Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
File: b2Wy-ou61lAcfSHvR13ERUE_sos.mft (raw, json)
Hash identifier: xOuazIGbkEW8yoM37DIDCr9cIqXkrQyDqtlyt4sAmBg=
Subject key identifier: 4C:5E:2D:1E:CC:61:94:55:DA:38:A1:CC:6F:ED:D4:A3:9D:99:F7:B7
Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Certificate serial: 019A5074A0A28946152383A55741F35DCB70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 20:00:11 +0000
Manifest this update: Tue 04 Nov 2025 20:00:11 +0000
Manifest next update: Wed 05 Nov 2025 20:00:11 +0000
Files and hashes: 1: 1rm581qxLhd--ZUi0JVR0LPynog.roa (hash: Uo6Qum6Vso45WYow9KfGBMAaa8QdwTLlKBrcDIp7POk=)
2: b2Wy-ou61lAcfSHvR13ERUE_sos.crl (hash: 7tVlQJKtlBscBHS+VorE6ScLHsircl+lgMIIHKEgmbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a0:a2:89:46:15:23:83:a5:57:41:f3:5d:cb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Validity
Not Before: Nov 4 20:00:11 2025 GMT
Not After : Nov 5 20:00:11 2025 GMT
Subject: CN=4c5e2d1ecc619455da38a1cc6fedd4a39d99f7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:dd:38:64:67:dc:6d:03:c6:b8:f1:9a:f7:
eb:a9:3c:a3:63:b0:35:98:5a:fc:11:3d:48:b3:3e:
f8:50:28:e1:b0:bd:ff:67:c9:cb:9c:a9:93:47:bd:
5f:e2:aa:30:2d:d7:94:f0:a7:58:66:0b:c6:99:8f:
a2:cc:26:93:b1:c3:4d:40:cc:7d:cb:20:fb:3f:d8:
6b:b9:5f:4c:5e:d5:50:66:5b:d3:ae:c2:12:e8:94:
d7:28:91:b2:16:63:86:77:9c:45:f9:1e:ae:6d:68:
28:f6:ee:39:9b:d7:a7:30:39:5a:5a:a6:79:56:2d:
07:ed:99:b1:b5:7c:27:f8:9e:88:49:fa:fa:63:20:
cc:d5:68:52:77:04:e9:81:4f:a7:ef:88:11:51:ad:
df:88:68:c4:93:d8:f7:af:36:ae:f4:60:38:91:47:
4d:35:3f:3e:da:cb:63:7a:3c:65:ea:c3:e2:aa:03:
37:4f:c8:b7:1e:03:48:64:3b:02:f2:b9:7c:e0:e3:
67:fc:26:d4:45:6b:bb:64:de:9e:0c:ff:97:a1:86:
02:09:29:ce:08:8c:60:cb:6e:01:4e:59:82:61:47:
74:ed:7c:7d:17:03:a1:b1:3a:92:34:91:f7:d0:c7:
56:61:57:1c:18:b5:cc:f6:09:26:fc:a9:22:7c:13:
8d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:2D:1E:CC:61:94:55:DA:38:A1:CC:6F:ED:D4:A3:9D:99:F7:B7
X509v3 Authority Key Identifier:
keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d5:af:8e:bb:08:1d:bf:4d:22:7d:3d:79:79:7d:58:d4:6c:
9e:60:4a:82:42:92:04:a6:4f:5e:d6:38:c2:c4:ab:a5:44:1f:
f8:ad:66:66:83:71:fb:fa:cb:dd:e4:20:ee:4d:a0:5c:ea:60:
04:da:f4:d7:34:bf:99:59:35:ea:82:17:00:67:93:ab:42:18:
ff:d1:41:28:0f:fd:d8:93:dd:1d:ad:b1:9a:64:66:8b:18:66:
24:c4:bc:aa:e2:ac:ae:1f:96:f8:3c:85:40:bc:5e:53:86:e9:
6c:ba:f1:0e:81:35:d1:84:e4:7c:26:e4:96:ba:db:05:cb:b1:
0d:2e:2c:2b:f3:12:5d:17:d0:d2:0e:43:0d:6a:b0:a2:66:db:
27:36:54:ac:20:2a:da:9b:f9:34:20:7c:eb:68:91:ce:28:4d:
d0:bf:18:1e:0d:7d:e0:06:16:91:75:4d:be:a1:0d:51:3e:5f:
1a:b7:3c:81:50:ed:31:ef:d8:a9:c0:42:29:cb:da:5f:0e:fd:
9e:70:be:5d:fe:20:38:a5:ed:58:60:25:d2:e7:06:74:07:9e:
b9:37:22:9d:e2:64:90:6c:01:59:c5:16:6c:fc:e4:3f:31:b8:
98:12:b8:be:ff:22:43:31:40:61:8f:e2:e5:85:d4:96:70:58:
a2:e4:6c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:24:12 2025 by rpki-client