Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File: BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier: 1jRaCNMQPzj1pg0h4952urVWdKWyju+QEjNczlVDMFw=
Subject key identifier: C3:23:6B:C7:22:D1:32:B0:D1:3C:41:22:9F:C8:B6:67:E2:A9:DF:89
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer: /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial: 0196C238E729DFA51ADD6FAA544FAB0D56CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number: 13A2
Signing time: Mon 12 May 2025 02:00:31 +0000
Manifest this update: Mon 12 May 2025 02:00:31 +0000
Manifest next update: Tue 13 May 2025 02:00:31 +0000
Files and hashes: 1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: DEEsgnGAXslceCuYLS3utJuBrTLHPSCnhRKkcPFB77E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:38:e7:29:df:a5:1a:dd:6f:aa:54:4f:ab:0d:56:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Validity
Not Before: May 12 02:00:31 2025 GMT
Not After : May 13 02:00:31 2025 GMT
Subject: CN=c3236bc722d132b0d13c41229fc8b667e2a9df89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ed:b1:36:dd:64:67:a0:06:6c:ef:34:9f:67:
1d:51:bd:f5:c7:0e:11:9c:65:29:17:a4:20:5d:a7:
91:ca:98:a0:ab:76:36:c9:7b:54:db:69:a6:47:2f:
9f:01:6c:f6:bc:c9:6c:82:08:3b:9a:f1:18:36:3e:
3c:52:2f:ec:66:18:04:5d:82:89:3f:53:dd:c4:a7:
15:7c:57:d0:ea:78:50:16:b2:7e:e5:ea:70:77:5f:
41:ad:6c:0a:00:1e:04:f5:fe:39:b1:d1:a8:52:05:
56:75:2e:a4:09:bf:22:97:cd:be:d3:93:20:d1:0a:
54:40:57:e1:df:83:ae:38:00:8e:40:42:a5:74:a8:
7d:2d:a8:04:78:7c:52:a9:d1:55:a6:15:62:e1:eb:
7c:3c:8c:e6:2b:40:01:e3:a9:cf:cf:20:73:c0:6d:
18:5b:e5:f3:9f:2c:d0:eb:a9:35:bd:e2:6f:8f:3c:
e6:44:0e:4a:41:ab:ab:ee:4d:f9:66:cd:c3:b3:b7:
e1:2f:73:6d:3b:dc:ff:69:ad:22:2b:dd:3c:2f:b0:
b2:74:d5:1a:cc:96:ca:38:67:e1:b2:e5:c9:98:53:
df:ed:b4:de:3e:02:0c:1d:e6:7d:4f:9a:57:c3:3c:
62:91:50:5f:98:d6:54:13:27:9e:e9:09:84:cd:d7:
a2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:6B:C7:22:D1:32:B0:D1:3C:41:22:9F:C8:B6:67:E2:A9:DF:89
X509v3 Authority Key Identifier:
keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:76:63:dd:33:7a:eb:82:f2:f0:92:7d:46:9d:10:c8:d2:73:
c2:f6:42:a7:59:4d:e4:02:e6:21:03:ed:f5:62:44:d4:f0:00:
30:1f:c4:39:89:6d:cc:58:54:75:89:62:64:0a:b6:c9:19:20:
17:a4:46:36:63:0e:92:b4:fb:1c:29:d2:f3:b0:cb:bd:a4:2a:
8c:f3:5d:2b:e7:0a:86:e3:a4:a5:50:46:4a:d2:f8:c8:d1:ba:
f6:c9:7c:d5:0f:d8:f3:d4:92:8f:61:ba:51:43:b6:3c:7c:8e:
8a:a3:15:af:78:07:ce:12:fd:95:91:61:f3:ed:62:d8:cd:d5:
02:30:cf:ed:ed:51:1c:74:e7:5c:09:f3:49:6c:98:1d:40:a8:
a3:e3:d4:95:b4:12:92:db:fb:73:b6:40:79:84:44:2f:f7:ce:
74:a8:df:7a:d7:23:97:ad:1c:9f:f9:e8:32:1d:8d:51:2c:89:
40:3d:2e:dc:4f:ea:5b:ef:3e:f3:e5:83:7e:1a:c3:ac:06:51:
6e:d9:7d:af:c0:58:73:ef:ab:e2:5b:f2:51:03:83:10:78:83:
ed:b6:70:ab:94:0e:49:6b:64:65:fd:2d:6a:dd:57:58:c2:d4:
ce:2c:70:22:d1:05:8b:9e:31:49:11:38:ea:c5:9b:a2:37:b9:
fd:86:5a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:15:04 2025 by rpki-client