Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier: zHgV098FNghQ+r6B/ArbJN4OBCF/fuq0LnuLv2aLWi4=
Subject key identifier: 21:4E:D0:81:01:9F:30:59:A2:7A:69:9E:18:4A:1D:89:62:71:16:AD
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 0196C8E008726AFFB721C55B8CE94D40D58F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number: 09A5
Signing time: Tue 13 May 2025 09:00:47 +0000
Manifest this update: Tue 13 May 2025 09:00:47 +0000
Manifest next update: Wed 14 May 2025 09:00:47 +0000
Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: xahMVo4OVCLhqwcDJkzH5fWqhcCg7jVl7e3xZ1155U4=)
2: Nx5EmJrnCtpu4KBMsJW-JTnb16c.roa (hash: 3QQBoOENO84E31u/R6uijRGk1pgl6EgzpVfuLdsVp8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:e0:08:72:6a:ff:b7:21:c5:5b:8c:e9:4d:40:d5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: May 13 09:00:47 2025 GMT
Not After : May 14 09:00:47 2025 GMT
Subject: CN=214ed081019f3059a27a699e184a1d89627116ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:21:6d:47:92:a6:cb:9b:d0:2e:52:69:69:
c4:6c:17:cb:24:d2:3a:b9:b8:83:9b:2f:2d:28:c0:
44:70:b5:9b:13:da:2c:e3:fc:f1:b5:8d:96:d9:19:
5c:e3:ec:23:96:54:09:8f:82:06:5a:ab:98:db:d8:
b2:32:89:f4:66:30:21:27:d8:d4:e3:86:75:75:80:
71:c4:f4:2d:63:12:25:da:eb:b5:0c:35:57:a0:06:
d5:25:2b:72:5b:a7:1c:af:a4:7e:3c:fc:bb:87:39:
f8:ad:9a:93:89:dc:9f:7d:a2:d1:a7:c6:7d:1a:5d:
55:5f:71:13:a8:67:f2:df:c4:fe:fe:96:0f:79:84:
8d:39:8a:67:1e:a3:e9:3b:64:c9:7f:f3:b9:08:ea:
49:55:e8:8e:77:64:63:53:b7:dc:ce:0d:8a:99:c2:
06:a3:fb:e7:d0:08:ad:dd:29:b8:c1:82:cd:35:e6:
a8:15:67:f2:45:ec:26:4b:e1:d7:2e:8a:64:47:7e:
37:29:14:8d:5f:c4:22:6a:9c:7f:52:06:ef:c2:81:
79:ea:3a:b5:91:e5:cc:74:34:74:12:b7:f7:42:21:
99:56:b0:53:71:8f:08:19:47:6b:64:9a:62:a1:e4:
e8:7f:47:38:c8:fc:2c:41:5a:85:27:2a:1f:ef:2f:
bf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4E:D0:81:01:9F:30:59:A2:7A:69:9E:18:4A:1D:89:62:71:16:AD
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:af:57:3c:43:1b:f6:93:df:91:f4:d1:06:30:21:66:05:de:
98:bf:6c:f5:5a:77:b6:2f:92:f9:be:7b:95:f2:d6:e4:3f:4d:
74:e7:12:0b:69:d2:d6:f7:55:1c:bb:0d:f4:54:6e:57:a6:aa:
39:63:48:3c:df:4c:e3:0b:94:e5:35:44:2c:75:41:dd:ef:4d:
bb:41:f9:07:7c:cb:97:c1:0d:7c:c2:cf:f9:74:ae:5f:7f:fd:
e3:d6:91:b9:ca:32:4d:19:e1:67:8c:fb:9c:b5:4c:96:36:7f:
de:78:3c:97:cc:ba:54:2b:07:58:1e:db:0c:b9:a7:36:50:6b:
88:b4:66:5d:cf:be:66:6f:b8:90:24:ed:f0:89:dd:21:9d:f7:
e0:6f:01:0b:31:d2:5a:9f:c0:bb:de:17:12:09:b5:fe:57:36:
66:e0:95:81:e2:21:da:d5:cd:5d:69:de:b4:04:ab:52:5c:46:
f2:19:61:e4:8a:ba:37:a5:3b:35:e3:2a:7e:c6:0b:72:01:0d:
0e:8c:1b:75:3e:ec:11:3b:96:fe:00:a0:68:a8:cf:70:cd:b3:
cf:21:c8:8b:c1:6d:dd:a2:02:cf:ac:60:1e:e2:e3:aa:3d:12:
e2:1f:3d:9c:ac:e0:92:99:1f:d2:c5:f1:bd:c7:79:ab:f2:b6:
90:7f:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 12:13:58 2025 by rpki-client