Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File: bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier: ABQ+P1P+2Ssw+t+TIUVekUnbgYNHBSM1EgneikvznSY=
Subject key identifier: 30:93:70:1F:91:02:08:25:06:7B:EA:1D:F4:10:7F:32:09:2E:79:C8
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer: /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial: 019937CAE1C106205633D7AFAA3B8493AB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number: 042D
Signing time: Thu 11 Sep 2025 08:01:06 +0000
Manifest this update: Thu 11 Sep 2025 08:01:06 +0000
Manifest next update: Fri 12 Sep 2025 08:01:06 +0000
Files and hashes: 1: L9Z2nBuUYrQISK7NL514VgxVG3M.roa (hash: EYXtLvAFnvPlybFtRX2gRTh4fJad12faTUZ9Z5qawVM=)
2: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: 4zR8edGPiw9b92csLtVachVvve210XARQD44h+CqOsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:ca:e1:c1:06:20:56:33:d7:af:aa:3b:84:93:ab:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Validity
Not Before: Sep 11 08:01:06 2025 GMT
Not After : Sep 12 08:01:06 2025 GMT
Subject: CN=3093701f91020825067bea1df4107f32092e79c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3e:d2:78:4d:21:dd:9d:a2:f9:87:0a:03:4e:
44:6f:66:1e:92:72:15:88:e4:d9:e1:e5:e6:99:3e:
4e:bd:6e:d6:1a:0b:d2:ab:0f:c4:b3:f1:84:8b:b7:
bb:83:9c:08:a0:3f:bb:ed:ed:99:48:b2:38:2b:3b:
73:54:73:4b:86:7a:fd:98:9a:c4:07:74:b9:53:09:
ca:b5:29:e6:8c:20:c4:5f:2e:0e:8b:45:97:b7:c8:
87:6f:21:64:6a:de:50:79:05:2e:cc:45:c8:1b:d9:
d8:ad:4a:95:de:84:6f:7e:73:4a:72:93:f5:e7:ce:
34:0a:3f:8b:3a:c6:ab:d0:b4:c8:82:7a:89:6e:72:
95:b5:ec:74:46:ef:9d:dc:1e:1f:c2:32:e9:37:6e:
37:e1:c0:90:6d:42:be:b8:d8:ae:3b:68:b2:71:67:
3c:a3:9c:e4:b0:f2:79:2d:b6:cc:c5:6e:29:34:25:
7e:26:3d:9a:ce:5e:b2:14:ac:82:9a:c6:12:de:8c:
c7:e2:f5:e6:98:e5:5c:90:20:9e:43:ea:ed:26:20:
f1:d0:87:f1:51:c9:35:e5:db:5c:ca:cd:e9:7f:60:
0c:d5:da:b0:f2:ed:24:a7:cf:69:80:07:fa:d0:d3:
6b:1e:96:d7:22:d8:74:94:ab:c7:41:d3:52:6e:0a:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:70:1F:91:02:08:25:06:7B:EA:1D:F4:10:7F:32:09:2E:79:C8
X509v3 Authority Key Identifier:
keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e1:eb:61:ed:2a:c1:0c:46:0f:29:bd:49:df:89:07:89:4b:
84:1f:6d:13:67:ee:5c:d0:44:e6:2c:2c:80:a6:39:e8:f1:2e:
40:26:b9:71:4b:0e:90:82:85:2c:35:67:7b:2c:fb:07:7b:63:
d0:19:12:67:cc:d8:45:6e:22:0d:36:57:4c:dc:15:59:c6:0f:
d8:d8:91:99:9c:56:28:29:72:8b:97:44:e6:c1:f3:17:05:4c:
9c:db:db:e1:a8:7b:9a:b4:10:ea:10:e5:96:8f:0e:e7:a2:08:
f1:a2:f0:c3:aa:33:0d:47:ea:49:ab:ce:ad:d6:79:40:a7:c6:
a3:00:70:67:ec:68:6a:46:67:ac:3a:69:50:55:c2:77:ed:c2:
c8:15:65:aa:3b:9f:2a:11:11:af:87:b2:16:73:f1:d9:c2:68:
ce:64:91:d2:d7:04:f5:5d:a5:a6:82:2b:64:eb:cf:7f:6b:20:
0c:76:f0:61:a4:24:d6:14:af:a1:2e:58:8c:4d:5a:21:84:9f:
2e:74:95:cd:4c:a5:4a:a0:b1:e3:57:d0:6c:3e:e3:f3:8b:fc:
e4:3e:95:e7:ca:b3:00:f1:a9:80:43:09:77:47:98:f2:1b:56:
e4:1c:01:80:32:00:1e:54:d9:d0:e8:8d:c2:31:e9:d9:66:0a:
5d:ed:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 13:38:09 2025 by rpki-client