Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
File: bsksiYaV5AGYudkraBublU6_rrs.mft (raw, json)
Hash identifier: Tm/ouUN9CODl6SmHaLcW+7fV13jhPdeLwubsJIFIOE8=
Subject key identifier: 30:15:10:9C:70:1D:8F:4F:7D:5C:C9:7B:48:95:E7:03:74:B5:FA:98
Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
Certificate issuer: /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Certificate serial: 0197718809EF1BEB20994DE005F70B0CC9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
Manifest number: 12D5
Signing time: Sun 15 Jun 2025 03:00:30 +0000
Manifest this update: Sun 15 Jun 2025 03:00:30 +0000
Manifest next update: Mon 16 Jun 2025 03:00:30 +0000
Files and hashes: 1: 8t23blmby7I_BMYol5IdpP47EaY.roa (hash: pjnFFi6cD6y+RwbV144rv6rsodQxlkOLLKzyTuXX1q8=)
2: bsksiYaV5AGYudkraBublU6_rrs.crl (hash: FhcDJxHSqRmuo1sVuyuYdvZMRslgOTzDqc72BJRxqag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:09:ef:1b:eb:20:99:4d:e0:05:f7:0b:0c:c9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Validity
Not Before: Jun 15 03:00:30 2025 GMT
Not After : Jun 16 03:00:30 2025 GMT
Subject: CN=3015109c701d8f4f7d5cc97b4895e70374b5fa98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:57:b9:0a:07:c5:45:c0:73:57:0b:97:0f:
7c:25:91:21:73:1c:68:0a:61:48:62:c7:61:f3:e6:
79:46:49:ba:07:62:f4:7e:87:bc:45:f0:63:79:7f:
bb:f6:e8:c3:eb:cc:5e:ea:6c:2e:fc:6f:ad:ec:44:
29:cb:94:38:88:db:5b:a9:31:5a:5e:3d:3e:2e:a6:
a5:2b:74:a8:9c:7f:bb:e7:8d:3a:23:e7:86:b0:75:
db:7e:f3:1c:c6:03:e8:dc:eb:66:bc:5a:42:f1:48:
cf:7a:86:ce:ec:2e:5c:4a:76:44:2a:b3:0c:4c:8a:
07:07:69:42:68:db:ee:1f:e5:b6:4a:02:a3:81:9c:
83:3a:37:eb:43:d7:1c:e9:f6:c8:5d:40:c0:f7:22:
e5:f7:8f:1b:03:65:8c:59:b2:d4:be:6c:6b:97:13:
5a:75:2e:ce:72:fc:27:ba:b6:0b:a4:07:fd:83:fd:
19:92:18:f0:82:8c:2d:63:7b:07:78:a7:fa:c8:6f:
95:d2:1d:8f:69:62:1a:80:0c:60:13:12:9f:c3:83:
a0:dc:29:27:d6:f8:ef:2b:88:3f:c4:1c:10:aa:8d:
d4:98:29:c6:c8:25:c8:d7:e2:94:8e:a5:ca:e6:73:
8a:b8:dd:95:37:d3:54:1d:f0:69:3b:22:67:a2:2e:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:15:10:9C:70:1D:8F:4F:7D:5C:C9:7B:48:95:E7:03:74:B5:FA:98
X509v3 Authority Key Identifier:
keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e2:95:af:6d:61:ff:c6:f0:c7:b1:3d:ea:dc:ef:09:75:da:
9e:53:21:84:89:47:4f:92:ae:43:9a:9d:69:ce:13:f0:32:8c:
1d:82:11:1a:2c:a2:34:a0:65:89:c3:cd:c9:f2:a0:4b:91:24:
a6:68:40:93:82:3f:a0:9d:a7:3e:34:12:20:51:ec:b1:d2:ff:
d6:0c:c6:de:bc:1b:48:ee:5f:37:92:5d:45:cb:c9:35:53:56:
6c:09:46:74:8b:86:49:b0:c6:4c:70:39:7d:ae:35:45:20:c6:
8a:2c:e6:8c:af:5e:1b:6b:23:51:a3:d6:23:f9:04:da:46:0d:
02:94:8f:fb:12:c3:c5:5e:76:d2:28:8a:8d:5d:e1:da:12:ef:
5d:59:8d:cc:b3:60:50:b3:2f:f6:46:16:21:b3:ff:00:90:1c:
05:2f:f2:df:e2:64:1a:a6:38:97:5c:e4:43:07:2a:59:c6:ab:
15:15:a9:e8:52:b2:c3:25:08:b6:9f:a9:dd:99:b9:07:c4:7b:
6d:c8:4d:9e:1d:43:b5:c9:9f:5a:02:28:0d:2b:1d:d9:50:47:
c6:f0:b8:b0:19:d5:b8:b7:3c:a5:e5:40:13:1d:74:20:4e:9b:
ae:6c:2c:40:0b:e5:8b:12:2c:d6:99:ac:19:4f:bd:0c:2b:e8:
8b:bb:b1:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxiAnvG+sgmU3gBfcLDMm3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzkyYzg5ODY5NWU0MDE5OGI5ZDkyYjY4MWI5Yjk1NGVi
ZmFlYmIwHhcNMjUwNjE1MDMwMDMwWhcNMjUwNjE2MDMwMDMwWjAzMTEwLwYDVQQD
EygzMDE1MTA5YzcwMWQ4ZjRmN2Q1Y2M5N2I0ODk1ZTcwMzc0YjVmYTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4lXuQoHxUXAc1cLlw98JZEhcxxo
CmFIYsdh8+Z5Rkm6B2L0foe8RfBjeX+79ujD68xe6mwu/G+t7EQpy5Q4iNtbqTFa
Xj0+LqalK3SonH+75406I+eGsHXbfvMcxgPo3OtmvFpC8UjPeobO7C5cSnZEKrMM
TIoHB2lCaNvuH+W2SgKjgZyDOjfrQ9cc6fbIXUDA9yLl948bA2WMWbLUvmxrlxNa
dS7OcvwnurYLpAf9g/0ZkhjwgowtY3sHeKf6yG+V0h2PaWIagAxgExKfw4Og3Ckn
1vjvK4g/xBwQqo3UmCnGyCXI1+KUjqXK5nOKuN2VN9NUHfBpOyJnoi5HKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAVEJxwHY9PfVzJe0iV5wN0tfqYMB8GA1UdIwQY
MBaAFG7JLImGleQBmLnZK2gbm5VOv667MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mNmRjNTctODI2OC00NjYxLTk5MWMt
ODRjM2QzMDJjZjA0LzEvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mNmRjNTctODI2OC00NjYxLTk5MWMtODRjM2QzMDJjZjA0
LzEvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeKVr21h
/8bwx7E96tzvCXXanlMhhIlHT5KuQ5qdac4T8DKMHYIRGiyiNKBlicPNyfKgS5Ek
pmhAk4I/oJ2nPjQSIFHssdL/1gzG3rwbSO5fN5JdRcvJNVNWbAlGdIuGSbDGTHA5
fa41RSDGiizmjK9eG2sjUaPWI/kE2kYNApSP+xLDxV520iiKjV3h2hLvXVmNzLNg
ULMv9kYWIbP/AJAcBS/y3+JkGqY4l1zkQwcqWcarFRWp6FKywyUItp+p3Zm5B8R7
bchNnh1DtcmfWgIoDSsd2VBHxvC4sBnVuLc8peVAEx10IE6brmwsQAvlixIs1pms
GU+9DCvoi7uxVA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:46:01 2025 by rpki-client