Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
File: bsksiYaV5AGYudkraBublU6_rrs.mft (raw, json)
Hash identifier: PGqCikeMbIKmmOpYpMAlBnA2iuC3rKVgpky2XpsSJbY=
Subject key identifier: 4D:F0:26:67:C9:78:C5:12:F6:3F:31:05:6E:9E:F4:BC:83:14:1D:AC
Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
Certificate issuer: /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Certificate serial: 01987450A72D183E1E2F70C0F77497B95E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
Manifest number: 135B
Signing time: Mon 04 Aug 2025 09:01:39 +0000
Manifest this update: Mon 04 Aug 2025 09:01:39 +0000
Manifest next update: Tue 05 Aug 2025 09:01:39 +0000
Files and hashes: 1: 8t23blmby7I_BMYol5IdpP47EaY.roa (hash: pjnFFi6cD6y+RwbV144rv6rsodQxlkOLLKzyTuXX1q8=)
2: bsksiYaV5AGYudkraBublU6_rrs.crl (hash: TZavNoPOZnaN5otUKuC4vQQcMYr4iSHGWZyontgxptU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a7:2d:18:3e:1e:2f:70:c0:f7:74:97:b9:5e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Validity
Not Before: Aug 4 09:01:39 2025 GMT
Not After : Aug 5 09:01:39 2025 GMT
Subject: CN=4df02667c978c512f63f31056e9ef4bc83141dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:57:aa:76:8a:1f:fe:7a:98:55:de:28:71:
c1:cd:07:98:32:a0:b9:ac:fb:e3:78:1f:37:0f:a5:
ec:a8:38:72:ed:41:27:ef:86:93:a5:40:4e:5b:8a:
7b:8b:ac:fc:61:5c:e2:96:09:6d:4a:07:f9:05:b9:
7a:a0:ca:d7:ae:ff:83:20:72:13:f6:47:5b:86:ea:
90:e6:7c:ae:ba:d8:40:f5:8c:d2:75:7a:e4:78:49:
f9:8b:bd:f3:8a:17:1d:5f:b5:cf:b3:4b:7c:d5:81:
dc:89:c2:a1:14:c6:a4:d2:18:23:2d:c6:5e:4e:0e:
56:3d:88:4e:f3:9e:77:f8:e1:64:a8:63:42:09:10:
da:c6:4d:64:e9:dd:6a:67:b4:57:48:29:24:0a:20:
57:86:21:3a:c5:2b:14:5e:05:13:52:5b:7d:fd:65:
7c:e0:13:74:04:1b:e5:5c:15:f9:76:22:a0:51:35:
b3:48:72:f3:d7:e1:4d:9b:a9:c5:c7:85:b6:7e:b9:
af:38:02:34:7b:97:fb:a5:59:e5:d2:49:48:26:f1:
bd:e1:45:d0:92:3f:b9:2e:7e:f5:7e:fa:d8:df:4f:
2f:32:5f:18:2c:39:86:5f:d8:ad:8a:94:79:3e:33:
b0:20:65:09:3d:7a:3a:87:5d:7e:69:70:7a:19:02:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F0:26:67:C9:78:C5:12:F6:3F:31:05:6E:9E:F4:BC:83:14:1D:AC
X509v3 Authority Key Identifier:
keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ca:e6:3f:e8:44:3d:56:79:6a:3e:5c:58:c3:f7:f5:31:4e:
0f:62:c3:ab:9e:15:0b:f7:c9:21:2a:57:35:04:b4:f0:9b:1e:
0f:fc:cf:7a:1c:64:b5:c0:6a:13:08:b8:ce:be:06:a5:1a:bb:
a9:97:d5:ac:26:6f:20:05:fb:d4:5a:b5:ce:1d:46:d8:1d:34:
91:84:9e:45:94:c7:fb:6d:2d:a7:df:eb:a5:9e:01:b7:d2:74:
d2:40:85:0b:2b:60:1a:70:81:a8:68:d1:84:e7:e1:68:ae:01:
9c:4e:ab:02:13:fb:53:0d:08:8c:b3:b3:44:95:46:3f:34:c7:
4c:12:9c:f8:4c:0c:35:99:86:28:4c:c6:07:67:44:9c:94:2f:
e7:d7:80:e8:b5:0e:b5:3a:ec:9e:92:1b:6f:11:70:c6:1d:0b:
e0:00:d7:12:e7:90:f3:6b:66:1e:f8:6b:bb:51:de:d0:23:47:
8a:61:ac:b7:24:47:23:d0:e8:77:1f:45:12:30:60:86:b9:79:
2e:81:6b:d6:41:4d:72:85:6e:b2:13:6a:bc:97:80:7c:af:e5:
63:b5:e2:78:27:4e:37:b9:27:94:56:b5:87:e4:83:d8:b6:e7:
a5:9a:73:64:c7:32:fd:b7:0d:dd:8a:73:f7:44:17:4a:38:f0:
c4:a2:e7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:06:01 2025 by rpki-client