Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
File: bsksiYaV5AGYudkraBublU6_rrs.mft (raw, json)
Hash identifier: 6mZIuL2h7wsOG7G8lKFzqZEZ06lKqKvDvF0UJFcyc58=
Subject key identifier: 77:FE:D4:08:28:82:71:06:3C:40:D9:71:2B:3A:BA:E7:1F:5C:30:3B
Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
Certificate issuer: /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Certificate serial: 01958CCE653A7AEF371EB5F688BC14F8D86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
Manifest number: 11DA
Signing time: Thu 13 Mar 2025 00:01:31 +0000
Manifest this update: Thu 13 Mar 2025 00:01:31 +0000
Manifest next update: Fri 14 Mar 2025 00:01:31 +0000
Files and hashes: 1: 8t23blmby7I_BMYol5IdpP47EaY.roa (hash: pjnFFi6cD6y+RwbV144rv6rsodQxlkOLLKzyTuXX1q8=)
2: bsksiYaV5AGYudkraBublU6_rrs.crl (hash: 3Kmj/xeDX0WP0+nr4ywn85oeestLJa33D0JcleToBe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:65:3a:7a:ef:37:1e:b5:f6:88:bc:14:f8:d8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Validity
Not Before: Mar 13 00:01:31 2025 GMT
Not After : Mar 14 00:01:31 2025 GMT
Subject: CN=77fed408288271063c40d9712b3abae71f5c303b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fb:d6:a3:d9:6f:5f:45:49:3b:d0:3f:a4:3f:
d5:a8:88:98:7e:93:df:a5:2c:a6:45:27:e3:be:6e:
90:79:c2:c8:08:d8:98:cc:f3:98:74:a1:d2:16:cc:
54:18:5f:2d:34:2f:76:0d:45:da:5c:86:17:b3:33:
b4:c0:e3:7b:13:3c:59:ec:5e:94:5c:8c:91:e8:fa:
ca:ff:73:28:d9:f9:f4:c6:75:d9:6c:f3:b4:31:d5:
d1:dc:63:79:49:18:a1:82:b5:8f:e1:e4:8a:32:38:
4d:42:c7:9d:94:29:e3:aa:74:37:05:84:3f:6b:13:
51:e1:d2:46:2a:f6:d7:bb:d2:7c:c1:c9:8d:2c:40:
a0:6e:15:50:0a:18:27:c0:79:ce:84:c4:0e:c0:be:
0b:67:a7:fe:e8:5b:1a:ed:31:53:07:c1:dc:75:af:
c4:17:23:f5:09:a9:e1:03:76:c8:4c:b0:ce:4b:a7:
48:f5:85:e8:86:f9:bc:57:ff:ea:ff:50:4a:dc:f3:
08:e8:f9:74:71:b0:2a:0b:84:d0:cc:18:9d:45:ed:
a9:bc:c0:0d:9a:9b:84:6a:cc:9c:ba:3c:33:3c:12:
46:8a:20:35:6d:1b:32:0f:7b:ca:02:89:b0:75:d6:
48:81:a6:3f:bf:45:fe:24:09:20:84:42:1d:d6:85:
b1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FE:D4:08:28:82:71:06:3C:40:D9:71:2B:3A:BA:E7:1F:5C:30:3B
X509v3 Authority Key Identifier:
keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f8:06:d1:fc:e6:78:a0:d0:ae:1f:64:1f:97:f2:8b:91:a3:
ee:c1:69:49:3c:c7:61:93:33:85:c9:ce:5f:fe:79:d6:10:28:
9b:16:d1:02:03:bf:14:2d:a0:b0:74:73:97:59:73:bd:3b:f0:
eb:ff:7a:65:20:27:fc:ed:b0:aa:35:0d:d4:c4:1f:d0:a5:5c:
87:40:a0:4f:4e:42:bc:3b:6d:e6:d0:b5:b9:eb:c7:55:61:8e:
bb:0f:f3:a0:7b:a1:63:2c:c0:7b:06:ba:99:ec:69:b1:d0:6a:
6e:26:aa:37:ef:1c:35:ed:10:f7:1c:9c:b6:d7:da:73:6b:7b:
a3:f0:ad:df:a4:6e:80:36:a1:e5:1a:81:77:28:08:92:cc:1d:
b8:80:e5:92:14:89:30:9d:b4:5e:98:02:cb:fd:35:79:78:c0:
87:29:d8:ce:80:ee:f1:c6:86:8d:f7:a2:83:67:00:fd:92:f2:
31:de:8c:48:a4:18:b6:69:0b:e9:60:1b:d7:fd:79:ea:94:11:
f6:61:1c:68:f3:75:76:17:c0:6f:b8:7a:3c:28:e1:d1:bf:4e:
7a:66:9b:64:d8:c7:d1:aa:07:0a:39:de:52:15:26:e6:69:17:
a6:a7:8e:ee:83:ac:ff:1c:74:6b:18:a7:1d:42:6c:b1:dd:28:
9e:42:cf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:39 2025 by rpki-client