Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File: BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier: ljPpxIy0HPdU9CkjJiLYaHh0JjGxOSGaBEj8UIi1ylg=
Subject key identifier: F2:D8:5C:01:D3:D1:05:BE:C2:A5:8F:39:B8:E9:C9:43:3F:31:DF:63
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer: /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial: 019A72939326B127A0DC2DF4D9637CE4BC42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number: 158B
Signing time: Tue 11 Nov 2025 11:01:05 +0000
Manifest this update: Tue 11 Nov 2025 11:01:05 +0000
Manifest next update: Wed 12 Nov 2025 11:01:05 +0000
Files and hashes: 1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: EayRlXu5gF+cUsHEUJyuNtBNHuhA+xvxARNrt8s/kfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:93:26:b1:27:a0:dc:2d:f4:d9:63:7c:e4:bc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Validity
Not Before: Nov 11 11:01:05 2025 GMT
Not After : Nov 12 11:01:05 2025 GMT
Subject: CN=f2d85c01d3d105bec2a58f39b8e9c9433f31df63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:50:61:f3:16:b7:34:49:2d:36:84:b9:b0:9c:
65:8a:a4:a7:15:e3:57:6c:28:e8:8a:d7:ba:dd:a4:
47:7e:fd:1a:ea:a3:3a:96:8a:d5:cd:25:83:2e:c2:
b9:30:0d:6e:8a:04:18:ac:51:a3:69:26:fb:28:2a:
61:f1:43:0c:b5:60:8a:06:b9:07:26:d6:ef:27:e8:
10:ff:70:8f:58:13:80:ce:16:3f:22:23:25:81:c9:
0b:bc:fe:91:14:00:4a:09:cd:98:e8:90:65:43:92:
fb:c4:80:f7:66:ef:e9:7a:56:14:38:a7:55:40:e9:
ce:69:d5:64:91:aa:95:de:56:47:0d:ae:d5:34:37:
71:e1:51:37:4f:f4:2b:7c:4d:b7:85:d5:ff:f9:75:
49:1b:5a:ca:51:52:aa:e1:9e:e0:13:95:60:66:57:
7c:e0:00:45:b5:98:2b:a7:a6:b9:66:b8:30:e0:50:
68:39:21:8a:17:be:79:cf:0f:0b:4b:f7:8f:c9:5c:
6b:77:52:4e:7c:a0:e1:fa:03:d5:ab:3f:13:ed:c4:
28:64:2c:8f:f7:d3:de:8b:d2:2e:88:92:a2:de:1d:
c2:29:b2:29:db:6b:01:7e:9a:72:9b:a2:64:bb:15:
ad:10:6d:a5:36:ae:9e:4b:5d:78:85:10:05:9c:d1:
41:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D8:5C:01:D3:D1:05:BE:C2:A5:8F:39:B8:E9:C9:43:3F:31:DF:63
X509v3 Authority Key Identifier:
keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:08:13:78:54:58:ce:1c:2b:f6:06:c9:d7:86:ce:76:c2:62:
52:3b:a3:53:c2:fd:4f:8c:51:0d:aa:0b:b0:f4:d9:da:28:02:
24:d1:d9:7f:80:8d:06:08:74:38:49:89:6b:70:ff:d5:b3:33:
81:59:e5:d3:58:08:9b:ca:1a:4a:32:c7:79:02:90:a0:ff:86:
7c:bc:2a:63:97:2d:65:79:b0:ac:27:13:d8:49:27:da:83:ef:
4d:f4:85:67:7b:ad:10:cc:95:c8:4e:3c:70:15:88:a4:08:56:
ee:bf:29:72:da:8d:22:68:de:11:59:79:70:92:6b:dd:1f:19:
c5:03:b7:f4:07:10:40:68:e2:d4:db:c5:46:f1:77:b9:14:fe:
bc:d5:8e:e1:60:1b:59:38:f6:cf:62:77:c0:8b:93:08:3a:a4:
26:6b:11:0b:10:ec:41:eb:13:19:61:73:ea:ad:b3:3c:28:18:
bb:8e:eb:ea:4c:69:fa:12:ae:7c:35:30:fd:44:19:9e:35:30:
20:f7:96:1b:46:45:8c:51:ab:ba:8b:30:b8:58:c5:33:fd:c2:
87:23:83:dc:7b:17:11:cd:f4:5b:3f:f6:c9:89:ae:e0:00:e1:
ac:65:3d:7d:8b:c3:d8:a8:17:23:a4:78:61:f9:90:19:b6:9f:
d0:d1:9e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:48:19 2025 by rpki-client