Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File: BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier: xs3VLHFI9p/UkHpaNDs6LBoy+9nVcO+hK+Y1MhMa2xc=
Subject key identifier: 47:F4:2A:1F:5A:B4:E9:F6:51:49:79:E9:76:D2:BB:02:02:53:AC:AD
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer: /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial: 01984A411910615EDC7E4A930A8F4E6DB759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number: 146D
Signing time: Sun 27 Jul 2025 05:00:36 +0000
Manifest this update: Sun 27 Jul 2025 05:00:36 +0000
Manifest next update: Mon 28 Jul 2025 05:00:36 +0000
Files and hashes: 1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: sWtGa7J5oCYTYh1vLHU/OkXbp7zgh7wVKcRwuANFDKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:19:10:61:5e:dc:7e:4a:93:0a:8f:4e:6d:b7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Validity
Not Before: Jul 27 05:00:36 2025 GMT
Not After : Jul 28 05:00:36 2025 GMT
Subject: CN=47f42a1f5ab4e9f6514979e976d2bb020253acad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:c1:9a:b0:0e:ff:f3:b8:68:b8:87:a3:5a:
be:8e:e7:89:e3:42:ab:fa:c8:62:80:54:ca:b8:25:
35:c1:51:39:45:40:e5:cf:c5:e3:a0:05:9c:54:3c:
ae:cb:4f:5e:96:73:ef:6d:51:c4:98:d1:9b:90:d2:
40:3e:8e:90:3a:e2:c6:2e:1d:db:f0:68:6b:c2:7b:
ad:4c:6f:a8:b0:bb:c8:36:6f:95:8e:74:18:d0:6c:
ff:1e:11:97:d9:a3:ad:8e:83:5e:18:cd:e2:f9:63:
a2:6d:1a:dd:3f:f4:bb:e6:72:1c:b1:5b:94:80:65:
1d:a7:1f:e7:20:e9:0c:3c:b7:8d:32:d4:95:cc:41:
48:5e:86:84:0d:05:4c:5e:43:5d:1e:ed:40:b8:62:
5e:07:dd:b9:27:92:91:5b:de:89:29:e9:38:6e:ae:
49:a6:61:de:c7:18:b6:9c:78:1e:ea:84:ff:06:19:
3b:1c:3d:f2:2d:a5:b4:da:3a:98:8a:26:e6:65:50:
f7:0a:70:c9:93:c5:b9:7b:98:d9:fc:84:7f:d0:a1:
39:ff:6d:ff:dd:67:af:f5:67:9a:f0:4f:e3:b8:f7:
4d:95:f0:6c:f0:9a:fd:53:43:f8:09:50:bf:6b:7f:
95:e8:2d:54:80:4b:79:f9:e2:83:8a:ea:37:b8:78:
45:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F4:2A:1F:5A:B4:E9:F6:51:49:79:E9:76:D2:BB:02:02:53:AC:AD
X509v3 Authority Key Identifier:
keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1a:bc:28:c7:8a:33:58:18:e3:44:3b:dd:89:c0:b7:f9:0e:
9b:f9:67:aa:67:5b:20:c4:25:34:9e:2b:be:13:2f:3a:9a:06:
24:95:29:d2:5d:b9:17:69:36:7c:88:4a:39:84:be:34:58:ff:
b2:37:d4:d1:a9:c6:60:9b:23:20:84:3b:79:61:df:37:cc:d0:
60:8e:44:5a:a9:23:73:47:a7:60:fd:04:72:46:17:38:60:26:
43:6c:ec:41:50:f1:ff:2d:3c:c8:7e:6b:cc:08:49:ea:97:ac:
e8:53:5c:8d:74:93:ca:43:fe:be:c2:90:8e:ea:fc:f1:ca:d9:
ce:b0:54:cc:da:fd:4e:d3:99:cd:35:4b:35:c5:13:2a:cd:28:
79:75:88:19:f9:f7:7a:7b:5a:ef:39:12:a5:ef:91:64:33:fa:
8e:bc:fc:57:73:8c:42:47:0b:cb:35:83:4d:7a:b2:cb:e7:83:
cd:6b:6a:e8:aa:d5:54:cd:2d:87:37:b8:df:91:45:cb:5f:5a:
72:a2:92:e9:4c:fb:85:e0:d6:60:0f:ce:51:8b:87:90:de:69:
57:fb:ac:d5:bd:ae:2a:56:d1:ff:dc:3e:dc:2d:62:28:31:b7:
e4:34:16:c3:5d:7d:66:8f:97:17:c4:24:fd:bf:8e:8b:73:47:
4d:cb:97:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:44:45 2025 by rpki-client