Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
File: b2Wy-ou61lAcfSHvR13ERUE_sos.mft (raw, json)
Hash identifier: BzjNdI6xQyTTBAOoFQwKmySTEqIQElZC/SttAI5Bj4k=
Subject key identifier: A6:D7:A8:B9:07:90:DC:58:55:D5:77:23:52:59:0E:FF:10:C6:EC:45
Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Certificate serial: 019A7149B62200E4D769F5FDAA5580B2D4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:00:47 +0000
Manifest this update: Tue 11 Nov 2025 05:00:47 +0000
Manifest next update: Wed 12 Nov 2025 05:00:47 +0000
Files and hashes: 1: 1rm581qxLhd--ZUi0JVR0LPynog.roa (hash: Uo6Qum6Vso45WYow9KfGBMAaa8QdwTLlKBrcDIp7POk=)
2: b2Wy-ou61lAcfSHvR13ERUE_sos.crl (hash: CiN74Hn65SXSiCb5iaD97Zem2TTj8iklwol2XGfpCaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b6:22:00:e4:d7:69:f5:fd:aa:55:80:b2:d4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Validity
Not Before: Nov 11 05:00:47 2025 GMT
Not After : Nov 12 05:00:47 2025 GMT
Subject: CN=a6d7a8b90790dc5855d5772352590eff10c6ec45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:72:9a:fb:15:8d:83:01:57:5c:ac:a8:aa:47:
bc:e7:9a:52:5c:aa:ad:2d:80:86:3f:c0:28:6b:56:
a3:39:af:5e:96:18:92:78:05:cb:11:82:a5:01:a9:
e2:c2:b2:25:c5:24:fe:3b:41:66:10:2e:10:1e:f7:
88:2d:2d:a9:57:9d:a2:4e:e6:ac:36:3e:96:3a:bd:
31:f2:f8:dc:a6:59:6a:9b:41:af:b3:1c:d4:d3:ce:
64:64:f6:ee:19:ac:31:5e:f1:f6:92:86:46:96:f1:
51:92:ec:12:5b:1c:09:39:a0:8f:6f:98:c9:27:9c:
77:ad:60:bd:0d:64:ed:69:82:a6:a0:c0:df:23:88:
aa:ed:9f:c4:1c:f7:9c:53:e7:c0:4b:15:87:d4:bc:
0b:d9:70:18:c8:74:13:37:b0:40:ad:a1:17:f1:ca:
e3:82:38:c0:71:53:76:06:d6:de:0c:4d:07:67:59:
37:ce:dd:ed:ca:87:55:ce:55:3f:65:96:39:e9:8e:
e4:b9:22:b7:28:7f:4c:63:d1:bc:34:52:b3:34:b5:
21:74:c7:dc:6b:50:b8:aa:74:3d:f2:19:2d:84:a4:
32:cf:cb:d2:55:27:87:ab:7c:7f:27:bb:23:d0:0a:
bf:d8:cf:57:56:8a:46:b1:6a:9b:11:08:1b:2d:56:
63:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:A8:B9:07:90:DC:58:55:D5:77:23:52:59:0E:FF:10:C6:EC:45
X509v3 Authority Key Identifier:
keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:31:ef:70:93:c7:fe:b8:fe:c2:33:69:a1:ab:5b:59:52:63:
6f:f1:12:61:3a:b6:4f:62:6b:f5:db:94:4e:f6:75:3c:3a:4d:
3b:84:aa:12:2e:45:6d:b6:87:ed:98:1c:69:58:4a:8b:9c:13:
72:8d:85:bc:76:f4:14:d1:25:28:4a:c5:23:1c:a8:07:e7:59:
dc:a3:36:fb:1c:73:5a:76:79:c8:10:9e:54:57:d9:da:91:dd:
a0:bd:76:a5:53:c8:a3:82:cd:55:4d:03:8a:63:03:06:9a:a7:
50:57:49:cb:89:c6:25:ed:de:f1:e0:f2:17:87:5e:79:c5:62:
1b:66:7f:b4:a5:45:02:fd:40:6b:c8:63:58:ce:31:77:9e:2d:
3b:2d:e5:f5:15:7e:93:9e:3b:7d:35:5a:c1:77:f5:bd:4e:5c:
62:54:3b:ff:12:fa:a0:5f:4c:69:ea:8a:80:ed:2c:80:fd:b5:
cd:4f:fb:fb:ab:96:5d:12:93:6e:cd:11:a0:45:15:a6:98:40:
21:ae:10:af:ca:4a:fe:18:4f:3b:ef:9f:e2:51:65:4e:99:a0:
99:28:55:c0:00:da:80:c9:80:7f:1d:6b:59:eb:35:d4:e2:dc:
6a:b1:ba:fb:b0:47:c3:0e:f0:1c:c9:d3:6a:64:a3:0e:e3:3e:
b7:bc:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:36:18 2025 by rpki-client