Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier: iDdSLIhfknGERmtSrPQYYorqEDizPL50xwez3wSgkW8=
Subject key identifier: B4:0B:07:59:88:0D:C2:ED:83:6D:21:2E:74:7F:68:06:73:7E:E2:79
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial: 019A5150D711B5A7323605BCF62FF50D3470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number: 170B
Signing time: Wed 05 Nov 2025 00:00:43 +0000
Manifest this update: Wed 05 Nov 2025 00:00:43 +0000
Manifest next update: Thu 06 Nov 2025 00:00:43 +0000
Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: U5a95t1bsodmnppYnPLD7ue6GVopaNbybXAFNkE6sp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:d7:11:b5:a7:32:36:05:bc:f6:2f:f5:0d:34:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
Validity
Not Before: Nov 5 00:00:43 2025 GMT
Not After : Nov 6 00:00:43 2025 GMT
Subject: CN=b40b0759880dc2ed836d212e747f6806737ee279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:05:b1:69:f9:c4:52:1b:c7:3e:f1:5b:9f:c3:
01:22:44:e4:ec:e6:74:a7:69:68:64:20:e2:fa:4f:
9c:60:3e:25:12:b7:ae:a1:23:f0:3a:3b:2e:3c:7d:
66:4d:4c:32:d1:43:57:5b:3c:d0:2e:b5:79:9e:96:
d3:9c:a5:10:d2:d9:0e:3f:0f:bc:76:2a:db:ab:74:
2e:2e:9b:df:83:85:d3:50:ed:91:4a:f1:a0:25:69:
48:77:e3:11:d4:b4:b8:13:db:0e:37:d8:f0:8c:9b:
83:46:92:85:e7:81:23:9e:b3:41:b7:38:32:cd:7f:
11:38:8d:f9:13:fd:92:60:1f:12:14:ee:8b:ea:a8:
30:29:f4:2a:05:05:a1:10:c5:a6:05:52:41:68:ed:
62:24:ae:d4:40:47:31:48:3e:db:dc:c8:fa:7c:f8:
17:b0:25:06:1d:fb:70:89:e6:31:fd:b8:f0:86:80:
d8:74:94:99:17:9c:e9:b8:b5:c3:8c:59:a8:a5:c2:
02:37:97:c3:1a:1f:7c:eb:84:18:01:5c:13:d9:5c:
f5:c9:85:06:85:9f:73:3f:eb:43:a5:02:53:67:8a:
35:b8:d0:ec:9e:9e:9e:69:bf:a2:7d:77:62:0b:ff:
fe:a7:3c:80:bc:02:37:bc:38:22:71:1c:c4:13:18:
3f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0B:07:59:88:0D:C2:ED:83:6D:21:2E:74:7F:68:06:73:7E:E2:79
X509v3 Authority Key Identifier:
keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:22:e6:96:8e:b9:92:8c:40:bb:e0:be:2b:02:bf:55:5d:c6:
f7:1a:36:7a:a0:77:42:eb:8b:aa:41:06:30:35:f2:10:a2:0c:
4d:ef:66:90:06:4c:07:d0:e0:23:61:74:99:6f:3b:9e:b3:23:
e5:f7:7f:12:b1:d8:e0:0e:06:c7:91:40:58:f4:bf:f1:fd:53:
5e:07:8b:c3:3a:61:53:c7:3b:f8:24:70:28:d7:ea:85:6d:fa:
c6:b5:59:07:83:ba:35:84:27:96:89:8c:f5:91:12:b5:e4:ba:
d8:2e:7b:9a:95:45:15:79:bc:7e:71:29:31:41:e7:d2:d3:54:
8c:97:b4:d2:88:d7:72:78:ae:2b:5d:2f:d6:56:dc:86:83:ef:
7f:0d:a2:af:e0:51:92:de:1a:5d:01:8b:02:b8:f4:7f:7c:e5:
23:21:99:ce:5b:86:d4:20:97:ca:ce:95:76:32:14:32:a3:e8:
13:84:f1:44:05:3b:89:03:6c:ff:75:7b:7e:3b:ae:f0:8b:68:
15:fb:3f:6b:98:40:98:13:5a:a7:26:19:e1:ae:e0:c5:27:50:
0f:d8:58:83:8b:48:c2:f1:28:ad:88:c8:05:5f:a9:d6:f7:5d:
e0:e8:65:b5:50:d1:4d:22:86:98:95:13:16:21:80:1c:6d:0a:
32:d4:31:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:47:27 2025 by rpki-client