Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File: bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier: xnfR3+zz4YkcsJI3Vy6TT4/ZlGho2M76LzHT9GFRWYo=
Subject key identifier: C8:C3:4F:C1:36:9F:F3:8D:38:E9:1F:8D:A1:3E:B2:D1:77:50:B4:3E
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer: /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial: 01963B0A30B8FED1FF04E112806F4E8975C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number: 02A1
Signing time: Tue 15 Apr 2025 20:00:45 +0000
Manifest this update: Tue 15 Apr 2025 20:00:45 +0000
Manifest next update: Wed 16 Apr 2025 20:00:45 +0000
Files and hashes: 1: L9Z2nBuUYrQISK7NL514VgxVG3M.roa (hash: EYXtLvAFnvPlybFtRX2gRTh4fJad12faTUZ9Z5qawVM=)
2: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: RCvx04bGEqdmJ/2W8YpxY+jr2oZ3BtSojnC2U1pcyrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3b:0a:30:b8:fe:d1:ff:04:e1:12:80:6f:4e:89:75:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Validity
Not Before: Apr 15 20:00:45 2025 GMT
Not After : Apr 16 20:00:45 2025 GMT
Subject: CN=c8c34fc1369ff38d38e91f8da13eb2d17750b43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:14:59:0a:94:04:4b:bc:ce:e7:97:f2:47:9e:
46:13:d2:6d:e1:74:2d:e8:35:c8:d5:3f:ee:e6:29:
47:26:a1:49:32:b3:24:c9:27:f6:61:d0:0b:28:8e:
fc:9c:22:e7:b2:0c:bf:1a:c9:ff:e1:53:c1:c2:29:
d1:db:0a:27:eb:a8:c0:0d:af:dc:71:5d:63:72:ef:
ca:a7:00:20:10:82:7d:1e:09:39:41:15:4a:35:84:
d7:ac:4f:cd:dd:94:a7:b7:c0:29:53:dd:f3:0f:ca:
27:09:90:42:10:73:ed:ad:f6:0e:32:a3:c3:5f:bd:
c6:96:36:ee:d6:9e:52:54:ea:96:e3:58:60:57:1a:
76:ea:dc:85:ba:f5:e6:e9:ec:80:19:7b:b7:e9:37:
40:23:2e:98:6d:86:ec:84:42:99:da:6d:e7:ec:a9:
0f:93:02:84:54:67:5f:48:19:35:6d:29:ae:b6:72:
e7:2a:8b:06:7f:14:f4:3d:db:ec:3d:ee:5a:5c:27:
59:d0:14:4a:0e:c1:ce:0f:74:a1:74:c5:5b:25:74:
fc:41:2c:8d:a7:c8:14:4e:2f:a6:36:a2:95:ec:a7:
b4:ff:4f:ed:1e:90:eb:b9:64:54:7c:64:0d:32:aa:
6d:1a:f6:c0:3b:3d:6c:89:c8:c8:93:5a:ff:72:a6:
59:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C3:4F:C1:36:9F:F3:8D:38:E9:1F:8D:A1:3E:B2:D1:77:50:B4:3E
X509v3 Authority Key Identifier:
keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:72:1f:58:e5:21:46:2b:b7:cc:3a:27:5f:f8:88:a0:93:e0:
90:20:21:d5:1d:07:56:10:f3:86:02:0f:66:b9:69:bc:10:23:
17:62:65:dc:40:3d:34:8f:83:0b:4a:f4:62:64:e0:83:4e:af:
be:33:00:69:fa:65:1c:5f:6c:12:09:0a:85:9e:0f:6b:e1:4f:
ba:ad:25:c6:4d:ff:45:d3:7b:ab:a9:6f:59:a6:af:57:c3:5f:
41:a0:71:93:84:71:1c:98:65:b9:2d:ee:1d:e3:ea:0a:02:8a:
6f:e7:e1:50:49:24:eb:fe:12:76:7f:c8:db:84:ff:43:1b:e7:
30:3f:20:bd:0c:f3:18:ca:46:e2:a6:ec:ae:88:f6:f5:e5:81:
bc:3a:ee:8d:ca:ff:97:1c:d7:8b:95:a6:6f:bb:4a:d6:1d:02:
0e:db:c2:73:24:94:90:f9:75:60:04:41:93:5f:67:17:bc:c2:
65:00:0d:0e:bc:fd:4c:04:39:5c:a3:a1:85:36:7f:b9:9e:35:
12:dd:34:26:1d:c8:16:2b:9d:1b:08:28:db:7d:15:5a:bd:73:
fc:01:fc:16:57:ea:b7:e2:dd:cb:7a:de:dc:8d:97:66:ae:96:
4a:30:d1:2a:23:78:ac:ba:51:77:c3:2a:26:c4:6e:51:c0:20:
3a:ac:48:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:57:27 2025 by rpki-client