Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
File: bsksiYaV5AGYudkraBublU6_rrs.mft (raw, json)
Hash identifier: 526Dc8N/fxQ0SCFXHchWjtFUR752d97rmJYcKJZ0tJY=
Subject key identifier: F2:C5:2C:0F:68:79:AA:3A:30:66:AB:40:3C:F3:15:88:14:43:ED:0D
Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
Certificate issuer: /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Certificate serial: 0199FE47041C08598F7191D4E00B1C42FCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
Manifest number: 1427
Signing time: Sun 19 Oct 2025 21:01:30 +0000
Manifest this update: Sun 19 Oct 2025 21:01:30 +0000
Manifest next update: Mon 20 Oct 2025 21:01:30 +0000
Files and hashes: 1: 8t23blmby7I_BMYol5IdpP47EaY.roa (hash: pjnFFi6cD6y+RwbV144rv6rsodQxlkOLLKzyTuXX1q8=)
2: bsksiYaV5AGYudkraBublU6_rrs.crl (hash: SGaCht5ErCVXXtlTf/nHvaH5nk/xais6+ujucL0bG6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:04:1c:08:59:8f:71:91:d4:e0:0b:1c:42:fc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Validity
Not Before: Oct 19 21:01:30 2025 GMT
Not After : Oct 20 21:01:30 2025 GMT
Subject: CN=f2c52c0f6879aa3a3066ab403cf315881443ed0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:39:74:4e:4c:88:22:e5:8f:4c:ad:96:80:0f:
d2:af:b5:b2:2d:34:f6:92:43:4e:6e:bf:88:64:f4:
de:fb:c4:aa:66:0b:05:04:0a:d0:ee:b6:52:0c:ad:
21:27:25:f1:5a:8a:6a:05:c0:39:11:8e:d9:32:62:
29:7a:0a:0b:7e:97:77:3e:e7:04:1b:33:e6:ba:ea:
ad:b8:bc:cf:2a:e5:bd:01:8a:9e:e3:3c:54:6c:6b:
70:b8:3e:b2:ce:da:66:73:aa:a5:97:1b:a4:9a:60:
41:3c:06:ec:37:88:ed:29:a2:c7:58:cc:2a:f7:a0:
2b:79:e9:33:ad:9a:54:af:d7:9e:c2:ea:7a:e2:43:
8d:48:ef:01:73:da:99:90:9c:43:ee:7f:eb:8d:99:
a3:68:0c:c3:b3:50:15:21:71:82:d2:1b:7a:89:70:
fd:12:48:a1:68:58:e4:00:b6:07:70:50:0a:ae:c6:
78:e1:d4:16:a9:a0:20:39:d0:e7:96:4d:61:54:25:
13:f9:32:4e:8a:56:d8:b6:0d:70:f1:4d:5d:d7:03:
90:10:41:14:20:11:01:a9:de:20:01:57:75:57:98:
dd:9c:e7:24:11:9e:5d:5c:a8:9b:44:96:10:19:26:
fa:db:fd:42:67:d2:c5:88:ff:83:16:d1:98:ce:1d:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C5:2C:0F:68:79:AA:3A:30:66:AB:40:3C:F3:15:88:14:43:ED:0D
X509v3 Authority Key Identifier:
keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:51:eb:0c:aa:01:42:e6:16:2b:4c:3d:36:da:ce:23:f6:f9:
82:04:b0:5b:74:47:b5:8d:99:e5:79:a0:34:14:99:65:79:5a:
7e:89:8c:2e:f9:0e:a1:ac:42:f0:9e:a1:27:e5:7e:09:f3:f6:
3b:d1:08:60:db:14:08:51:50:e1:24:b5:66:37:7d:5e:bf:1f:
31:e7:ed:9a:f0:c7:3a:85:6c:87:28:cd:3e:92:96:23:5a:a0:
28:57:76:f9:4e:90:12:f8:f8:73:16:aa:5e:1c:a1:a8:c5:e9:
e7:3c:69:69:6b:34:2f:ca:89:56:b5:a1:fb:74:60:00:38:61:
27:a2:55:35:29:f8:05:c9:19:9c:01:42:54:74:7e:50:8a:3c:
89:05:4a:85:a8:76:85:96:12:aa:6d:dc:78:ae:fc:9d:57:fb:
32:6f:84:2b:38:9a:76:c2:c0:5f:f5:32:7c:5c:2b:1d:50:e9:
d4:ec:6b:03:f2:3b:b4:8d:61:90:dc:4b:5c:97:5b:d0:01:77:
e6:89:0b:29:0a:8a:bc:83:32:c9:1b:69:e1:de:30:b9:31:f9:
16:f6:23:6d:cb:f0:11:d7:72:a5:d7:f3:0b:bb:46:bc:b7:56:
4f:83:12:2f:4d:06:d5:1d:af:61:5d:0f:3f:df:fc:3b:b5:77:
41:a2:a1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:44 2025 by rpki-client