Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File: BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier: DlmiUUvHiixuRb5RVAFqu3lvu+FzeVkyYEIlE+O2lTQ=
Subject key identifier: B1:F5:72:B3:5E:BE:53:BD:4C:3A:22:48:21:E2:7A:47:BA:5B:3F:A1
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer: /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial: 01964A7D55351435B6CA86E261CEB168E287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number: 1364
Signing time: Fri 18 Apr 2025 20:00:49 +0000
Manifest this update: Fri 18 Apr 2025 20:00:49 +0000
Manifest next update: Sat 19 Apr 2025 20:00:49 +0000
Files and hashes: 1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: hLXccGLCXUrdVnOLmQqk1TJpUVZOoZ0e5B6z0DcvsKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7d:55:35:14:35:b6:ca:86:e2:61:ce:b1:68:e2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Validity
Not Before: Apr 18 20:00:49 2025 GMT
Not After : Apr 19 20:00:49 2025 GMT
Subject: CN=b1f572b35ebe53bd4c3a224821e27a47ba5b3fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:c4:9b:81:f4:15:a4:78:f7:c4:7b:b2:9b:
10:80:41:d2:b9:6b:08:a7:ca:3f:19:19:a2:a4:85:
d7:c1:04:48:42:4d:45:7b:d2:84:9e:a1:75:94:9f:
e1:da:be:35:ce:23:01:bf:cc:d6:9d:55:a2:d7:66:
be:a2:e1:82:04:6e:c3:b7:82:6f:cb:08:9a:9c:2f:
c5:6c:dc:d3:3b:5a:b6:b3:6a:09:d6:19:30:74:b2:
2a:4e:1d:5b:1d:d2:f9:6c:34:45:b8:92:d3:57:8f:
02:6d:73:58:df:71:b5:9d:14:d6:69:80:53:58:a2:
26:bf:45:3a:bb:0d:73:d6:19:99:4b:1e:3e:47:62:
a4:4d:fc:c1:9f:d2:8d:57:fb:43:d0:81:8f:59:32:
d4:65:57:5f:fa:5c:02:8e:ab:fe:8e:30:e8:c9:bf:
b2:56:21:44:fc:96:27:28:6b:02:a0:b9:9c:22:dd:
dc:e9:72:fa:17:34:d8:28:da:65:8a:a5:a9:03:08:
2e:8a:a8:b7:ff:85:82:47:62:1a:55:f2:75:83:44:
5b:eb:44:26:1a:7d:eb:ab:79:93:cd:cb:f6:ca:ff:
27:4e:90:6f:a4:6c:0c:b5:95:b8:75:7e:12:31:1b:
ad:d9:99:55:e7:a4:e7:5d:43:a1:eb:f8:4b:db:a7:
2d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F5:72:B3:5E:BE:53:BD:4C:3A:22:48:21:E2:7A:47:BA:5B:3F:A1
X509v3 Authority Key Identifier:
keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ff:f7:2a:b1:96:8a:de:41:53:53:4a:05:ee:c1:28:60:b7:
a0:30:9c:ba:17:57:d5:1b:ff:c5:37:08:36:00:23:78:88:37:
a5:ac:96:0d:74:89:b8:4e:2b:fe:50:ff:ca:69:39:d0:94:99:
f1:78:dd:71:79:d0:f1:a4:87:97:e4:35:2f:70:64:ca:88:bf:
c0:f4:80:c0:5d:72:35:5f:cd:54:65:26:c2:28:48:33:ae:01:
44:6a:4b:96:ba:a1:d8:08:36:28:cf:bd:c8:48:51:09:a2:9e:
1f:f0:ed:c4:03:13:ff:da:5d:51:27:57:e0:89:eb:7e:0f:05:
a0:e1:ec:7c:ab:fa:d3:c8:03:be:13:7e:94:5a:2d:9a:04:cb:
9e:28:e5:91:23:d0:81:0d:84:5e:e0:85:02:39:c7:61:96:72:
8d:83:67:d8:d6:a9:c2:41:3a:8f:c9:95:4f:fc:c9:72:9f:42:
2a:8f:68:5d:ea:7a:aa:a9:50:d0:ad:46:ba:f6:57:26:44:6b:
f1:14:40:d7:13:73:17:6b:bd:17:78:67:89:00:58:dd:92:aa:
1f:26:45:33:67:c2:a2:49:66:b0:b7:f5:be:8c:15:57:e8:75:
90:ae:b1:cd:f1:d7:99:87:b7:1a:f7:c8:f3:94:ab:a3:db:33:
77:34:8a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:38:43 2025 by rpki-client