Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
File: b2Wy-ou61lAcfSHvR13ERUE_sos.mft (raw, json)
Hash identifier: JHi2GeFvTLe9GuJ1AAOszjGz1wqzhu0ddCAlKGP75So=
Subject key identifier: 6A:AF:80:D5:28:23:09:28:07:4F:65:5C:39:F0:03:38:15:85:1F:A6
Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Certificate serial: 0199FB7CDD94D52E6533BDABA6437DE02463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 08:01:28 +0000
Manifest this update: Sun 19 Oct 2025 08:01:28 +0000
Manifest next update: Mon 20 Oct 2025 08:01:28 +0000
Files and hashes: 1: 1rm581qxLhd--ZUi0JVR0LPynog.roa (hash: Uo6Qum6Vso45WYow9KfGBMAaa8QdwTLlKBrcDIp7POk=)
2: b2Wy-ou61lAcfSHvR13ERUE_sos.crl (hash: NFZbToClLBvUIThv7OxnyVM6vd6Aur3Yy7lSQ035/OM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:dd:94:d5:2e:65:33:bd:ab:a6:43:7d:e0:24:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Validity
Not Before: Oct 19 08:01:28 2025 GMT
Not After : Oct 20 08:01:28 2025 GMT
Subject: CN=6aaf80d528230928074f655c39f0033815851fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:36:71:f3:e6:6d:9d:c0:66:9f:3f:0c:b5:
09:8a:3e:48:41:b6:62:37:08:f2:76:ac:90:11:f4:
61:5c:62:57:d7:f8:6a:46:69:63:fc:d4:31:0a:69:
e7:85:6f:ed:39:df:42:4d:ba:96:00:2f:e9:6a:96:
e2:3d:fd:31:aa:18:0f:9d:63:4d:c4:cd:77:dc:19:
f4:f3:d5:db:78:e0:05:99:43:24:6d:04:6c:8e:3a:
c1:d7:31:be:55:e5:36:b6:f3:1f:df:49:89:07:6c:
fe:bb:62:e8:d0:65:2d:c3:2a:a5:18:f5:56:43:e6:
79:61:0d:7b:7a:a9:a7:50:80:81:a6:52:fb:42:e2:
c4:9f:48:d4:93:a0:21:95:ca:94:88:4e:82:3a:50:
44:de:ce:71:79:53:dd:50:36:cf:1e:19:ed:20:d2:
ba:d8:39:82:33:82:04:cf:e1:1d:0f:b3:25:10:72:
7f:d8:99:71:b2:b3:04:8f:44:be:d0:0a:a7:9b:b9:
e9:cb:5d:90:74:91:49:41:30:38:46:13:c7:4a:27:
e2:29:9f:e2:2d:36:d9:c8:5a:2e:b5:b8:fb:ee:36:
85:e5:1e:4e:f7:3f:30:06:8c:18:88:cd:d1:0c:d5:
b8:28:13:54:fb:ec:c2:55:eb:04:51:5b:1e:87:b1:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AF:80:D5:28:23:09:28:07:4F:65:5C:39:F0:03:38:15:85:1F:A6
X509v3 Authority Key Identifier:
keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:25:11:02:02:9e:84:79:3e:6b:46:ba:80:b8:64:8d:14:d9:
11:85:8c:b2:2b:a2:50:27:3e:59:c9:ee:70:a3:fb:3e:b1:99:
c0:82:6f:79:f9:81:5e:cf:cf:07:8c:6f:0a:66:9e:a4:a9:46:
b4:a4:45:ec:ea:cd:89:18:b8:f6:a4:d6:12:c2:b7:00:51:2d:
64:8d:a2:59:56:f9:4b:bd:e1:f6:fb:41:50:a7:bf:f6:0a:2b:
cd:d6:41:f0:16:d5:fe:a9:2e:3d:9d:b1:9c:92:ad:98:0b:20:
55:97:72:2b:ed:94:8b:8d:ae:cd:4b:9f:e5:42:a1:9a:b4:91:
31:b1:5b:7b:2b:26:6f:22:8c:47:d2:aa:62:75:d3:77:29:99:
51:d4:d4:cc:f0:d7:8a:ae:13:6a:c9:31:6d:9d:3b:29:52:9b:
9e:88:54:ab:c1:f2:41:48:6a:39:45:f8:53:b4:96:d8:5a:a2:
b4:00:94:d0:9e:c9:47:d2:f7:1f:17:c6:4b:45:8e:7c:66:73:
6a:0c:8f:5f:80:33:21:41:d7:69:b8:f1:b1:57:ea:57:b1:88:
6a:ab:4c:bd:20:6b:39:fd:08:b2:01:ef:a0:9e:94:1f:6c:98:
1a:ca:f9:cb:27:af:e3:95:39:0c:33:bb:26:33:7a:c5:ec:a2:
62:4a:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:47 2025 by rpki-client