Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
File: bsksiYaV5AGYudkraBublU6_rrs.mft (raw, json)
Hash identifier: o5feVbh0fYBGf0320geOjfOXd4I5O0Tdp9SuHM+7BTY=
Subject key identifier: 3D:37:98:38:7D:F7:0A:C1:E7:3E:41:D4:DE:B7:B1:0B:45:A9:97:88
Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
Certificate issuer: /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Certificate serial: 0199240D06CDE44E6ED483EF3BDF7589ABF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
Manifest number: 13B6
Signing time: Sun 07 Sep 2025 12:00:57 +0000
Manifest this update: Sun 07 Sep 2025 12:00:57 +0000
Manifest next update: Mon 08 Sep 2025 12:00:57 +0000
Files and hashes: 1: 8t23blmby7I_BMYol5IdpP47EaY.roa (hash: pjnFFi6cD6y+RwbV144rv6rsodQxlkOLLKzyTuXX1q8=)
2: bsksiYaV5AGYudkraBublU6_rrs.crl (hash: ECAGnLVisetrTNWIO/NiJTVBxEsjZDmaovmDaJJKSKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:06:cd:e4:4e:6e:d4:83:ef:3b:df:75:89:ab:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Validity
Not Before: Sep 7 12:00:57 2025 GMT
Not After : Sep 8 12:00:57 2025 GMT
Subject: CN=3d3798387df70ac1e73e41d4deb7b10b45a99788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:ee:99:16:b8:54:59:7a:bd:4d:83:d1:ac:
0c:50:2a:5e:11:aa:cb:8a:9d:60:c2:15:f3:1c:b0:
83:81:df:60:30:c5:56:3d:a0:54:76:55:1b:59:43:
6a:0d:6f:c6:2c:12:b4:32:f1:61:d2:3d:a5:b0:8f:
e8:35:b9:14:b8:c0:38:bc:1a:4e:fc:19:64:92:c6:
90:d0:ce:9e:58:a9:46:d8:83:ba:82:2f:ea:23:a3:
0b:32:ac:b7:9f:46:48:25:7d:7b:b2:8c:e6:ec:29:
a5:31:04:f7:19:db:c4:4f:47:39:43:23:66:eb:d3:
f6:34:36:c2:88:a8:a5:ed:62:06:9f:2b:9c:b3:8d:
7a:cd:2c:26:40:39:07:b5:d9:50:72:ec:ee:ab:29:
af:00:46:84:35:86:55:52:bb:65:a7:ff:83:61:f3:
0f:68:02:e0:54:f6:43:37:80:ff:c7:8d:b3:61:ec:
15:e1:d1:93:67:cc:4c:01:c9:b7:fd:d1:c4:b0:49:
ed:11:b3:0b:c2:68:0c:25:cc:ae:bb:f9:3d:88:04:
3f:d4:27:57:f4:c9:1f:f0:44:30:f1:d4:fc:36:bc:
5e:72:03:e5:3a:27:f1:45:fa:35:b0:04:7d:bc:ed:
36:b9:72:d8:bb:2d:ab:9e:3c:e5:5c:07:7a:36:ab:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:37:98:38:7D:F7:0A:C1:E7:3E:41:D4:DE:B7:B1:0B:45:A9:97:88
X509v3 Authority Key Identifier:
keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e6:2b:b2:ca:51:c9:ce:f0:26:69:f8:44:4c:92:3b:c3:aa:
e0:50:fd:9b:2e:0a:12:20:0c:96:de:b2:f8:f3:86:9c:78:13:
cf:90:84:74:47:7f:32:f0:86:03:5a:e7:62:88:7a:2d:5f:ce:
7d:70:8f:f8:ba:11:fa:00:30:e2:80:6b:cb:83:fb:6a:ce:ac:
48:f0:e4:8f:5e:72:44:01:d9:1d:65:36:22:bc:0b:79:5a:d3:
2f:04:bf:b6:e0:78:db:a3:cf:ba:dd:0d:85:32:41:2b:8c:a2:
4c:17:2e:38:53:1a:e1:73:95:7d:ff:98:f3:6b:e5:1b:4b:06:
2f:78:f4:e2:a3:29:3d:f1:e9:51:9f:98:36:6f:9c:81:06:ab:
b4:07:3d:07:79:17:86:d5:0a:06:b3:29:2e:43:01:75:c4:f4:
28:c1:1b:43:dc:c3:b9:3a:ad:ee:ff:94:82:89:0c:b4:74:8b:
f7:95:ef:f3:8b:e0:a6:53:b7:4e:12:73:e3:93:02:28:40:91:
fa:39:00:88:c2:4a:25:f0:56:02:1b:92:9d:6d:78:e1:c4:50:
5f:15:d8:2c:fc:11:ca:32:e4:48:9b:55:9b:3c:b8:03:fc:0c:
37:24:5a:41:9e:30:69:0e:0b:3f:39:cd:1d:cf:59:fc:24:1b:
8c:c2:e8:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDQbN5E5u1IPvO991iavyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzkyYzg5ODY5NWU0MDE5OGI5ZDkyYjY4MWI5Yjk1NGVi
ZmFlYmIwHhcNMjUwOTA3MTIwMDU3WhcNMjUwOTA4MTIwMDU3WjAzMTEwLwYDVQQD
EygzZDM3OTgzODdkZjcwYWMxZTczZTQxZDRkZWI3YjEwYjQ1YTk5Nzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8XumRa4VFl6vU2D0awMUCpeEarL
ip1gwhXzHLCDgd9gMMVWPaBUdlUbWUNqDW/GLBK0MvFh0j2lsI/oNbkUuMA4vBpO
/BlkksaQ0M6eWKlG2IO6gi/qI6MLMqy3n0ZIJX17sozm7CmlMQT3GdvET0c5QyNm
69P2NDbCiKil7WIGnyucs416zSwmQDkHtdlQcuzuqymvAEaENYZVUrtlp/+DYfMP
aALgVPZDN4D/x42zYewV4dGTZ8xMAcm3/dHEsEntEbMLwmgMJcyuu/k9iAQ/1CdX
9Mkf8EQw8dT8NrxecgPlOifxRfo1sAR9vO02uXLYuy2rnjzlXAd6Nqs7+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD03mDh99wrB5z5B1N63sQtFqZeIMB8GA1UdIwQY
MBaAFG7JLImGleQBmLnZK2gbm5VOv667MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mNmRjNTctODI2OC00NjYxLTk5MWMt
ODRjM2QzMDJjZjA0LzEvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9mNmRjNTctODI2OC00NjYxLTk5MWMtODRjM2QzMDJjZjA0
LzEvYnNrc2lZYVY1QUdZdWRrcmFCdWJsVTZfcnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeYrsspR
yc7wJmn4REySO8Oq4FD9my4KEiAMlt6y+POGnHgTz5CEdEd/MvCGA1rnYoh6LV/O
fXCP+LoR+gAw4oBry4P7as6sSPDkj15yRAHZHWU2IrwLeVrTLwS/tuB426PPut0N
hTJBK4yiTBcuOFMa4XOVff+Y82vlG0sGL3j04qMpPfHpUZ+YNm+cgQartAc9B3kX
htUKBrMpLkMBdcT0KMEbQ9zDuTqt7v+UgokMtHSL95Xv84vgplO3ThJz45MCKECR
+jkAiMJKJfBWAhuSnW144cRQXxXYLPwRyjLkSJtVmzy4A/wMNyRaQZ4waQ4LPznN
Hc9Z/CQbjMLo7w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:09 2025 by rpki-client