Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
File: b2Wy-ou61lAcfSHvR13ERUE_sos.mft (raw, json)
Hash identifier: 96ZoCcWBdAfO68Z50/tDt65goEx4VF/5D6J3lzxBxaY=
Subject key identifier: 43:48:8D:A5:15:EE:C9:6B:D5:EF:AA:5F:01:C7:42:2A:71:64:49:57
Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Certificate serial: 019761393AC2B6C593E18F8D6D1FA2E50519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 23:00:29 +0000
Manifest this update: Wed 11 Jun 2025 23:00:29 +0000
Manifest next update: Thu 12 Jun 2025 23:00:29 +0000
Files and hashes: 1: 1rm581qxLhd--ZUi0JVR0LPynog.roa (hash: Uo6Qum6Vso45WYow9KfGBMAaa8QdwTLlKBrcDIp7POk=)
2: b2Wy-ou61lAcfSHvR13ERUE_sos.crl (hash: n3+QGo2uuvSXzP84bC9EbhnUSNEFWltnHCNyEZtl7oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:39:3a:c2:b6:c5:93:e1:8f:8d:6d:1f:a2:e5:05:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Validity
Not Before: Jun 11 23:00:29 2025 GMT
Not After : Jun 12 23:00:29 2025 GMT
Subject: CN=43488da515eec96bd5efaa5f01c7422a71644957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:e1:80:23:1c:48:bd:19:98:75:e1:3f:bd:
47:28:9f:44:d7:a7:45:b0:e9:17:fe:13:4d:45:61:
84:02:64:a2:81:86:2f:fa:87:b9:4a:0e:99:1e:4d:
59:ac:c7:b6:17:e9:42:51:d7:56:d9:be:1b:36:fd:
de:10:c1:0e:d6:b4:49:95:ea:29:8d:b8:77:f0:f7:
c5:86:db:21:c9:96:bb:c1:46:c2:db:4f:ca:b2:09:
71:4a:8e:5a:79:6b:6a:e0:a8:7c:de:84:d5:9c:de:
21:f3:91:63:ac:c1:35:c4:e3:44:7d:d3:42:0e:ca:
18:36:6e:5b:c4:97:a9:3a:5b:00:4a:de:07:e3:af:
4c:44:e4:1d:fe:17:43:f1:9d:43:2a:86:27:4b:3b:
b4:42:ba:46:60:7a:ab:b9:a1:b4:74:77:c6:8b:4d:
58:69:3a:b3:d4:d5:b3:a2:e0:30:72:24:bf:06:e9:
23:96:d8:40:ec:1c:22:c2:c7:af:95:ef:e8:bf:81:
9e:91:27:44:ac:bd:93:72:70:ba:dd:7a:5b:83:4c:
4e:00:a0:0f:8a:9a:67:65:3b:68:8a:ff:78:37:92:
92:e5:7a:db:f6:ab:65:7a:69:86:a8:d7:c6:7b:c3:
7e:3f:c0:52:df:2d:9f:df:4b:ec:29:05:9a:36:6c:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:48:8D:A5:15:EE:C9:6B:D5:EF:AA:5F:01:C7:42:2A:71:64:49:57
X509v3 Authority Key Identifier:
keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9b:d9:40:e9:af:1a:e4:05:ff:f6:d1:e7:5f:83:98:f9:48:
38:4a:d1:3f:82:52:ef:38:6f:0c:4d:c2:b3:01:35:97:d6:68:
53:af:21:7c:c7:87:46:8c:f3:dc:22:09:81:0e:9e:07:93:fc:
4d:86:85:5b:f2:22:25:43:67:ec:6b:0d:4e:cf:e5:71:e4:a7:
2d:0b:f8:71:7f:9e:8e:2f:5c:52:d6:8f:43:cd:1e:6c:6a:86:
7f:e5:e8:33:92:2c:3e:0d:c7:c6:e7:37:4c:26:91:99:34:17:
30:f0:f4:e4:33:dd:b2:4a:59:01:88:89:13:3a:ae:5a:d4:07:
52:2b:16:b9:9a:32:a7:60:8f:dd:59:b9:6e:de:d9:49:24:eb:
1b:b8:12:22:56:0a:be:7b:f3:7e:f4:52:d4:3a:1e:07:3c:eb:
7e:43:43:f5:bf:4e:c4:59:ba:63:91:34:62:ea:c5:d1:7a:ce:
71:82:5e:0f:d1:01:f4:80:bb:f5:82:3e:8a:0a:cb:c8:b6:d9:
72:c9:ef:c5:e3:82:bc:50:67:1e:29:47:b7:9a:20:e7:ab:d0:
de:6c:b5:98:71:ad:36:78:05:14:ec:49:6f:4c:79:bb:ef:6a:
72:38:82:0f:23:d3:ca:ce:fe:eb:bc:0b:46:de:40:1d:3a:2a:
c0:0c:24:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:49:11 2025 by rpki-client