Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
File: bsksiYaV5AGYudkraBublU6_rrs.mft (raw, json)
Hash identifier: /rePMhhySx30cA0pCNFte29898fW/Pz9NK8cr7CjTg0=
Subject key identifier: 2A:6D:2E:80:47:C5:FE:F3:BE:F3:44:14:12:9C:62:1B:6E:26:6A:A5
Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
Certificate issuer: /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Certificate serial: 019653B6DA2B036963F2B003872EB0FC71CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
Manifest number: 1241
Signing time: Sun 20 Apr 2025 15:00:14 +0000
Manifest this update: Sun 20 Apr 2025 15:00:14 +0000
Manifest next update: Mon 21 Apr 2025 15:00:14 +0000
Files and hashes: 1: 8t23blmby7I_BMYol5IdpP47EaY.roa (hash: pjnFFi6cD6y+RwbV144rv6rsodQxlkOLLKzyTuXX1q8=)
2: bsksiYaV5AGYudkraBublU6_rrs.crl (hash: 0k2cACQHwCvOVzEXkb2hF+WqDBaIgf2HaHOu4JxpTwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b6:da:2b:03:69:63:f2:b0:03:87:2e:b0:fc:71:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Validity
Not Before: Apr 20 15:00:14 2025 GMT
Not After : Apr 21 15:00:14 2025 GMT
Subject: CN=2a6d2e8047c5fef3bef34414129c621b6e266aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:42:ab:59:ac:37:1b:bf:c6:cf:31:b4:67:09:
fa:9f:9d:9d:d7:82:51:0e:bf:81:af:c5:80:d2:47:
77:49:a4:d5:83:0f:f1:58:36:61:48:32:7d:6b:22:
de:bd:88:ba:2e:fe:c0:a9:4c:16:a0:59:d1:33:57:
7f:a6:8c:22:49:48:74:60:3b:69:60:cc:68:ba:86:
81:ab:85:84:61:be:69:85:20:c8:48:81:57:eb:55:
92:35:d0:29:e0:b8:12:cd:b8:1e:16:c3:d0:dd:f0:
c2:d8:7f:a4:58:8b:14:06:d7:11:fd:b6:6b:e5:c0:
e2:ef:99:be:a8:12:dc:4e:7f:98:8d:0a:94:b2:aa:
62:22:ee:81:0c:0e:64:ba:18:ac:d5:85:cb:9f:f8:
00:bf:7a:1a:f9:87:4f:34:e4:aa:61:6a:64:98:80:
a5:10:f2:72:45:81:ae:6f:82:95:0b:50:c9:19:29:
ec:c8:a6:61:5f:0d:ce:b7:66:fd:ed:c3:02:f6:61:
a2:dd:69:ea:6a:f1:72:b8:14:72:46:99:45:ad:0a:
1c:b1:2f:d2:ff:72:5e:7c:c1:87:9c:9f:6a:1b:73:
66:a7:3d:5f:da:a9:93:84:5e:9e:19:5e:bf:fe:b4:
5d:6b:e8:f7:40:c0:82:e5:cb:fb:df:bd:54:75:9a:
3b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6D:2E:80:47:C5:FE:F3:BE:F3:44:14:12:9C:62:1B:6E:26:6A:A5
X509v3 Authority Key Identifier:
keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d6:98:08:75:3b:56:08:01:e0:94:f9:b1:cc:bd:7c:74:9a:
3c:a6:5e:fc:53:89:12:78:7b:6e:9b:3a:0e:9b:39:5a:93:e3:
ac:04:0c:4e:eb:9f:6a:1e:ef:3f:d4:ac:c8:49:77:5f:d2:a2:
7f:ca:a6:f1:93:67:3c:4b:57:da:f5:ec:fd:ba:3d:de:18:53:
be:3d:6c:c1:a5:80:8d:25:e1:76:fb:57:c5:8b:65:bf:49:e0:
8f:1e:2b:95:aa:28:60:94:f4:7d:52:fe:0e:7d:0b:52:25:3a:
83:e0:68:ab:67:7e:56:28:d7:cf:ff:8f:23:70:64:68:f2:05:
f4:e4:31:8b:1a:85:10:84:75:af:87:6d:22:30:af:6f:ad:b4:
43:25:d7:49:72:e8:c6:d7:38:5b:f7:cd:2e:65:a3:61:0e:48:
3b:ff:ea:c7:6e:3d:19:21:2c:94:69:eb:e9:19:37:fb:b3:14:
b1:ae:ba:bb:1e:6e:53:32:dd:7e:e8:ca:da:81:a2:28:9f:bf:
8c:4e:27:11:a8:06:ca:d3:d3:e9:d3:08:41:3f:16:28:65:de:
e9:78:6f:83:93:ea:71:3d:f3:82:fe:f4:4a:5f:94:c1:ff:1a:
ca:84:0e:6b:61:5b:84:a1:43:c4:8f:0c:84:61:cb:e7:82:8f:
42:c9:a5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:41:02 2025 by rpki-client