Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier: 9IWDvnWiSI2hs9szr/ZmeeeaFu5dWJ53XxIECsHfG/E=
Subject key identifier: 30:E8:A0:28:61:C3:C0:60:C6:ED:08:AA:77:15:DD:BE:19:05:06:4E
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 01988EEC56FB60B4216AB3C98ACA7C38A45F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number: 0A90
Signing time: Sat 09 Aug 2025 13:01:50 +0000
Manifest this update: Sat 09 Aug 2025 13:01:50 +0000
Manifest next update: Sun 10 Aug 2025 13:01:50 +0000
Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: pCEa3o40dFBv7hOxby1NowD37wwd14TSFVJqvbW6vww=)
2: Nx5EmJrnCtpu4KBMsJW-JTnb16c.roa (hash: 3QQBoOENO84E31u/R6uijRGk1pgl6EgzpVfuLdsVp8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:56:fb:60:b4:21:6a:b3:c9:8a:ca:7c:38:a4:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Aug 9 13:01:50 2025 GMT
Not After : Aug 10 13:01:50 2025 GMT
Subject: CN=30e8a02861c3c060c6ed08aa7715ddbe1905064e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:7d:11:83:7a:69:91:eb:09:ff:25:23:e8:
c5:61:81:7e:24:ce:f6:e1:44:53:71:3a:81:f0:57:
e2:14:62:f4:83:a8:2f:6c:27:8f:d5:d1:c8:af:c1:
c9:39:c9:8e:cf:79:a7:f4:bd:be:f3:91:a3:fd:3d:
f4:3a:aa:ad:44:47:95:6f:79:df:8b:c3:ba:9b:d0:
a7:67:4e:f4:33:17:ae:08:1b:e4:17:8a:16:cc:b6:
2b:7a:0f:43:71:4c:11:15:3f:31:0c:65:b9:1c:41:
87:0b:60:de:a5:3f:bf:07:65:fd:ec:d8:f3:1f:47:
d0:6c:b2:77:7b:6d:0d:6d:38:eb:bb:f9:54:0c:a6:
86:8d:76:48:5c:ed:4d:c1:79:10:9f:64:fc:cd:5b:
47:20:69:54:6a:ba:f2:56:be:11:eb:72:c4:79:be:
3c:e1:de:8b:61:57:08:fe:77:aa:f2:b7:33:94:29:
53:7a:21:22:b7:29:d0:d8:fa:8d:1f:e4:5a:25:27:
c4:46:a8:aa:f3:65:d4:c3:8e:09:5b:01:8e:d0:e0:
39:64:10:7a:22:44:50:09:ea:ca:90:e2:19:9f:33:
b9:50:89:30:f2:fc:c8:2d:ac:7c:99:7d:19:6e:69:
03:f0:3f:b4:d4:ec:a9:49:65:6b:07:97:cb:b4:3c:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E8:A0:28:61:C3:C0:60:C6:ED:08:AA:77:15:DD:BE:19:05:06:4E
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:a1:27:4d:58:01:56:e0:6e:fb:4c:4c:66:f3:b3:0b:ab:82:
de:44:66:6c:27:f3:4a:af:c7:b3:e2:97:14:59:8b:ca:34:32:
a7:94:9f:f2:64:4a:32:22:d6:9c:14:a0:56:08:dc:df:33:48:
4f:11:af:d2:e6:f3:29:0c:8d:7d:62:3d:3e:2b:a2:17:18:0b:
03:ee:d4:57:79:ac:1a:a4:aa:27:e4:c8:f2:fe:2c:97:99:88:
1a:44:74:2b:72:43:88:42:9b:69:b8:c3:20:8b:a4:da:a8:e2:
07:f4:36:da:7e:fc:e3:d9:de:14:85:07:86:9a:9b:ad:0e:18:
63:fe:6d:ed:0a:0d:53:93:00:4d:d0:94:5e:dc:c7:b1:49:81:
1b:c6:79:e8:97:e7:8c:2f:8d:c9:75:dd:ef:9e:cd:88:9a:83:
27:2a:50:1b:b9:6e:58:9f:f6:2c:8b:20:2c:46:fc:8f:d8:74:
87:04:46:f7:f6:49:d4:93:aa:59:59:d2:b6:5d:68:c4:d4:61:
8c:15:5b:7f:af:25:35:28:48:e7:91:15:cc:8e:48:b3:79:28:
29:b6:6a:9d:47:5c:8e:7c:7d:9f:4f:03:3f:d2:75:26:9c:59:
aa:86:d3:9b:a0:8b:e8:2d:78:0d:6f:7a:d2:8d:aa:94:d3:b3:
0d:d7:16:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiO7Fb7YLQharPJisp8OKRfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MmIxZWI2MTAwYzBjYTU2NDQ0MzcwNThkNDJmNGZkNzIy
MzM2ODEwHhcNMjUwODA5MTMwMTUwWhcNMjUwODEwMTMwMTUwWjAzMTEwLwYDVQQD
EygzMGU4YTAyODYxYzNjMDYwYzZlZDA4YWE3NzE1ZGRiZTE5MDUwNjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0N9EYN6aZHrCf8lI+jFYYF+JM72
4URTcTqB8FfiFGL0g6gvbCeP1dHIr8HJOcmOz3mn9L2+85Gj/T30OqqtREeVb3nf
i8O6m9CnZ070MxeuCBvkF4oWzLYreg9DcUwRFT8xDGW5HEGHC2DepT+/B2X97Njz
H0fQbLJ3e20NbTjru/lUDKaGjXZIXO1NwXkQn2T8zVtHIGlUarryVr4R63LEeb48
4d6LYVcI/neq8rczlClTeiEitynQ2PqNH+RaJSfERqiq82XUw44JWwGO0OA5ZBB6
IkRQCerKkOIZnzO5UIkw8vzILax8mX0ZbmkD8D+01OypSWVrB5fLtDwm0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDDooChhw8Bgxu0IqncV3b4ZBQZOMB8GA1UdIwQY
MBaAFAcrHrYQDAylZEQ3BY1C9P1yIzaBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mM2YyNzMtMzQyNC00NjUxLTlhMjEt
MGUwN2U1YTY2ZDU5LzEvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mM2YyNzMtMzQyNC00NjUxLTlhMjEtMGUwN2U1YTY2ZDU5
LzEvQnlzZXRoQU1ES1ZrUkRjRmpVTDBfWElqTm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuaEnTVgB
VuBu+0xMZvOzC6uC3kRmbCfzSq/Hs+KXFFmLyjQyp5Sf8mRKMiLWnBSgVgjc3zNI
TxGv0ubzKQyNfWI9PiuiFxgLA+7UV3msGqSqJ+TI8v4sl5mIGkR0K3JDiEKbabjD
IIuk2qjiB/Q22n7849neFIUHhpqbrQ4YY/5t7QoNU5MATdCUXtzHsUmBG8Z56Jfn
jC+NyXXd757NiJqDJypQG7luWJ/2LIsgLEb8j9h0hwRG9/ZJ1JOqWVnStl1oxNRh
jBVbf68lNShI55EVzI5Is3koKbZqnUdcjnx9n08DP9J1JpxZqobTm6CL6C14DW96
0o2qlNOzDdcWzA==
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:04 2025 by rpki-client