Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier: tc2xwp1nns01DXAN1u1CqPiUUjzaj0wwMyRuXHl0EaI=
Subject key identifier: 7A:8D:A2:E8:F2:83:03:B6:50:CB:33:C3:17:B2:55:6D:D9:C2:EF:3F
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 01963FC2BC9CDDE07919D2ECE3A0EF00A31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number: 095E
Signing time: Wed 16 Apr 2025 18:00:48 +0000
Manifest this update: Wed 16 Apr 2025 18:00:48 +0000
Manifest next update: Thu 17 Apr 2025 18:00:48 +0000
Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: fn8t+CvzDe5WXwAO0w5gzAl8jzQmJ2d3KL+9tcAieJk=)
2: Nx5EmJrnCtpu4KBMsJW-JTnb16c.roa (hash: 3QQBoOENO84E31u/R6uijRGk1pgl6EgzpVfuLdsVp8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:bc:9c:dd:e0:79:19:d2:ec:e3:a0:ef:00:a3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Apr 16 18:00:48 2025 GMT
Not After : Apr 17 18:00:48 2025 GMT
Subject: CN=7a8da2e8f28303b650cb33c317b2556dd9c2ef3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:77:98:f9:28:8d:2c:82:33:29:52:af:b4:
59:70:10:e6:8d:41:0a:72:49:fc:1f:36:d7:6a:b2:
23:90:22:da:d7:46:95:42:1a:3d:2a:b4:b8:2c:a4:
7e:d0:66:ca:10:18:db:db:33:7a:52:74:d0:0d:6a:
72:1b:7f:1c:60:a8:6f:a7:47:4d:e4:71:34:b7:9a:
27:39:95:4d:d4:20:6f:91:1c:f1:a2:7e:0e:d7:96:
83:c4:2d:0e:59:cc:f7:47:d3:9d:4a:76:25:51:c1:
6d:bd:fa:f9:00:a1:c8:8a:fe:97:c0:1d:20:2e:46:
b7:4b:e8:7a:f5:08:ed:e5:c9:9d:06:4d:fc:77:32:
40:ad:6c:6f:a9:6e:6a:1c:a7:80:b5:be:e4:b2:4c:
fc:80:72:4f:02:71:53:e3:5b:2e:33:fc:69:73:a9:
c7:59:5e:59:26:de:bb:f2:97:51:8b:ff:d5:f2:97:
40:8f:8c:96:f5:a5:41:6f:10:f9:51:b2:f1:3b:a7:
98:82:f9:1d:77:a0:93:6d:fc:2e:7a:f2:62:7a:e2:
ef:dc:fd:60:ad:a0:68:56:27:5c:2d:df:84:01:c6:
1c:84:df:50:1e:e5:0b:0b:45:09:46:2d:7d:7d:b0:
1f:4d:e9:37:0a:2c:4e:c2:1f:8b:5b:16:7f:e7:c9:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:A2:E8:F2:83:03:B6:50:CB:33:C3:17:B2:55:6D:D9:C2:EF:3F
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4d:6b:1c:b6:52:e0:5f:c7:2e:3f:7b:84:0a:ff:b0:f4:d2:
ca:82:8d:a9:8c:05:66:04:c5:4b:fe:d9:bd:9e:27:f2:2e:8c:
84:02:3d:04:e7:4e:69:cd:e0:fe:95:f1:52:81:02:cf:78:12:
62:cc:a9:27:2a:60:97:3a:4a:58:76:e3:0d:62:b2:c4:f6:13:
63:9e:70:21:26:b6:85:bd:6a:66:a8:30:94:35:f6:8b:a7:d6:
d8:39:12:98:c0:3d:ab:92:e2:84:10:87:37:87:8d:0e:1d:dc:
aa:6b:e6:d8:39:d8:b4:86:69:24:cb:a2:8f:8f:d6:bc:2d:5c:
3e:e4:98:a0:47:29:e2:df:ee:da:1f:2c:dd:ec:e3:15:ac:4e:
d6:a4:51:99:6f:db:37:a5:ff:08:a2:5f:56:a1:c0:d2:06:9f:
39:18:51:13:6b:1b:81:44:60:27:15:f4:3b:82:61:a0:03:a7:
92:a3:75:62:ed:77:f6:6c:26:d7:26:5b:d1:ff:59:9c:26:b4:
c0:76:b4:02:d3:58:a4:21:33:e6:29:1e:68:c2:7f:1f:59:a0:
6b:e8:03:18:f7:6a:1a:4d:7b:98:65:89:c2:d7:8e:d1:57:0f:
d2:92:80:1f:df:e6:9c:67:b4:be:32:1f:1c:3a:64:30:a3:7d:
96:d3:0e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:09:02 2025 by rpki-client