Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier: IC7fSqSI6f28KJCqayuWFTMBQtpdeqFMxcy2jE5uTQE=
Subject key identifier: DD:FD:22:AD:D7:35:1F:82:C8:BB:72:89:E4:E9:44:CB:F4:ED:18:F9
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 0197CBDE78A0C529E953C1434D6D9A819FFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number: 0A2B
Signing time: Wed 02 Jul 2025 16:00:44 +0000
Manifest this update: Wed 02 Jul 2025 16:00:44 +0000
Manifest next update: Thu 03 Jul 2025 16:00:44 +0000
Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: yfTwJ+VINuWCntro5iqup0r2zjhhOCVnOqBz6lwTmJE=)
2: Nx5EmJrnCtpu4KBMsJW-JTnb16c.roa (hash: 3QQBoOENO84E31u/R6uijRGk1pgl6EgzpVfuLdsVp8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:de:78:a0:c5:29:e9:53:c1:43:4d:6d:9a:81:9f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Jul 2 16:00:44 2025 GMT
Not After : Jul 3 16:00:44 2025 GMT
Subject: CN=ddfd22add7351f82c8bb7289e4e944cbf4ed18f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:92:82:f7:86:67:d6:25:15:8b:52:b9:4d:83:
1d:5c:30:2f:0c:80:a5:44:ed:45:74:46:2e:18:cc:
e0:86:e4:6e:1e:6e:12:3b:97:ec:cb:90:eb:75:f9:
0c:7f:ba:03:f7:32:b5:17:fc:54:85:62:57:ef:2f:
8a:68:d6:79:2c:62:71:35:3d:e2:ad:87:04:f6:e5:
79:fd:23:a7:e3:92:5e:c2:f7:3e:ba:96:be:85:64:
1e:49:20:29:c4:93:da:f3:67:f1:6f:15:8f:1c:b7:
1d:f5:03:85:f1:1e:3b:fa:d0:91:9f:ee:35:01:15:
64:69:d9:db:26:0a:f4:2d:40:a8:1a:99:d2:be:9a:
14:f4:72:92:4c:f1:a7:4e:35:89:c5:0a:ab:25:db:
8d:55:c5:e6:a4:f9:1b:99:55:81:48:d8:08:8b:96:
3e:fa:4b:f8:6a:cc:85:10:ea:5b:5b:ec:61:96:8b:
f0:44:d4:15:bf:99:7f:da:04:b8:36:27:57:11:06:
25:93:ab:c7:a4:2a:84:07:e6:78:af:18:ca:fc:82:
f9:cc:7b:bf:77:b2:16:01:6d:b3:79:52:cb:a6:6c:
d6:84:0f:46:ee:64:88:86:dc:78:93:68:c2:d4:1a:
24:75:90:87:6a:f4:ec:31:6d:c4:df:b7:eb:22:76:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:22:AD:D7:35:1F:82:C8:BB:72:89:E4:E9:44:CB:F4:ED:18:F9
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:19:48:c2:1b:83:c2:67:44:f0:a1:72:42:be:0b:fa:ca:9e:
ce:75:b8:9b:c5:33:13:c8:30:dd:09:53:4f:1a:f8:73:77:e8:
34:06:1a:75:a8:2f:d3:66:11:2e:5a:e2:4f:8a:8e:2b:c5:0c:
f9:d4:bf:a0:8f:78:31:09:d7:d8:d1:19:01:25:dd:6e:08:6e:
89:f3:8a:0b:d0:b0:46:55:c6:56:cf:79:98:79:de:02:59:5d:
71:e3:54:89:72:a3:6f:7a:eb:77:40:86:78:ae:bd:e4:51:90:
72:e3:8d:59:0b:2b:1f:04:21:2f:33:09:30:3f:6a:70:d4:14:
49:8c:85:49:0e:2a:57:56:b9:05:88:7e:68:ed:59:e2:5a:80:
c1:99:7e:e2:76:bb:1c:f1:34:9a:8a:fe:f3:43:d0:dc:24:a0:
3b:30:54:16:71:59:17:6d:e0:b5:41:5a:8f:d0:38:b0:a3:68:
50:67:41:cf:9f:4e:78:6f:de:7b:07:09:e1:1a:fc:fb:61:9e:
30:b4:78:5b:02:36:ca:b8:20:78:ea:ee:63:82:79:69:b3:d3:
65:c2:14:b3:08:c6:33:e6:8a:df:2a:51:d5:26:47:77:70:f1:
c4:1d:00:53:22:51:72:b5:5a:5a:64:a9:b1:b8:77:9e:47:cd:
22:05:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:40:32 2025 by rpki-client