Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
File: b2Wy-ou61lAcfSHvR13ERUE_sos.mft (raw, json)
Hash identifier: RNDwlel8cQE+ql4FggjZ2gpu2pSZPxmsqqts55STXv8=
Subject key identifier: D2:DF:D0:17:70:8F:B8:35:B8:C2:4E:24:8B:D5:86:8F:A0:6C:8A:4F
Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Certificate serial: 01989FDEB51B13CF8774AF9D1BFEB28B820B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 20:00:29 +0000
Manifest this update: Tue 12 Aug 2025 20:00:29 +0000
Manifest next update: Wed 13 Aug 2025 20:00:29 +0000
Files and hashes: 1: 1rm581qxLhd--ZUi0JVR0LPynog.roa (hash: Uo6Qum6Vso45WYow9KfGBMAaa8QdwTLlKBrcDIp7POk=)
2: b2Wy-ou61lAcfSHvR13ERUE_sos.crl (hash: lWIo2nw8zeSnH19IJ08vwgSenRTnpzEOI1EkPi8dKZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:b5:1b:13:cf:87:74:af:9d:1b:fe:b2:8b:82:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Validity
Not Before: Aug 12 20:00:29 2025 GMT
Not After : Aug 13 20:00:29 2025 GMT
Subject: CN=d2dfd017708fb835b8c24e248bd5868fa06c8a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:10:74:17:96:73:2a:db:80:b1:5f:4a:3c:8e:
07:d7:a5:fe:7d:b6:60:68:33:f5:a9:95:4b:e2:fd:
c8:69:18:64:b1:64:73:01:4e:b1:28:f8:1b:61:fb:
11:4e:43:0e:8c:d4:82:f7:53:7d:9d:de:2f:46:8f:
c7:2e:82:e1:3c:69:83:38:38:17:38:e3:6a:4a:58:
13:e9:2d:9b:99:55:4d:6d:3d:73:bf:29:a1:5f:f8:
ac:08:8c:4d:d9:88:02:0a:77:62:e0:b1:ab:f7:89:
f2:de:07:4e:ff:24:6b:b5:9c:03:fd:ff:ac:27:2c:
66:c5:72:23:e7:99:61:d0:b9:b2:ec:a0:cb:60:4f:
83:6c:ea:4a:70:ab:0c:04:42:75:87:26:84:a6:31:
0e:ae:a6:ba:b0:92:b5:15:05:cd:af:88:1d:a1:d4:
90:57:92:e5:2a:03:0d:50:e3:8c:98:03:b4:a7:12:
71:11:94:01:08:d4:46:8e:23:29:65:a4:d0:44:a5:
c4:1f:ce:67:1b:8c:16:00:a2:77:70:e9:5e:9e:7e:
55:6c:75:11:b0:27:dc:05:0b:a9:3d:59:35:01:da:
bb:ed:07:e3:ed:78:ce:a1:2c:06:ab:ac:ef:f7:40:
23:5e:8d:20:85:0c:61:a8:95:71:c2:89:e8:6e:d1:
e4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DF:D0:17:70:8F:B8:35:B8:C2:4E:24:8B:D5:86:8F:A0:6C:8A:4F
X509v3 Authority Key Identifier:
keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e4:38:36:6b:a1:5d:3b:1e:8f:22:71:17:f5:4e:b0:48:a6:
c1:7d:12:14:f6:5d:30:9b:d7:0c:cc:c2:7f:06:21:e6:88:ea:
20:14:6f:7b:54:76:02:fa:41:f4:9e:3c:b2:ac:21:63:46:30:
17:10:ee:53:5a:c4:41:f5:62:3d:bf:28:23:9f:85:10:aa:b9:
52:6d:f7:76:ba:9a:ad:ec:b5:60:b2:fb:1f:bb:1e:94:c8:c3:
65:6e:98:7a:cc:64:c1:1e:11:25:7f:16:88:7a:9f:07:61:e4:
9e:c4:ef:b6:dc:f3:a1:c8:31:e5:3a:65:ed:68:30:98:2f:2f:
d2:f5:b7:f1:1b:59:a0:ea:cd:55:b9:87:73:de:a7:d6:d4:f3:
73:b5:08:ba:85:90:f9:f0:13:bc:96:e9:cf:36:f3:af:78:c6:
28:d6:3c:ac:a2:d9:9e:06:e7:47:48:8c:70:28:76:ce:48:56:
54:38:b0:91:9f:f4:b0:86:75:66:b3:85:bc:e0:1f:e8:34:32:
54:97:7c:62:73:e9:a7:e3:9c:0d:15:d6:e3:1e:93:c5:cb:7e:
4f:d8:2d:58:66:f7:1a:af:52:f7:33:1f:8a:fc:42:7f:08:01:
2a:2a:d6:bf:e4:af:2c:36:17:47:0f:fa:4a:9c:a5:a5:bf:75:
24:80:64:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:30:40 2025 by rpki-client