Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier: C2S1C2EUOxMPJVrf/47fcajsWl5+SaAxvn/Xdbkn5mc=
Subject key identifier: D9:1B:25:58:16:52:BF:FE:25:19:8E:FB:33:D0:8B:87:54:C2:47:8B
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 0199FFC8BDB5813F75868F2F8CB659AD5BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number: 0B4F
Signing time: Mon 20 Oct 2025 04:02:49 +0000
Manifest this update: Mon 20 Oct 2025 04:02:49 +0000
Manifest next update: Tue 21 Oct 2025 04:02:49 +0000
Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: Ygl+3z7MCKPG3T3rVpFjTDz45AiN7BH7O+Ia9VKJvbQ=)
2: Nx5EmJrnCtpu4KBMsJW-JTnb16c.roa (hash: 3QQBoOENO84E31u/R6uijRGk1pgl6EgzpVfuLdsVp8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:bd:b5:81:3f:75:86:8f:2f:8c:b6:59:ad:5b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Oct 20 04:02:49 2025 GMT
Not After : Oct 21 04:02:49 2025 GMT
Subject: CN=d91b25581652bffe25198efb33d08b8754c2478b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:07:78:56:be:ac:43:77:ec:59:a8:a1:c2:8d:
cc:85:0c:d3:b4:82:0d:f7:71:22:e9:88:8f:61:01:
ec:b8:f4:a7:a0:5c:2f:b9:b5:d5:31:4e:14:42:fb:
6a:fe:f5:6f:37:28:a8:31:d1:6e:38:92:11:03:e1:
41:65:e6:ca:e4:40:e8:93:16:9c:a9:b3:6b:ca:0a:
91:45:40:5a:08:57:36:39:46:b8:c2:7f:3e:84:63:
39:a0:3e:ee:6f:31:82:53:4b:e9:15:fa:6e:a6:62:
94:32:4e:b2:5a:70:2f:1b:74:e0:78:66:5a:3d:c0:
f8:1a:21:70:87:2f:60:ac:ec:02:e4:0b:7a:7d:10:
01:7d:b7:85:63:03:0a:53:2a:99:28:e0:4d:5c:5e:
d0:99:b9:36:ef:6c:33:c2:c7:e9:9f:58:cb:e9:de:
bf:c5:7b:17:c1:31:54:17:82:7d:58:08:06:33:8d:
e1:c9:4d:e4:c9:c7:df:7f:05:2a:f6:84:46:ba:06:
fb:e4:5b:44:97:4e:8f:65:6a:26:0e:e7:7b:8f:76:
d6:cd:c8:64:f0:9b:6d:69:e2:75:72:65:30:39:dd:
a3:34:c9:79:20:7b:03:9f:4e:83:76:cc:55:2c:f3:
17:7c:08:73:20:cd:90:ff:bf:84:03:32:92:9f:d4:
9d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1B:25:58:16:52:BF:FE:25:19:8E:FB:33:D0:8B:87:54:C2:47:8B
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:55:47:fe:ec:49:ac:f7:63:16:a5:b5:cc:92:cc:de:6a:be:
e6:c2:c5:c5:4e:1b:42:59:dd:a7:73:2c:3a:46:e2:d7:ba:e9:
25:02:c0:76:76:36:09:48:4b:9e:8e:4f:ab:7c:42:b5:f6:77:
db:f2:80:d0:01:0c:fa:55:4d:1f:21:2f:95:0b:ca:b4:db:65:
96:c9:cd:4f:ec:96:33:3f:9f:50:06:5a:a2:50:f2:10:a6:c1:
2a:0f:c6:5c:2f:cc:8a:2a:03:9f:01:2e:58:67:f8:1a:53:18:
30:ff:70:7b:87:a0:c7:f2:ba:fc:9c:2e:73:ab:18:a9:bd:79:
33:40:73:7e:26:6a:35:6f:d0:10:4d:15:d9:9c:9a:cd:b2:38:
f4:23:4d:51:74:55:14:47:f5:2b:d8:28:36:28:09:2d:92:9a:
ab:99:56:ae:81:9d:dd:47:5c:42:e7:cd:b1:64:23:67:cf:0e:
1e:d4:90:00:6b:c2:ea:35:a8:f3:52:53:ee:3d:bc:44:7e:70:
68:8a:46:73:8a:24:d7:e9:c9:66:6c:1e:49:82:78:fc:62:22:
b6:6e:b7:28:57:08:98:dd:85:91:20:9e:af:2b:d6:e0:eb:7b:
d8:04:f1:2c:ed:61:bf:f2:0c:f9:f7:0a:2a:dd:db:03:82:41:
b7:c4:e1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:23 2025 by rpki-client