:8B:28:AC:E5:B7:76:5E:CB:55:E6:AD:F1:B0:5F:4F:EB:4C:EC
X509v3 Authority Key Identifier:
keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:04:84:e8:81:dd:44:04:06:70:05:14:fa:56:4a:22:ac:4b:
58:ff:38:3e:6e:11:49:ea:49:74:43:ce:d0:f1:0a:d7:53:0d:
03:0e:96:9c:30:7e:27:b1:fa:1f:a3:ad:f7:52:f1:4e:8c:b9:
8e:34:43:5d:73:08:30:bd:20:53:d2:d7:1f:4e:59:f4:08:10:
87:8c:05:4d:7f:ed:df:44:2f:cc:ec:97:87:ec:da:9d:23:7d:
eb:be:2c:12:a7:bd:37:f3:f4:09:e9:f2:19:a1:54:af:21:82:
d0:87:79:26:52:6e:92:97:f1:03:2d:48:52:a4:9e:ae:27:5e:
bb:8b:26:02:b4:e2:d0:ab:9c:1c:3e:31:4f:0a:31:06:60:20:
29:91:3d:65:f7:d8:f4:43:bb:89:5c:64:98:fe:81:91:53:5a:
9b:71:a5:c4:97:15:38:94:c7:73:c3:4e:3c:bd:eb:ac:24:7a:
1b:5b:39:08:dc:59:97:ed:d4:51:37:4f:35:e6:32:22:a6:1e:
52:f6:1e:68:5a:da:3a:95:f0:31:67:c8:d6:a1:cd:79:93:d6:
7c:8a:aa:e2:34:21:a9:18:c0:f5:64:f2:ca:60:a7:ac:68:d7:
49:63:5b:85:c7:ca:74:1f:78:ed:08:63:bc:a2:b4:7f:c6:60:
9e:67:23:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:58 2025 by rpki-client