Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File: BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier: b9n0PI+TesK9rtBQRDAwjFcGxXJSqssiZ65mN59mKfA=
Subject key identifier: 0C:22:91:CD:CD:91:F0:C7:CD:2B:0E:42:42:74:81:0B:5C:67:6F:55
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer: /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial: 01988FC71A8AA2FE19C2AF8C75E08FDC5F47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number: 1491
Signing time: Sat 09 Aug 2025 17:00:46 +0000
Manifest this update: Sat 09 Aug 2025 17:00:46 +0000
Manifest next update: Sun 10 Aug 2025 17:00:46 +0000
Files and hashes: 1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: QWLgztVe2+bvCJvxURmpBZ4b6MuEO7Zo5i/NU0oFUQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:1a:8a:a2:fe:19:c2:af:8c:75:e0:8f:dc:5f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Validity
Not Before: Aug 9 17:00:46 2025 GMT
Not After : Aug 10 17:00:46 2025 GMT
Subject: CN=0c2291cdcd91f0c7cd2b0e424274810b5c676f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:62:4c:41:6e:69:4d:3b:15:89:fc:51:07:
e2:7f:04:c2:8b:0e:8b:9e:57:7a:5b:89:36:17:c8:
2d:be:1c:cd:3b:0d:f6:1f:3a:a2:89:89:bd:ae:1e:
3a:a7:00:d7:5c:85:52:17:c3:f4:18:5c:54:c9:29:
bd:38:50:1b:2c:bb:09:74:b9:f1:25:be:02:57:79:
a3:b2:f4:d9:ec:b2:1b:99:70:b4:c0:cb:10:b7:f5:
e8:09:c8:d2:a1:66:80:33:0d:69:6a:8a:0a:0b:5b:
26:11:50:8f:b9:61:cc:e3:39:9c:ef:07:74:c8:1a:
f9:3b:d7:4e:b9:35:41:a6:76:91:3b:3c:c2:05:81:
24:88:32:06:0a:22:3d:13:5d:d7:da:d7:42:a7:d0:
a6:10:36:87:25:fc:30:86:f2:ca:51:ae:a4:91:e1:
b4:4e:8e:e2:5e:9a:e5:f9:55:36:b7:ad:6d:81:b3:
49:d0:e5:92:9a:f4:69:43:d1:58:50:96:c3:67:42:
16:7c:74:75:5c:94:3b:04:6d:70:40:76:36:d9:51:
25:a6:4d:cc:62:94:fe:6c:07:bd:92:64:ba:8f:5b:
44:1d:24:08:c1:4f:31:eb:5b:15:0c:17:eb:8b:38:
a6:e5:a6:ab:bc:6b:0b:02:c5:2d:80:cd:5c:7f:7d:
f8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:22:91:CD:CD:91:F0:C7:CD:2B:0E:42:42:74:81:0B:5C:67:6F:55
X509v3 Authority Key Identifier:
keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cc:d2:c7:e7:8c:ed:1b:15:ff:c7:c1:58:1f:5e:29:3f:12:
91:d0:d3:fa:b2:f0:37:8c:a6:09:d3:14:ba:af:b3:12:17:6a:
e1:27:e8:bb:f7:1d:84:2e:58:ba:09:56:89:60:cf:eb:c3:e2:
ed:62:d2:d4:18:3b:b7:9f:82:c7:3c:eb:03:f6:c4:31:bc:3d:
0e:6d:a2:69:17:d4:e7:21:a3:bf:30:4d:23:8b:91:e6:e1:db:
36:92:63:e6:44:69:9a:6d:39:b4:f1:53:6e:ff:77:de:cd:86:
e8:28:e3:ab:65:1f:b4:e6:43:db:7d:d4:ec:d8:0d:10:43:0c:
3a:fa:16:f6:ce:01:f1:29:f1:c0:73:a2:7e:f4:b5:63:f4:a5:
fc:8a:9f:f5:81:63:6f:ac:d1:73:a5:69:c7:52:c4:71:f5:44:
74:42:19:0c:38:29:b3:d1:12:57:22:f6:c5:e6:53:7f:12:b4:
f3:95:46:8d:72:13:55:5e:94:0e:d2:34:7f:49:75:ef:42:03:
8f:0b:71:23:fa:95:f9:5f:e5:e8:1b:7d:30:7a:ef:35:9e:15:
7b:67:32:f7:77:2c:9d:47:b4:0a:ff:1e:4a:90:1d:35:6a:9a:
e7:9f:ce:a2:03:09:36:c4:d4:57:a6:e0:bf:85:d9:67:56:e2:
d8:c8:25:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPxxqKov4Zwq+MdeCP3F9HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzZlYzI4ZGIxMTRhODYyNzY0MjZkMWY0OGQyYjZhMzVk
NWZlNzMwHhcNMjUwODA5MTcwMDQ2WhcNMjUwODEwMTcwMDQ2WjAzMTEwLwYDVQQD
EygwYzIyOTFjZGNkOTFmMGM3Y2QyYjBlNDI0Mjc0ODEwYjVjNjc2ZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqpiTEFuaU07FYn8UQfifwTCiw6L
nld6W4k2F8gtvhzNOw32HzqiiYm9rh46pwDXXIVSF8P0GFxUySm9OFAbLLsJdLnx
Jb4CV3mjsvTZ7LIbmXC0wMsQt/XoCcjSoWaAMw1paooKC1smEVCPuWHM4zmc7wd0
yBr5O9dOuTVBpnaROzzCBYEkiDIGCiI9E13X2tdCp9CmEDaHJfwwhvLKUa6kkeG0
To7iXprl+VU2t61tgbNJ0OWSmvRpQ9FYUJbDZ0IWfHR1XJQ7BG1wQHY22VElpk3M
YpT+bAe9kmS6j1tEHSQIwU8x61sVDBfrizim5aarvGsLAsUtgM1cf3345QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwikc3NkfDHzSsOQkJ0gQtcZ29VMB8GA1UdIwQY
MBaAFAbG7CjbEUqGJ2Qm0fSNK2o11f5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yNjNmOGQtMTM2Zi00NmVjLTg2YzEt
Mzc2YmY5ZTYzMDU5LzEvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8yNjNmOGQtMTM2Zi00NmVjLTg2YzEtMzc2YmY5ZTYzMDU5
LzEvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoczSx+eM
7RsV/8fBWB9eKT8SkdDT+rLwN4ymCdMUuq+zEhdq4Sfou/cdhC5YuglWiWDP68Pi
7WLS1Bg7t5+CxzzrA/bEMbw9Dm2iaRfU5yGjvzBNI4uR5uHbNpJj5kRpmm05tPFT
bv933s2G6Cjjq2UftOZD233U7NgNEEMMOvoW9s4B8SnxwHOifvS1Y/Sl/Iqf9YFj
b6zRc6Vpx1LEcfVEdEIZDDgps9ESVyL2xeZTfxK085VGjXITVV6UDtI0f0l170ID
jwtxI/qV+V/l6Bt9MHrvNZ4Ve2cy93csnUe0Cv8eSpAdNWqa55/OogMJNsTUV6bg
v4XZZ1bi2Mglyg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:47:16 2025 by rpki-client