Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
File: BsbsKNsRSoYnZCbR9I0rajXV_nM.mft (raw, json)
Hash identifier: vxDr9BGesAdvA36gR+MOZrKrBCfviVpK3GjL9FIgPfU=
Subject key identifier: A0:90:EC:CD:30:BD:24:24:07:E9:9D:FA:3F:04:A5:2A:24:D5:E8:3D
Authority key identifier: 06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
Certificate issuer: /CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Certificate serial: 0197B77CBBF918BA568C91E626B8D8F940B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
Manifest number: 1421
Signing time: Sat 28 Jun 2025 17:01:34 +0000
Manifest this update: Sat 28 Jun 2025 17:01:34 +0000
Manifest next update: Sun 29 Jun 2025 17:01:34 +0000
Files and hashes: 1: BsbsKNsRSoYnZCbR9I0rajXV_nM.crl (hash: O2Elnw5aUmoo3Qs6f4zlT7eWiAv8uKA4qz4H6yrXnxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bb:f9:18:ba:56:8c:91:e6:26:b8:d8:f9:40:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c6ec28db114a86276426d1f48d2b6a35d5fe73
Validity
Not Before: Jun 28 17:01:34 2025 GMT
Not After : Jun 29 17:01:34 2025 GMT
Subject: CN=a090eccd30bd242407e99dfa3f04a52a24d5e83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:0f:b8:5e:24:3a:f9:34:07:5e:e9:60:7d:
96:15:5c:3e:c0:b8:a5:2a:5c:88:2e:d4:ef:bf:bd:
54:c9:28:5f:99:26:c2:49:db:64:0d:76:2c:eb:dd:
97:ee:a2:44:d5:64:40:63:b2:20:7a:bc:9a:5c:9d:
71:cf:26:ae:71:df:00:90:61:7d:e9:8d:6f:97:57:
02:30:48:1d:3d:53:6f:dc:03:e7:10:bd:64:4b:2c:
11:69:6d:b8:ad:03:44:90:4c:6b:15:35:c5:5f:df:
53:af:4d:ba:e3:46:08:43:37:e6:76:bd:e3:56:9f:
94:cd:63:56:c0:87:aa:75:a6:1d:bf:95:3b:d2:b2:
6f:88:1c:6a:c5:79:56:af:55:f9:63:85:c3:28:13:
53:29:24:f4:af:9e:59:97:27:9d:70:3a:f3:83:03:
1b:cd:84:64:35:e1:80:c0:bf:9e:f5:41:35:1a:40:
6b:ca:91:ae:83:cc:21:bc:9c:82:55:d9:79:55:69:
67:32:aa:aa:22:56:86:20:79:28:e4:e9:6f:ee:f8:
94:a6:37:a8:b2:50:17:3b:a4:dd:cd:b2:d0:a5:c7:
b6:78:b7:a6:0c:ce:d4:ac:b1:02:cc:fc:cd:a9:b7:
83:5f:7d:1a:31:97:67:cc:2a:8f:3e:9d:43:a4:bc:
cf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:90:EC:CD:30:BD:24:24:07:E9:9D:FA:3F:04:A5:2A:24:D5:E8:3D
X509v3 Authority Key Identifier:
keyid:06:C6:EC:28:DB:11:4A:86:27:64:26:D1:F4:8D:2B:6A:35:D5:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsbsKNsRSoYnZCbR9I0rajXV_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/263f8d-136f-46ec-86c1-376bf9e63059/1/BsbsKNsRSoYnZCbR9I0rajXV_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:1e:bc:4f:34:5d:bc:3d:d8:5a:7e:4d:b0:9a:2d:71:4b:79:
fd:89:2e:79:72:0e:a8:a7:90:d6:cb:ee:da:ad:4e:cb:e3:9f:
31:d4:d7:52:e1:d7:7a:7e:e2:03:75:6a:9a:ae:bc:fb:0f:cb:
da:ec:2c:6d:aa:c4:86:c6:d0:39:9e:1b:12:54:2b:ee:de:c6:
57:58:7f:b1:0f:56:06:da:eb:12:61:17:c9:9a:ed:e2:47:fd:
bb:44:66:9d:8e:28:bc:12:46:7b:44:3c:78:54:49:52:61:e3:
cc:8f:6b:bd:25:e6:f4:52:e6:76:49:8f:70:9f:49:d4:64:49:
b7:3c:0b:9c:aa:5a:e6:ac:f8:6f:41:d8:c4:b3:d8:02:d1:42:
95:ea:d2:d9:65:83:63:8c:5a:e4:5f:6b:c0:b3:ba:e1:e0:1d:
ff:e1:7a:44:ef:8b:af:84:13:93:e6:58:1b:03:93:d5:12:8e:
39:53:c0:0c:10:e3:6e:eb:e6:ea:0d:64:db:a7:de:14:9c:40:
3d:45:9b:d4:4e:9f:dc:ba:ea:fb:7c:56:ab:32:7f:c5:29:16:
2e:6a:1b:61:ed:ce:f2:52:79:82:c7:3f:49:98:da:c8:22:f9:
4e:0c:f6:1c:bf:87:60:a5:e3:79:79:0a:03:d3:19:95:44:57:
e6:a0:64:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fLv5GLpWjJHmJrjY+UCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzZlYzI4ZGIxMTRhODYyNzY0MjZkMWY0OGQyYjZhMzVk
NWZlNzMwHhcNMjUwNjI4MTcwMTM0WhcNMjUwNjI5MTcwMTM0WjAzMTEwLwYDVQQD
EyhhMDkwZWNjZDMwYmQyNDI0MDdlOTlkZmEzZjA0YTUyYTI0ZDVlODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV8PuF4kOvk0B17pYH2WFVw+wLil
KlyILtTvv71UyShfmSbCSdtkDXYs692X7qJE1WRAY7IgeryaXJ1xzyaucd8AkGF9
6Y1vl1cCMEgdPVNv3APnEL1kSywRaW24rQNEkExrFTXFX99Tr02640YIQzfmdr3j
Vp+UzWNWwIeqdaYdv5U70rJviBxqxXlWr1X5Y4XDKBNTKST0r55ZlyedcDrzgwMb
zYRkNeGAwL+e9UE1GkBrypGug8whvJyCVdl5VWlnMqqqIlaGIHko5Olv7viUpjeo
slAXO6TdzbLQpce2eLemDM7UrLECzPzNqbeDX30aMZdnzCqPPp1DpLzPNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCQ7M0wvSQkB+md+j8EpSok1eg9MB8GA1UdIwQY
MBaAFAbG7CjbEUqGJ2Qm0fSNK2o11f5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yNjNmOGQtMTM2Zi00NmVjLTg2YzEt
Mzc2YmY5ZTYzMDU5LzEvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8yNjNmOGQtMTM2Zi00NmVjLTg2YzEtMzc2YmY5ZTYzMDU5
LzEvQnNic0tOc1JTb1luWkNiUjlJMHJhalhWX25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKR68TzRd
vD3YWn5NsJotcUt5/YkueXIOqKeQ1svu2q1Oy+OfMdTXUuHXen7iA3Vqmq68+w/L
2uwsbarEhsbQOZ4bElQr7t7GV1h/sQ9WBtrrEmEXyZrt4kf9u0RmnY4ovBJGe0Q8
eFRJUmHjzI9rvSXm9FLmdkmPcJ9J1GRJtzwLnKpa5qz4b0HYxLPYAtFClerS2WWD
Y4xa5F9rwLO64eAd/+F6RO+Lr4QTk+ZYGwOT1RKOOVPADBDjbuvm6g1k26feFJxA
PUWb1E6f3Lrq+3xWqzJ/xSkWLmobYe3O8lJ5gsc/SZjayCL5Tgz2HL+HYKXjeXkK
A9MZlURX5qBkjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:36 2025 by rpki-client