Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
File: bsksiYaV5AGYudkraBublU6_rrs.mft (raw, json)
Hash identifier: tB6yg0dOuMbR1XPpGgixw73hPGyB3DcD/RJXr4U2IkA=
Subject key identifier: D4:F5:62:73:1B:0B:EF:CA:B3:EB:4C:23:36:84:A2:5D:AA:11:5D:4F
Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
Certificate issuer: /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Certificate serial: 019678689E878AC8481BF1739C44E966273E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
Manifest number: 1254
Signing time: Sun 27 Apr 2025 18:00:44 +0000
Manifest this update: Sun 27 Apr 2025 18:00:44 +0000
Manifest next update: Mon 28 Apr 2025 18:00:44 +0000
Files and hashes: 1: 8t23blmby7I_BMYol5IdpP47EaY.roa (hash: pjnFFi6cD6y+RwbV144rv6rsodQxlkOLLKzyTuXX1q8=)
2: bsksiYaV5AGYudkraBublU6_rrs.crl (hash: i/ZaXfvjHRkI2+nfB7Kdlh/J87zQQMb2rJ3csvzPBVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:9e:87:8a:c8:48:1b:f1:73:9c:44:e9:66:27:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Validity
Not Before: Apr 27 18:00:44 2025 GMT
Not After : Apr 28 18:00:44 2025 GMT
Subject: CN=d4f562731b0befcab3eb4c233684a25daa115d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:11:01:22:6d:75:4b:4f:ce:9e:7e:60:d6:
fa:40:ce:93:bf:89:6c:88:65:35:ba:47:58:36:cc:
58:1a:ef:72:23:ba:51:f7:49:dd:cf:04:5d:57:47:
42:4c:50:cf:61:e9:fc:79:4c:36:49:86:a9:35:76:
27:52:47:ae:51:a8:e6:df:b6:5c:a6:8e:45:24:61:
f4:a6:65:ca:b6:1d:c4:33:ea:5d:53:4e:6d:00:57:
d8:02:f9:fd:a6:38:38:01:ad:3d:82:df:07:2a:4f:
3c:1b:68:fd:8a:c1:1c:ea:29:1d:86:39:b4:7b:17:
a2:60:05:00:e2:17:b0:a9:60:63:42:aa:d8:06:89:
7a:ea:26:8f:68:2e:25:b0:4d:90:5f:77:f6:2f:19:
a3:3c:03:8c:41:6a:77:f8:c6:9c:78:01:8c:7d:d2:
b9:e1:bc:7f:00:1a:6f:83:0b:10:47:93:63:a4:81:
c2:48:47:86:a6:89:a1:15:55:d6:ea:90:04:19:1e:
d4:9f:30:13:da:ed:0e:17:2a:0c:21:44:7d:5a:a5:
5d:ea:e8:e7:5c:d6:aa:3d:52:c5:20:27:f6:62:80:
ca:dd:82:6f:8e:21:25:11:ac:70:98:1b:30:c6:ae:
c9:62:1f:88:97:94:d0:fe:77:1a:b0:5e:69:a5:0a:
e2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F5:62:73:1B:0B:EF:CA:B3:EB:4C:23:36:84:A2:5D:AA:11:5D:4F
X509v3 Authority Key Identifier:
keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ee:43:55:74:5a:5e:b9:33:df:67:00:92:6e:65:e0:1c:9b:
a2:0c:31:de:a2:87:a8:80:f5:28:c6:e1:df:9e:c0:d1:ad:55:
32:f9:64:84:95:c9:37:e3:ac:76:e2:a1:a7:d4:05:f7:c6:3e:
e7:bc:81:db:0d:bd:08:79:c2:8c:59:f9:0d:00:a8:a2:bb:8f:
9d:41:67:3f:1b:78:c4:74:6a:4b:ad:f8:06:82:93:15:ed:0b:
21:0c:ab:d8:14:bb:06:1a:58:dc:a6:c1:20:61:28:31:76:ae:
b5:1b:9b:47:be:7f:81:26:24:1e:68:25:23:86:f8:98:b0:1c:
a2:6b:b0:38:7c:5c:81:98:d8:be:53:23:9d:83:7f:ce:13:e6:
f7:23:f7:13:df:eb:29:ca:cc:50:1f:5c:d0:54:67:68:05:77:
36:d7:4c:09:9d:77:ac:6f:01:c6:3d:39:e2:8d:07:37:24:1d:
33:fc:fd:dd:6d:1a:5d:45:0f:a9:89:74:a9:2e:0f:fb:0d:1b:
19:75:b5:9e:80:41:79:d2:3a:95:c8:c8:c7:68:32:b8:49:22:
cc:91:2f:32:c1:b6:c3:00:8b:04:6d:0c:eb:a0:96:a1:a0:85:
67:66:f6:12:c6:a8:84:27:fa:5d:1e:01:cb:b6:4d:93:6b:1a:
39:f9:89:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4aJ6HishIG/FznETpZic+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzkyYzg5ODY5NWU0MDE5OGI5ZDkyYjY4MWI5Yjk1NGVi
ZmFlYmIwHhcNMjUwNDI3MTgwMDQ0WhcNMjUwNDI4MTgwMDQ0WjAzMTEwLwYDVQQD
EyhkNGY1NjI3MzFiMGJlZmNhYjNlYjRjMjMzNjg0YTI1ZGFhMTE1ZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOoRASJtdUtPzp5+YNb6QM6Tv4ls
iGU1ukdYNsxYGu9yI7pR90ndzwRdV0dCTFDPYen8eUw2SYapNXYnUkeuUajm37Zc
po5FJGH0pmXKth3EM+pdU05tAFfYAvn9pjg4Aa09gt8HKk88G2j9isEc6ikdhjm0
exeiYAUA4hewqWBjQqrYBol66iaPaC4lsE2QX3f2LxmjPAOMQWp3+MaceAGMfdK5
4bx/ABpvgwsQR5NjpIHCSEeGpomhFVXW6pAEGR7UnzAT2u0OFyoMIUR9WqVd6ujn
XNaqPVLFICf2YoDK3YJvjiElEaxwmBswxq7JYh+Il5TQ/ncasF5ppQriWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNT1YnMbC+/Ks+tMIzaEol2qEV1PMB8GA1UdIwQY
MBaAFG7JLImGleQBmLnZK2gbm5VOv667MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mNmRjNTctODI2OC00NjYxLTk5MWMt
ODRjM2QzMDJjZjA0LzEvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mNmRjNTctODI2OC00NjYxLTk5MWMtODRjM2QzMDJjZjA0
LzEvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+5DVXRa
Xrkz32cAkm5l4Bybogwx3qKHqID1KMbh357A0a1VMvlkhJXJN+OsduKhp9QF98Y+
57yB2w29CHnCjFn5DQCooruPnUFnPxt4xHRqS634BoKTFe0LIQyr2BS7BhpY3KbB
IGEoMXautRubR75/gSYkHmglI4b4mLAcomuwOHxcgZjYvlMjnYN/zhPm9yP3E9/r
KcrMUB9c0FRnaAV3NtdMCZ13rG8Bxj054o0HNyQdM/z93W0aXUUPqYl0qS4P+w0b
GXW1noBBedI6lcjIx2gyuEkizJEvMsG2wwCLBG0M66CWoaCFZ2b2EsaohCf6XR4B
y7ZNk2saOfmJJQ==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:59:41 2025 by rpki-client