Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File: bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier: RK91/x0mZIoyQBQ6hzsAda+HFq2JVhGlQWotbxw+C7A=
Subject key identifier: 55:A9:7B:4C:34:FD:77:73:B2:81:6A:89:58:6C:D0:03:3B:B2:F3:A4
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer: /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial: 019A293057AA46EBC022ECA131A668910BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number: 04AA
Signing time: Tue 28 Oct 2025 05:00:25 +0000
Manifest this update: Tue 28 Oct 2025 05:00:25 +0000
Manifest next update: Wed 29 Oct 2025 05:00:25 +0000
Files and hashes: 1: L9Z2nBuUYrQISK7NL514VgxVG3M.roa (hash: EYXtLvAFnvPlybFtRX2gRTh4fJad12faTUZ9Z5qawVM=)
2: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: 7gqbOU9sGY9zti/uyQVN6YEXRXmWcthK5zjFcdlhpIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:57:aa:46:eb:c0:22:ec:a1:31:a6:68:91:0b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Validity
Not Before: Oct 28 05:00:25 2025 GMT
Not After : Oct 29 05:00:25 2025 GMT
Subject: CN=55a97b4c34fd7773b2816a89586cd0033bb2f3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:19:b9:e4:3f:28:f7:14:52:66:6c:11:f4:
1e:a4:d1:03:5a:e9:cf:87:1a:19:f8:3e:58:7d:63:
28:74:6d:d6:52:d4:e0:eb:66:9f:4c:dc:f9:fc:9b:
12:8f:6a:03:97:86:05:9a:60:0f:10:c4:60:60:17:
df:ce:85:04:17:44:5c:40:61:ac:3f:6c:3e:77:02:
8e:d7:27:4f:20:ca:4d:66:13:2a:4a:13:12:a2:14:
91:8d:98:f8:e5:d6:32:ab:49:f6:5e:70:d5:db:75:
86:49:6b:ce:34:09:79:f1:b0:02:ce:c5:9d:36:83:
49:5c:1f:34:51:2c:1c:d5:3a:83:53:8f:00:3a:c6:
35:8a:a1:75:7b:bf:ab:d3:91:63:3d:74:4b:30:21:
93:c2:bf:b6:6a:9b:8c:00:34:53:fa:4b:b9:9b:2c:
75:87:2c:f3:2b:af:22:9c:92:30:9f:03:76:4c:79:
c5:b4:91:03:ed:1a:db:f3:83:8b:71:d4:dc:e7:88:
81:8c:4d:bd:f2:e7:f5:77:3e:0d:52:94:ef:3d:31:
01:e0:51:2c:b4:29:98:44:37:dc:a6:9e:aa:46:22:
cc:e3:b2:87:8f:ba:fa:f6:e2:78:b6:94:bd:38:63:
ff:6b:65:fd:ad:a6:fa:64:6a:51:27:05:63:f6:36:
21:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:7B:4C:34:FD:77:73:B2:81:6A:89:58:6C:D0:03:3B:B2:F3:A4
X509v3 Authority Key Identifier:
keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:73:4b:dc:22:19:2c:89:c7:ca:f5:14:8f:bc:b7:6b:1a:1c:
f0:15:15:15:61:7c:d9:bb:97:c8:d4:2e:ce:06:6d:34:ce:15:
d6:a1:a5:ae:88:3b:8e:8c:3f:6e:51:ae:92:64:25:a4:72:ce:
17:da:88:29:a9:11:f0:7f:bb:d8:d5:d1:f4:64:44:9d:c5:fd:
8f:0b:80:0d:63:82:c5:ed:20:7e:99:93:69:71:69:e9:e5:da:
09:94:d7:04:ea:6c:f2:b8:78:9c:1d:2f:2e:16:7c:b8:a0:74:
45:c8:ae:37:48:ee:54:d1:5b:23:8f:fb:fa:cb:f2:9c:53:26:
11:e7:02:89:90:36:5b:f3:fe:9d:0a:3c:8d:c0:fe:4e:e9:ce:
c4:c1:45:f7:7a:b5:60:ed:89:81:9a:f8:93:b5:de:a1:1c:74:
43:88:5b:0a:75:74:6c:de:1c:66:e7:ea:ad:aa:e6:ed:3e:a0:
51:dc:42:ff:b9:31:93:c9:e4:88:2a:b2:60:c2:f4:07:54:30:
95:fe:e1:37:81:80:aa:3e:0d:32:df:f1:15:56:a8:2a:a6:f0:
04:55:09:d8:86:e0:4c:b8:a1:90:40:92:86:04:9e:1a:c1:2a:
5f:56:df:66:49:aa:b3:24:75:f6:a3:e3:9b:10:3a:34:78:54:
92:82:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:44:05 2025 by rpki-client