Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File: bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier: iRkFtQFwbGidNFYLVRYF8qVbCeFvwjIr27Q6Jdq6bLM=
Subject key identifier: 53:21:38:DB:45:05:AC:BD:7C:03:63:31:D8:09:12:56:44:5B:B8:7C
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer: /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial: 0196B891344654415274027B631A8F850286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number: 02E2
Signing time: Sat 10 May 2025 05:00:45 +0000
Manifest this update: Sat 10 May 2025 05:00:45 +0000
Manifest next update: Sun 11 May 2025 05:00:45 +0000
Files and hashes: 1: L9Z2nBuUYrQISK7NL514VgxVG3M.roa (hash: EYXtLvAFnvPlybFtRX2gRTh4fJad12faTUZ9Z5qawVM=)
2: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: 27K3xQfY76nGfCQLxPJeYgEMv0wcJk251LxDqligvI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:91:34:46:54:41:52:74:02:7b:63:1a:8f:85:02:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Validity
Not Before: May 10 05:00:45 2025 GMT
Not After : May 11 05:00:45 2025 GMT
Subject: CN=532138db4505acbd7c036331d8091256445bb87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:c9:c4:df:4a:93:74:a6:7a:98:a4:57:f9:
54:99:e2:91:6f:d9:dd:bb:db:3f:d2:8f:ef:02:74:
2c:de:c7:4c:81:a7:d5:62:94:ed:74:36:49:d4:e2:
05:bd:e1:77:36:d2:4a:00:1b:69:86:2e:c6:38:94:
3b:df:9e:01:96:ac:f3:3b:ec:08:11:bb:d5:cc:27:
74:ce:6f:4d:cd:b8:d7:13:34:96:2a:6d:4a:c2:03:
07:fe:73:3e:44:13:1f:a0:18:79:76:6b:96:57:c8:
5f:2f:0c:99:50:55:1a:61:0a:af:c7:0b:0c:47:8b:
c0:1e:3e:b0:1f:c3:62:df:2e:95:58:23:58:88:fd:
f6:9d:1b:b3:f8:03:99:2a:eb:96:ff:2e:75:ac:28:
cd:45:e1:f3:b2:07:7e:5a:ac:34:59:31:97:96:54:
63:54:8c:b8:bc:29:35:08:67:5f:c8:8b:07:2f:4c:
24:37:1d:63:51:bf:8f:61:3c:fd:11:41:53:56:59:
f2:89:e7:12:9c:10:a2:06:4d:91:3d:57:6b:7c:b6:
5a:e5:dd:49:12:d4:0b:05:01:d0:1e:37:7c:19:92:
1f:d7:a4:fe:81:86:b2:aa:07:bf:c7:ee:f0:91:40:
1f:dc:92:06:6d:d8:89:7b:24:a4:68:c8:fd:a3:b0:
3e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:21:38:DB:45:05:AC:BD:7C:03:63:31:D8:09:12:56:44:5B:B8:7C
X509v3 Authority Key Identifier:
keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:98:4c:7a:36:84:b3:c6:39:81:e8:0e:b9:71:43:47:11:61:
13:95:be:3f:74:5f:b4:1f:32:8e:5d:a1:92:14:b6:e3:32:66:
a2:83:bb:ae:0d:a9:c0:f6:de:c1:25:00:2c:d7:49:e4:56:78:
b3:74:ff:61:2a:1e:a5:d8:aa:ac:50:fe:ee:c6:e3:33:a4:ca:
51:d7:ca:6a:b8:84:fb:45:c5:d8:59:da:c9:9a:71:0e:c7:eb:
4a:49:3e:eb:26:ae:de:ca:10:4c:df:c2:a0:ac:37:9b:f9:39:
af:30:62:01:56:e1:2b:d6:d6:7d:80:bb:2c:74:4f:f3:2f:6d:
87:e3:bf:c9:84:5c:26:9d:d3:d6:9b:13:63:72:75:b1:3b:bc:
bf:48:93:86:66:03:f4:3d:29:71:ef:3d:01:f5:8b:94:30:b5:
64:6a:6f:95:41:8b:81:49:e8:ad:e3:6c:40:e3:74:3c:c9:40:
28:3c:2f:d2:01:5e:ce:0e:54:f1:6e:7e:04:8b:0f:02:98:9f:
c9:d2:60:dd:a5:24:48:b0:43:fd:08:29:eb:cf:f4:de:40:8a:
54:bb:ad:5c:bd:a7:1f:49:fb:da:3b:f0:79:19:85:91:45:d1:
09:2b:7b:d3:32:93:41:6d:ac:03:03:ad:bd:ae:a4:4b:f6:41:
c2:af:02:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa4kTRGVEFSdAJ7YxqPhQKGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYzM5MmY4M2UzOGY5MmE1ZDZmM2I3YTY0YjM2ZjhjNGIz
NTA5ZTYwHhcNMjUwNTEwMDUwMDQ1WhcNMjUwNTExMDUwMDQ1WjAzMTEwLwYDVQQD
Eyg1MzIxMzhkYjQ1MDVhY2JkN2MwMzYzMzFkODA5MTI1NjQ0NWJiODdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W3JxN9Kk3SmepikV/lUmeKRb9nd
u9s/0o/vAnQs3sdMgafVYpTtdDZJ1OIFveF3NtJKABtphi7GOJQ7354BlqzzO+wI
EbvVzCd0zm9NzbjXEzSWKm1KwgMH/nM+RBMfoBh5dmuWV8hfLwyZUFUaYQqvxwsM
R4vAHj6wH8Ni3y6VWCNYiP32nRuz+AOZKuuW/y51rCjNReHzsgd+Wqw0WTGXllRj
VIy4vCk1CGdfyIsHL0wkNx1jUb+PYTz9EUFTVlnyiecSnBCiBk2RPVdrfLZa5d1J
EtQLBQHQHjd8GZIf16T+gYayqge/x+7wkUAf3JIGbdiJeySkaMj9o7A+7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMhONtFBay9fANjMdgJElZEW7h8MB8GA1UdIwQY
MBaAFG7Dkvg+OPkqXW87emSzb4xLNQnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEt
OGQxNTU2OWI1YmZlLzEvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9kNmRlOWYtMzBjNi00NmE1LTg0ZDEtOGQxNTU2OWI1YmZl
LzEvYnNPUy1ENDQtU3BkYnp0NlpMTnZqRXMxQ2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5hMejaE
s8Y5gegOuXFDRxFhE5W+P3RftB8yjl2hkhS24zJmooO7rg2pwPbewSUALNdJ5FZ4
s3T/YSoepdiqrFD+7sbjM6TKUdfKariE+0XF2FnayZpxDsfrSkk+6yau3soQTN/C
oKw3m/k5rzBiAVbhK9bWfYC7LHRP8y9th+O/yYRcJp3T1psTY3J1sTu8v0iThmYD
9D0pce89AfWLlDC1ZGpvlUGLgUnoreNsQON0PMlAKDwv0gFezg5U8W5+BIsPApif
ydJg3aUkSLBD/Qgp68/03kCKVLutXL2nH0n72jvweRmFkUXRCSt70zKTQW2sAwOt
va6kS/ZBwq8CLg==
-----END CERTIFICATE-----
Generated at Sat May 10 13:14:44 2025 by rpki-client