Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File: bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier: uNM+AkOouvUnxaIdAzr+oQ7rzUNpOtanzZbGA7F2lt8=
Subject key identifier: 16:85:C8:A8:B5:FD:F2:76:B6:80:EE:D5:63:9B:2C:43:2C:FA:66:7E
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer: /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial: 019A51BF01E1AE787BD6646C24CDF5002ED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number: 04BF
Signing time: Wed 05 Nov 2025 02:01:03 +0000
Manifest this update: Wed 05 Nov 2025 02:01:03 +0000
Manifest next update: Thu 06 Nov 2025 02:01:03 +0000
Files and hashes: 1: L9Z2nBuUYrQISK7NL514VgxVG3M.roa (hash: EYXtLvAFnvPlybFtRX2gRTh4fJad12faTUZ9Z5qawVM=)
2: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: zw4OyRx5duTHQBLL9ayeLn3hdpqwmonJKZCKLJTLg8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:bf:01:e1:ae:78:7b:d6:64:6c:24:cd:f5:00:2e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Validity
Not Before: Nov 5 02:01:03 2025 GMT
Not After : Nov 6 02:01:03 2025 GMT
Subject: CN=1685c8a8b5fdf276b680eed5639b2c432cfa667e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:e6:ff:c6:ad:e8:59:2c:3d:df:51:b8:4a:
e6:e6:82:ad:95:58:a7:86:85:6f:a5:df:a2:e6:22:
aa:a9:42:e8:e7:62:08:00:eb:52:87:68:7e:8d:4d:
0e:00:d7:bf:b9:4e:71:63:51:19:39:bc:19:5b:9c:
be:18:c8:8d:d1:59:db:88:ec:21:d4:40:e6:b3:3c:
4b:18:3e:43:4d:7c:9f:55:f0:72:fe:22:62:6a:9b:
fd:62:7a:bc:b3:6b:ea:71:0a:40:52:8d:35:56:b1:
ef:73:8d:e3:91:a5:a4:01:e1:55:1a:6a:82:de:f0:
92:9e:a0:d2:cd:71:1f:81:a0:84:76:37:b8:ce:43:
64:6e:3a:b7:bd:34:3c:94:e2:dd:41:03:c5:8d:6e:
ca:e0:60:8b:0d:d3:d9:6c:ba:ee:59:ee:bb:de:94:
5b:bd:d5:10:81:45:4c:94:3f:3f:04:f1:2f:09:b3:
59:3a:91:89:95:c4:29:f6:4b:5e:46:b8:43:7e:6e:
63:c9:26:1d:5a:ec:9e:ba:59:e5:fe:3c:8e:dd:23:
b8:48:21:6d:ca:5d:0d:68:5d:57:8e:1f:98:16:64:
58:56:f9:d5:9e:e1:72:13:9a:09:a9:89:ee:43:7c:
18:3a:04:36:bf:1f:ad:9c:95:1a:84:7f:09:cc:6d:
5c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:85:C8:A8:B5:FD:F2:76:B6:80:EE:D5:63:9B:2C:43:2C:FA:66:7E
X509v3 Authority Key Identifier:
keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8d:d1:64:93:40:c3:fd:39:02:84:a4:0d:6a:40:95:39:8d:
c6:b8:b2:2e:14:0f:7b:2d:c4:d5:a6:78:e9:14:35:01:28:e0:
eb:f8:a5:96:e5:e5:a2:85:5b:6c:51:3c:ed:5d:21:68:ed:ad:
ce:75:05:cd:0d:09:62:67:66:e6:64:a0:64:14:70:2e:83:f6:
62:bd:2d:c5:6b:4d:ad:19:af:2b:5a:e1:9d:20:9b:69:9c:56:
27:c6:3f:b3:eb:77:1b:a5:46:c2:c0:72:93:3c:61:64:82:b5:
a5:1e:fa:c7:e2:71:38:45:55:66:3b:9d:4b:91:44:41:26:08:
c2:1b:34:f3:7e:29:9d:3c:e6:9f:1c:3a:2f:bc:14:5a:5f:cc:
70:d2:a0:3d:c3:6e:b4:8c:01:2b:06:46:40:ea:a1:02:95:c2:
99:cb:3f:7e:a3:92:33:d8:48:b8:5c:56:8c:67:f1:a8:62:03:
67:68:a2:c6:b3:88:49:13:3e:a1:50:f8:b7:51:1b:fe:11:18:
25:c5:d2:a2:1e:42:6e:9d:6b:07:c7:bf:a8:67:1d:5f:88:02:
a6:c1:ab:4c:c9:76:65:9b:db:bc:8a:25:80:27:fc:80:27:1d:
4a:4e:ab:74:19:a0:c7:c5:9b:ab:8e:d6:a1:37:c1:3b:8e:54:
31:f5:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:04:03 2025 by rpki-client