Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier: D3SgHBWbUov67HTplnqYWJgKcvKOnV2eGH0ESbhx1gU=
Subject key identifier: 54:F8:3D:0E:8E:E0:80:5C:9A:5B:35:9C:5B:99:C2:56:03:24:4B:E3
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 0198D65FDF4603729800D7B49A1AEE5A56E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number: 0AB5
Signing time: Sat 23 Aug 2025 10:01:03 +0000
Manifest this update: Sat 23 Aug 2025 10:01:03 +0000
Manifest next update: Sun 24 Aug 2025 10:01:03 +0000
Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: SzvJQDQtFEK1YGG1KGTb+cZnmK0/FJtrvbZe3WhePLU=)
2: Nx5EmJrnCtpu4KBMsJW-JTnb16c.roa (hash: 3QQBoOENO84E31u/R6uijRGk1pgl6EgzpVfuLdsVp8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:df:46:03:72:98:00:d7:b4:9a:1a:ee:5a:56:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Aug 23 10:01:03 2025 GMT
Not After : Aug 24 10:01:03 2025 GMT
Subject: CN=54f83d0e8ee0805c9a5b359c5b99c25603244be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:73:1f:08:b1:c4:ce:15:a2:90:f8:73:f3:
74:da:e6:5a:48:ff:c5:1b:41:19:8c:3c:49:48:79:
7d:30:85:43:08:d5:22:b4:c7:23:3a:f1:e4:e2:2d:
52:cf:31:3f:fd:16:70:5a:b4:35:48:6e:9a:9b:9e:
97:ba:1e:3c:0d:49:d3:3c:27:24:d7:62:01:2b:68:
74:fa:93:6d:da:54:65:36:8b:5e:d6:dc:2a:9e:5f:
9f:14:c8:91:72:61:f9:9d:1b:ff:5d:fe:e7:73:d7:
61:57:39:f0:22:a6:ec:8c:ad:23:43:79:40:db:53:
87:ff:92:15:32:e6:7d:da:16:c3:52:7b:e7:b3:be:
7b:28:db:f4:c6:dd:4b:fa:25:f5:23:6f:7e:95:ed:
89:98:42:31:56:5a:63:2c:c5:ef:a7:8e:52:de:67:
23:0e:e2:34:8b:9b:58:c5:00:31:77:3a:bf:24:33:
a0:b1:31:4e:dc:ad:b4:1f:c5:a7:dd:ca:0f:54:6c:
7f:b6:6a:71:fe:f5:7c:c1:78:da:f3:2f:e9:f0:0a:
5c:c2:e7:cd:af:37:c0:d7:69:ed:4b:b0:23:86:0b:
da:d6:47:55:8a:00:3f:f6:58:3a:81:f8:29:fe:78:
e3:36:37:b5:11:5a:21:b6:3c:d2:7f:f0:ad:8c:59:
43:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F8:3D:0E:8E:E0:80:5C:9A:5B:35:9C:5B:99:C2:56:03:24:4B:E3
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:fd:26:7b:30:6f:f5:5a:f1:ad:f1:79:e9:2d:b3:8d:50:ba:
b9:63:52:bb:96:22:6b:14:b3:96:94:9a:a9:b9:1f:d7:60:f3:
f1:d7:16:2f:6e:c9:e7:62:d0:dc:b9:90:71:77:fb:ec:8d:ac:
0c:10:fe:90:fd:80:60:3f:ae:62:7f:f4:91:1e:09:d2:a3:e0:
bb:26:f8:e1:1f:09:63:bd:5e:72:1f:06:b7:c0:90:69:03:27:
ca:03:97:2a:c7:67:d8:e4:59:ca:e7:0c:f1:c5:67:ae:b6:04:
a5:a2:cd:11:17:ad:b6:ef:8f:2f:93:45:c2:32:eb:40:04:d0:
d9:f2:bb:ca:74:61:8f:6b:07:c7:b1:c3:f3:7f:56:f3:89:9e:
a5:9b:8f:60:01:84:25:fc:92:6c:91:e7:5a:42:4d:9b:b8:2e:
dc:9e:81:6d:5f:c7:f5:44:80:01:ac:9b:8a:88:3a:70:94:87:
fd:58:df:bb:a1:09:45:df:fd:a1:e0:c6:83:dc:8a:4e:35:6a:
26:9a:7a:d3:60:98:e8:a1:91:4c:32:0e:bd:b6:04:2d:eb:91:
96:e3:04:12:fc:2b:17:e0:2b:38:f9:83:87:08:39:83:64:02:
08:ff:90:a9:53:c8:5c:fa:76:17:e2:5f:46:85:e5:79:0f:a2:
63:a6:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:08 2025 by rpki-client