Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier: +K4UFrv4vFBsyEuSotHGcD7Aj2iYxS1DtH8mRfjsmFc=
Subject key identifier: 52:31:A9:DB:03:95:B9:7B:30:F8:9B:1A:4D:F4:D1:70:0C:D3:D8:5E
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 0194BB970BE6B0C5D77707FAEE15B0BCF26B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number: 0895
Signing time: Fri 31 Jan 2025 09:00:25 +0000
Manifest this update: Fri 31 Jan 2025 09:00:25 +0000
Manifest next update: Sat 01 Feb 2025 09:00:25 +0000
Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: d4hJmKVJeqc4Hu9JhswY4Sh8cW2U+vAIrQ5FlfDtUx4=)
2: Nx5EmJrnCtpu4KBMsJW-JTnb16c.roa (hash: 3QQBoOENO84E31u/R6uijRGk1pgl6EgzpVfuLdsVp8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 09:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:97:0b:e6:b0:c5:d7:77:07:fa:ee:15:b0:bc:f2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Jan 31 09:00:25 2025 GMT
Not After : Feb 1 09:00:25 2025 GMT
Subject: CN=5231a9db0395b97b30f89b1a4df4d1700cd3d85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:3a:2a:4a:1d:2f:88:65:90:b3:ff:90:67:
6a:b6:cc:22:8a:a7:74:19:f5:19:51:7d:36:c3:ed:
16:8d:93:a9:5e:f0:6c:41:16:06:22:32:c1:88:0a:
d6:26:f3:a2:55:ff:82:d3:f8:f0:07:d6:03:c0:a9:
dc:fc:98:c5:01:37:24:ad:91:65:fd:e8:65:fe:60:
a6:07:3e:8f:3e:e6:d2:1c:4a:18:07:43:01:bb:54:
ef:84:fb:02:4c:ca:8c:65:ea:fa:a0:a9:ed:d6:11:
01:2a:86:32:c2:99:f2:51:c9:40:4e:e4:fc:11:26:
cb:cc:43:4a:77:e4:1d:e2:92:6f:ee:30:27:5c:e3:
45:40:49:1d:4f:a4:d6:13:db:6f:f4:e0:ca:5a:e4:
8a:b7:cf:c4:42:83:2c:50:3b:b5:06:c0:58:ac:3e:
6a:61:e1:11:f7:e1:cf:3b:f4:2e:33:84:d9:21:a4:
dd:7b:7b:3a:c4:53:d9:45:f7:d0:3a:e5:1c:7a:a4:
70:0d:e9:78:9d:c5:a5:93:e9:45:42:01:b3:39:67:
ad:2b:85:d5:7c:3f:6f:ef:a9:c3:4d:0a:68:08:e6:
28:3d:0f:b5:bd:49:bf:81:d7:f9:2f:ab:87:ab:7b:
ec:60:71:ad:21:d3:f2:d5:de:51:4e:05:ce:2d:db:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:31:A9:DB:03:95:B9:7B:30:F8:9B:1A:4D:F4:D1:70:0C:D3:D8:5E
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e3:0a:79:74:a7:bb:1d:8c:f3:a9:5e:c9:0d:a6:3c:8e:fd:
bb:c4:c9:6e:1e:21:76:89:9c:31:b1:00:de:52:4e:b6:9a:15:
68:8f:c8:29:a6:43:fc:2a:b0:46:51:c8:3f:a8:a7:4b:a7:dc:
89:ae:e5:b7:36:75:3d:63:7a:1e:ae:c9:c1:38:b5:33:a0:8b:
0c:91:83:79:bb:a0:0f:ec:63:44:b8:70:f8:09:88:62:6d:5a:
2c:5e:cb:ce:aa:d3:dd:5e:07:75:c8:b8:de:ed:04:1c:e9:08:
97:27:0c:83:e8:d8:cc:52:6a:15:86:ad:87:04:79:65:a6:3d:
65:a3:2c:7d:12:57:10:8f:ee:9f:b4:64:42:10:c1:19:78:d3:
ae:cd:fc:be:f3:2c:db:7f:25:94:01:9f:e6:01:93:86:44:b9:
ed:d6:08:de:c6:d0:12:50:37:ad:61:1b:9e:50:4f:0a:55:82:
b1:36:60:59:64:f8:69:51:7d:c1:46:21:f4:4c:c4:72:8d:e7:
ea:b6:61:26:5e:13:8d:b8:87:9a:15:c4:42:d0:14:0c:a6:17:
c6:5a:6f:40:6d:03:36:9f:73:b6:4c:49:bd:8c:18:df:c6:af:
19:cf:69:6d:5f:83:77:84:f8:42:d7:b0:66:cb:17:fb:71:b4:
6a:ec:57:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7lwvmsMXXdwf67hWwvPJrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MmIxZWI2MTAwYzBjYTU2NDQ0MzcwNThkNDJmNGZkNzIy
MzM2ODEwHhcNMjUwMTMxMDkwMDI1WhcNMjUwMjAxMDkwMDI1WjAzMTEwLwYDVQQD
Eyg1MjMxYTlkYjAzOTViOTdiMzBmODliMWE0ZGY0ZDE3MDBjZDNkODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oc6KkodL4hlkLP/kGdqtswiiqd0
GfUZUX02w+0WjZOpXvBsQRYGIjLBiArWJvOiVf+C0/jwB9YDwKnc/JjFATckrZFl
/ehl/mCmBz6PPubSHEoYB0MBu1TvhPsCTMqMZer6oKnt1hEBKoYywpnyUclATuT8
ESbLzENKd+Qd4pJv7jAnXONFQEkdT6TWE9tv9ODKWuSKt8/EQoMsUDu1BsBYrD5q
YeER9+HPO/QuM4TZIaTde3s6xFPZRffQOuUceqRwDel4ncWlk+lFQgGzOWetK4XV
fD9v76nDTQpoCOYoPQ+1vUm/gdf5L6uHq3vsYHGtIdPy1d5RTgXOLdsnWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIxqdsDlbl7MPibGk300XAM09heMB8GA1UdIwQY
MBaAFAcrHrYQDAylZEQ3BY1C9P1yIzaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mM2YyNzMtMzQyNC00NjUxLTlhMjEt
MGUwN2U1YTY2ZDU5LzEvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mM2YyNzMtMzQyNC00NjUxLTlhMjEtMGUwN2U1YTY2ZDU5
LzEvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOMKeXSn
ux2M86leyQ2mPI79u8TJbh4hdomcMbEA3lJOtpoVaI/IKaZD/CqwRlHIP6inS6fc
ia7ltzZ1PWN6Hq7JwTi1M6CLDJGDebugD+xjRLhw+AmIYm1aLF7LzqrT3V4Hdci4
3u0EHOkIlycMg+jYzFJqFYathwR5ZaY9ZaMsfRJXEI/un7RkQhDBGXjTrs38vvMs
238llAGf5gGThkS57dYI3sbQElA3rWEbnlBPClWCsTZgWWT4aVF9wUYh9EzEco3n
6rZhJl4TjbiHmhXEQtAUDKYXxlpvQG0DNp9ztkxJvYwY38avGc9pbV+Dd4T4Qtew
ZssX+3G0auxXRg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:41:29 2025 by rpki-client on console-fra.rpki-client.org