Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
File: bsksiYaV5AGYudkraBublU6_rrs.mft (raw, json)
Hash identifier: MN9UOs2P0AkqqZdwuL/JVPSWuuJN2KYQfuc/4M2VX18=
Subject key identifier: 83:BC:3E:22:1C:EB:A7:FF:A3:A7:E5:7F:28:8C:A6:DC:3A:04:40:1B
Authority key identifier: 6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
Certificate issuer: /CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Certificate serial: 0198D4E0F3CB6BBDB17AB141404AD4C00413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
Manifest number: 138D
Signing time: Sat 23 Aug 2025 03:02:48 +0000
Manifest this update: Sat 23 Aug 2025 03:02:48 +0000
Manifest next update: Sun 24 Aug 2025 03:02:48 +0000
Files and hashes: 1: 8t23blmby7I_BMYol5IdpP47EaY.roa (hash: pjnFFi6cD6y+RwbV144rv6rsodQxlkOLLKzyTuXX1q8=)
2: bsksiYaV5AGYudkraBublU6_rrs.crl (hash: 0Hm3XUB/6IruwNkpBBFJu6fkUufgLVjsXnJ9r3bjSR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:f3:cb:6b:bd:b1:7a:b1:41:40:4a:d4:c0:04:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec92c898695e40198b9d92b681b9b954ebfaebb
Validity
Not Before: Aug 23 03:02:48 2025 GMT
Not After : Aug 24 03:02:48 2025 GMT
Subject: CN=83bc3e221ceba7ffa3a7e57f288ca6dc3a04401b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:9a:15:7e:07:00:90:52:66:58:db:09:64:
5e:c9:2a:f7:56:bd:b2:40:9c:d5:7c:26:72:f0:31:
e7:27:3e:55:53:22:28:10:3d:04:88:b6:e4:12:c2:
fe:d0:f5:c2:e1:6a:fa:71:e3:aa:8c:31:29:88:49:
68:0e:ed:6e:45:e4:41:7a:3b:09:b8:bf:1d:79:06:
2a:18:14:b1:ea:20:6c:6d:03:73:de:c1:88:4d:96:
27:93:5e:76:fc:d3:ba:d3:4e:5d:93:41:e4:aa:98:
fa:55:ee:65:32:5e:d2:2c:89:60:86:a9:96:a5:80:
7b:f0:92:c2:81:a3:fd:a7:95:49:0b:55:9f:a9:f2:
c0:ee:53:11:01:66:73:75:0e:58:2b:9e:87:eb:03:
a3:29:e1:13:bd:75:3f:64:69:0a:2c:09:18:6d:48:
d8:1e:4f:14:fc:68:4a:eb:e7:dc:25:35:c8:49:f7:
56:81:37:ac:c5:e8:ed:df:cd:54:c8:fe:12:5c:38:
77:41:c6:8a:8a:21:b1:96:cd:a5:6c:82:79:2c:39:
b5:45:8e:da:d4:d7:06:98:3e:6c:cb:24:70:37:5b:
ef:2c:39:9c:cd:b3:1e:a9:17:0d:8c:56:77:80:ba:
d4:38:c6:ed:00:f4:d7:df:82:ba:05:90:af:98:b3:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BC:3E:22:1C:EB:A7:FF:A3:A7:E5:7F:28:8C:A6:DC:3A:04:40:1B
X509v3 Authority Key Identifier:
keyid:6E:C9:2C:89:86:95:E4:01:98:B9:D9:2B:68:1B:9B:95:4E:BF:AE:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsksiYaV5AGYudkraBublU6_rrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/f6dc57-8268-4661-991c-84c3d302cf04/1/bsksiYaV5AGYudkraBublU6_rrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a2:85:f9:f5:72:0b:c5:59:36:2b:ee:56:26:0b:84:54:49:
ba:32:d4:45:cb:21:d8:bd:c9:f7:6b:55:3a:50:14:6f:b5:64:
3b:6f:34:2a:6e:c1:29:ec:04:46:6f:77:96:a5:5f:f2:ec:da:
1d:34:73:7c:75:96:9f:0e:1b:57:ba:69:48:36:16:7e:19:17:
30:5a:ed:8a:20:a7:19:a8:bc:a3:9f:bc:45:bd:b2:d5:d1:7b:
bb:ba:ae:b5:2b:41:a9:d0:fa:76:4c:2b:54:6f:d8:28:8a:c9:
08:da:be:47:ec:f8:0f:75:c1:84:c6:de:90:c0:55:a5:ed:b4:
10:c3:69:11:17:74:10:af:10:f0:ef:87:0a:63:b4:b1:c7:0a:
f6:eb:ee:d2:10:70:a3:8c:99:fe:af:72:c2:44:3d:4f:8a:1e:
9f:ca:81:6e:91:cd:7b:07:cc:31:4b:f0:c3:86:f1:7f:2f:76:
57:d9:6c:bf:5f:de:4d:a3:9a:fa:96:71:81:8f:39:ae:62:64:
d4:50:bd:d3:78:1c:fb:1c:86:26:be:a0:2e:cc:d0:bf:e4:09:
52:8c:28:ce:dd:6e:31:36:52:ad:d1:31:03:0c:46:6d:de:52:
49:7a:8c:07:4e:d1:c2:08:6e:44:4d:5e:0a:2e:db:37:17:ca:
a0:cc:e8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:09 2025 by rpki-client