Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File: BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier: AqDHxDlKuOk16oqkoYUNe1HPlAB51qo2r3aepauL+nU=
Subject key identifier: 71:B4:15:86:7A:B2:4D:FF:48:A1:E2:03:51:3E:9E:8C:55:8E:81:45
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer: /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial: 0198D54EBEC08C6D847E6C351877CEE7E537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number: 14B5
Signing time: Sat 23 Aug 2025 05:02:44 +0000
Manifest this update: Sat 23 Aug 2025 05:02:44 +0000
Manifest next update: Sun 24 Aug 2025 05:02:44 +0000
Files and hashes: 1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: 9HCPZh9oIkJFSfQXEp/6AJ105iRNgagpYiNUmn5qUpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:be:c0:8c:6d:84:7e:6c:35:18:77:ce:e7:e5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Validity
Not Before: Aug 23 05:02:44 2025 GMT
Not After : Aug 24 05:02:44 2025 GMT
Subject: CN=71b415867ab24dff48a1e203513e9e8c558e8145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:95:49:ea:1f:ea:fa:cb:f9:24:c4:6f:1a:
81:db:e4:e3:b8:c8:be:ba:9d:86:bc:4a:6c:28:4b:
fa:0a:b1:d7:f8:6f:84:4f:26:7a:22:7a:e6:4a:bc:
04:0c:7a:0d:6e:3e:09:c2:6d:da:5b:53:25:03:f0:
a9:63:5d:81:a8:4b:2f:be:f7:86:cc:08:36:6b:90:
86:7c:31:18:35:ae:1e:1e:54:87:d7:c9:dd:e3:1e:
cd:ff:5d:f9:9d:2a:92:d9:e4:f9:3d:7f:81:b4:74:
1d:54:ba:12:ed:37:1b:f3:5d:f9:d3:39:d7:2e:9b:
58:e2:e8:0e:08:46:fd:23:32:24:a3:7d:bc:9b:20:
ce:d8:a2:c4:72:79:41:be:f9:ed:37:66:51:c8:ef:
b7:c2:be:fe:07:3a:a9:e5:fc:1e:bf:92:95:e2:c9:
4c:58:07:d9:df:6a:04:d4:12:fe:6e:06:c6:b3:20:
21:b6:ae:d8:84:2c:ce:d6:ea:3d:9c:d7:56:50:8b:
3f:67:88:f3:09:76:fa:08:02:f1:70:69:3d:ba:ff:
ea:d9:9d:73:fd:1d:6c:74:63:8b:d9:9e:bc:77:62:
e9:e6:b1:f0:e7:f8:2e:94:c1:57:55:89:24:55:21:
80:35:b7:c9:ac:eb:97:42:e8:8f:60:f9:3b:03:52:
bd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B4:15:86:7A:B2:4D:FF:48:A1:E2:03:51:3E:9E:8C:55:8E:81:45
X509v3 Authority Key Identifier:
keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0d:0b:68:71:07:6f:14:d3:14:4e:b1:f6:5f:d6:95:a1:54:
87:bb:40:29:43:21:f8:56:57:2a:44:84:c5:7c:00:5e:10:ea:
2b:9e:13:62:5a:9e:b4:c0:ef:4a:d1:42:eb:4f:6b:f2:41:ec:
d2:ff:6e:fd:fe:e3:2a:bd:8e:cf:40:c6:13:28:9e:9e:80:44:
78:61:24:e1:b2:36:f6:39:30:1e:5b:6f:ac:52:59:e3:17:a3:
10:d8:85:32:ff:ab:ef:63:64:5f:dc:45:01:01:ce:32:f8:80:
74:f2:af:2e:ec:d4:ba:2b:a3:90:7c:46:25:fb:dc:c3:62:d5:
d1:7a:0a:aa:4a:87:e5:76:9d:cc:26:7f:35:ab:ab:0e:30:53:
da:18:cc:fc:e1:e1:aa:a2:ff:c5:24:58:91:e8:ba:28:3f:1c:
fb:b7:d6:6f:83:5d:aa:bd:02:57:73:54:65:2a:d8:f2:ec:0d:
14:f7:5d:91:6d:93:68:5c:8e:c8:91:20:fe:61:97:82:20:a7:
fe:f4:c6:d1:85:72:ed:82:4c:a3:a2:52:92:78:6d:88:f0:68:
5b:4a:91:ce:83:65:74:4d:cd:97:1d:b7:4f:4e:27:b9:d9:cf:
1b:44:d6:41:a6:d4:62:08:7a:ec:24:b1:7f:de:f9:86:bc:e5:
1b:90:2b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:41 2025 by rpki-client