Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
File: bsksiYaV5AGYudkraBublU6_rrs.mft (raw, json)
Hash identifier: Bfr3a9ev+RmFFW1oRKE7E2KpHGaOpTznQIZMxCP0c6k=
Subject key identifier: 5B:9B:A0:73:F8:77:E2:26:9A:23:9C:F7:E7:F7:33:78:7E:36:D4:A1
Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
Certificate issuer: /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Certificate serial: 0195113508757211A823E446FEC0333632F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
Manifest number: 119A
Signing time: Mon 17 Feb 2025 00:00:42 +0000
Manifest this update: Mon 17 Feb 2025 00:00:42 +0000
Manifest next update: Tue 18 Feb 2025 00:00:42 +0000
Files and hashes: 1: 8t23blmby7I_BMYol5IdpP47EaY.roa (hash: pjnFFi6cD6y+RwbV144rv6rsodQxlkOLLKzyTuXX1q8=)
2: bsksiYaV5AGYudkraBublU6_rrs.crl (hash: OiHF0k2dUEH2G6xCiKA+dGMCK+Vlz2DdwR3mDR6VOaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:35:08:75:72:11:a8:23:e4:46:fe:c0:33:36:32:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Validity
Not Before: Feb 17 00:00:42 2025 GMT
Not After : Feb 18 00:00:42 2025 GMT
Subject: CN=5b9ba073f877e2269a239cf7e7f733787e36d4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:be:7a:5d:2c:b7:ea:b9:73:3d:89:f2:a2:83:
5d:c7:30:41:f6:58:a8:53:6a:18:6e:4c:b0:ba:4a:
d2:d0:92:59:13:bf:63:90:bc:d4:5f:1e:30:4c:d9:
32:4d:25:18:a8:4c:57:80:bc:21:b0:ce:1a:80:2f:
07:0b:eb:8f:11:34:a1:a1:08:08:23:40:4c:3d:cf:
77:c3:12:06:17:f5:87:d5:d0:ee:31:bd:af:99:4f:
0c:ec:0f:0b:3c:e8:80:14:fa:b1:ca:ba:ab:b6:81:
65:05:73:30:c2:cb:a1:93:64:7f:c9:69:f6:9e:08:
ec:65:71:1b:63:6a:a6:d3:c4:8e:e2:77:ee:5c:de:
d9:41:80:13:78:0b:a8:25:5a:dc:81:1b:7f:90:d0:
e3:75:64:0d:f7:d6:9f:a4:01:9a:ca:56:a3:da:5e:
69:ac:88:74:94:ac:c2:a2:10:77:64:4c:ab:9b:d6:
01:d6:0f:6e:fb:1f:3e:0b:8f:76:02:fb:37:47:12:
37:8c:43:5f:b8:a0:22:e6:02:4b:05:c7:49:69:12:
47:e9:be:64:f6:5b:db:9b:55:2c:e6:65:ce:35:44:
83:50:24:2d:39:cf:99:0a:c9:30:17:b9:cc:f3:77:
35:3f:26:10:2c:49:04:dd:3b:53:b9:46:c5:69:10:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9B:A0:73:F8:77:E2:26:9A:23:9C:F7:E7:F7:33:78:7E:36:D4:A1
X509v3 Authority Key Identifier:
keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d3:97:4e:e6:74:f1:f8:0b:df:42:4c:4d:d4:4e:83:a2:fe:
be:24:be:ee:ec:7f:be:ab:5d:42:dd:27:36:d1:60:56:bc:f1:
71:c4:e3:6a:a9:8b:fa:99:a5:2c:06:29:36:f6:46:8d:f9:b7:
18:0f:0e:a7:22:94:00:af:12:f8:03:28:60:7a:cd:e4:c2:93:
52:3d:9a:d0:e3:1a:b9:c2:0d:b9:c7:6b:0e:ec:12:05:46:30:
9b:f2:06:59:32:e5:84:67:c8:c6:c3:a1:2a:41:78:7a:8d:7d:
7c:a2:5e:d1:6e:34:57:3d:b2:2a:0e:ee:fe:96:1b:57:25:04:
ed:d2:84:4c:cf:3f:d2:98:bc:73:67:e5:fc:e3:65:c4:fd:6a:
c7:e8:2a:e1:7d:ba:80:12:c7:fc:d4:9b:ea:8d:03:d6:9d:56:
1e:4d:f3:67:47:69:85:02:43:0a:18:76:3d:53:52:8f:cb:34:
e7:fe:13:2f:11:72:05:f7:89:1e:dd:a4:51:44:69:ab:a7:c2:
72:60:61:0c:76:02:22:80:6c:98:4b:80:81:a9:09:78:ef:1d:
48:e5:24:bd:88:7d:58:21:7d:5a:e1:ec:db:60:80:c3:0d:c6:
fc:f8:81:f6:95:75:ca:96:7f:79:3a:30:07:30:6d:7d:63:5d:
10:dd:84:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNQh1chGoI+RG/sAzNjL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzkyYzg5ODY5NWU0MDE5OGI5ZDkyYjY4MWI5Yjk1NGVi
ZmFlYmIwHhcNMjUwMjE3MDAwMDQyWhcNMjUwMjE4MDAwMDQyWjAzMTEwLwYDVQQD
Eyg1YjliYTA3M2Y4NzdlMjI2OWEyMzljZjdlN2Y3MzM3ODdlMzZkNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5756XSy36rlzPYnyooNdxzBB9lio
U2oYbkywukrS0JJZE79jkLzUXx4wTNkyTSUYqExXgLwhsM4agC8HC+uPETShoQgI
I0BMPc93wxIGF/WH1dDuMb2vmU8M7A8LPOiAFPqxyrqrtoFlBXMwwsuhk2R/yWn2
ngjsZXEbY2qm08SO4nfuXN7ZQYATeAuoJVrcgRt/kNDjdWQN99afpAGaylaj2l5p
rIh0lKzCohB3ZEyrm9YB1g9u+x8+C492Avs3RxI3jENfuKAi5gJLBcdJaRJH6b5k
9lvbm1Us5mXONUSDUCQtOc+ZCskwF7nM83c1PyYQLEkE3TtTuUbFaRAMswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuboHP4d+ImmiOc9+f3M3h+NtShMB8GA1UdIwQY
MBaAFG7JLImGleQBmLnZK2gbm5VOv667MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mNmRjNTctODI2OC00NjYxLTk5MWMt
ODRjM2QzMDJjZjA0LzEvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mNmRjNTctODI2OC00NjYxLTk5MWMtODRjM2QzMDJjZjA0
LzEvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApNOXTuZ0
8fgL30JMTdROg6L+viS+7ux/vqtdQt0nNtFgVrzxccTjaqmL+pmlLAYpNvZGjfm3
GA8OpyKUAK8S+AMoYHrN5MKTUj2a0OMaucINucdrDuwSBUYwm/IGWTLlhGfIxsOh
KkF4eo19fKJe0W40Vz2yKg7u/pYbVyUE7dKETM8/0pi8c2fl/ONlxP1qx+gq4X26
gBLH/NSb6o0D1p1WHk3zZ0dphQJDChh2PVNSj8s05/4TLxFyBfeJHt2kUURpq6fC
cmBhDHYCIoBsmEuAgakJeO8dSOUkvYh9WCF9WuHs22CAww3G/PiB9pV1ypZ/eTow
BzBtfWNdEN2ECw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:58 2025 by rpki-client