
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File: BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier: AL7GSmlcICrjmBWq4UGl60lFTEeZiQeoFuBDpL7aKIM=
Subject key identifier: CE:D6:B2:2E:F8:F9:F6:F2:46:98:92:99:A6:3F:E8:11:44:8D:B0:7D
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer: /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial: 0196A72F7B2E2644A5362AD04A6B271FF649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number: 1394
Signing time: Tue 06 May 2025 20:00:28 +0000
Manifest this update: Tue 06 May 2025 20:00:28 +0000
Manifest next update: Wed 07 May 2025 20:00:28 +0000
Files and hashes: 1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: /R9zNvQf181cjMOPUnfzrHJfpBoGGORw3HxxgjvpzBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:7b:2e:26:44:a5:36:2a:d0:4a:6b:27:1f:f6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Validity
Not Before: May 6 20:00:28 2025 GMT
Not After : May 7 20:00:28 2025 GMT
Subject: CN=ced6b22ef8f9f6f246989299a63fe811448db07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:1d:33:11:31:1e:b2:78:bd:a6:30:09:61:
66:d3:c7:f3:a9:74:4b:03:2d:41:60:0b:24:97:f9:
6f:73:bf:f2:48:02:fd:93:fc:1b:2c:21:8f:3b:8a:
05:30:7c:cd:41:3e:6b:7a:18:58:19:e0:07:3e:c4:
bb:fa:c9:c1:44:87:3f:7c:72:ea:85:e5:55:e4:2d:
5f:1c:1b:36:d1:7b:5b:0a:38:02:03:aa:2e:72:a0:
42:15:29:25:92:08:ed:29:7c:82:0b:c2:06:6e:02:
64:1a:59:62:10:26:c5:bc:b4:ff:e8:ff:d6:e9:26:
93:28:e9:7c:30:3e:51:b7:94:f6:65:65:a0:22:3c:
b3:1f:75:47:97:ac:d5:b9:d1:dd:5a:1d:ff:86:78:
51:6d:fa:7a:24:ce:b9:82:98:f6:ff:c4:67:72:e5:
64:d2:dc:da:22:d7:eb:26:20:6f:f8:97:9f:ac:ad:
7d:e1:fa:65:a2:ef:aa:f3:b4:c5:da:54:06:37:f5:
5d:1f:f4:95:d7:77:29:a6:b0:af:3a:ea:35:ba:4f:
fd:f5:a5:64:ee:cc:5b:ef:7d:7c:ff:82:9a:26:99:
d8:d1:f3:fc:de:08:2b:bc:62:9e:94:91:8f:f3:94:
76:c8:10:54:90:d1:c3:71:0b:8f:cf:d3:cf:8b:e1:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D6:B2:2E:F8:F9:F6:F2:46:98:92:99:A6:3F:E8:11:44:8D:B0:7D
X509v3 Authority Key Identifier:
keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:25:06:4f:31:f9:32:bb:9f:b3:0a:1b:8e:62:2c:6b:3b:13:
20:72:8f:4a:d8:58:f8:61:b8:bb:12:7b:56:65:92:0d:fa:9f:
6f:e2:e6:99:b5:82:35:b9:1c:bb:a5:2d:d2:d6:4f:1f:0b:be:
67:54:d5:df:5b:32:ef:86:df:21:36:d8:c7:49:44:2c:64:73:
37:57:f8:60:e3:ce:54:a1:1c:03:5b:53:03:86:05:f7:ed:b1:
f6:a7:2f:77:98:a4:79:1d:59:f1:a4:43:ce:27:80:4e:80:e4:
39:39:f9:35:6b:61:ab:4c:15:b6:d4:10:f2:95:c5:17:4d:6a:
41:a5:0b:54:04:7a:cc:28:d5:6c:f1:c6:3b:5d:56:4f:b8:1c:
33:44:4f:f0:61:47:e9:c8:45:a5:c3:53:38:88:53:18:95:7d:
fe:07:3f:d5:02:4a:b2:ad:fb:bb:03:66:e6:46:94:1f:a3:f1:
57:eb:75:77:42:f2:f4:30:1f:d5:a4:00:bc:e3:8e:b9:a8:14:
e9:23:77:93:43:05:dc:fc:94:7f:74:73:3b:d7:13:08:e0:72:
cb:e1:78:f9:5b:ba:71:c6:5b:6e:94:8d:fc:c2:ea:41:e9:50:
81:15:95:8e:f1:0d:a7:26:7d:ea:1e:c9:9f:9e:cf:1f:83:91:
f6:a6:74:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 22:12:42 2025 by rpki-client