Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier: iA/zH1KbR4vT2fD+H8+pPFw2UQAiA1IOxR+djV9Gmzo=
Subject key identifier: 6C:E0:3C:AD:37:1B:A6:EE:4C:2F:0E:F7:83:C7:E4:54:C1:4E:C5:4B
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial: 01969371C7AD49CFC2A03A908AF9985333DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number: 151B
Signing time: Sat 03 May 2025 00:00:29 +0000
Manifest this update: Sat 03 May 2025 00:00:29 +0000
Manifest next update: Sun 04 May 2025 00:00:29 +0000
Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: uKX8TZYcPQrZLesg9slQNWVupLkKqvNmGkBmYRESrJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:93:71:c7:ad:49:cf:c2:a0:3a:90:8a:f9:98:53:33:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
Validity
Not Before: May 3 00:00:29 2025 GMT
Not After : May 4 00:00:29 2025 GMT
Subject: CN=6ce03cad371ba6ee4c2f0ef783c7e454c14ec54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:78:83:f4:b6:fe:16:2c:ec:ee:2b:01:b3:
8c:fe:d1:42:62:4c:4a:1e:35:52:34:7a:43:e9:9b:
8a:1a:20:5c:69:08:4c:54:58:09:a8:b7:21:80:d9:
52:65:bd:5e:84:57:db:3f:c1:84:ff:0d:65:99:d7:
bf:24:d4:10:85:57:e4:cc:62:aa:49:03:4f:8a:ca:
e7:9f:ae:49:4a:96:42:2f:06:76:a9:39:a3:95:04:
16:8a:cc:8b:5f:d1:b8:13:89:f7:f2:84:0d:bc:f0:
a7:37:06:cb:28:e2:7c:13:49:7c:11:6a:21:79:a0:
6f:77:3f:cf:9e:e5:9f:c8:1c:cb:f7:c6:47:5a:7e:
07:e8:53:a9:94:b6:98:32:d7:fa:88:16:08:2b:ea:
4b:fb:6e:40:6a:ef:a7:ff:92:60:77:ea:1a:c6:56:
24:ad:b8:fa:f7:a9:94:95:e3:58:fb:14:b7:76:c6:
90:0c:ad:7d:a7:8d:af:8b:ef:65:57:37:92:88:7f:
2b:0e:1c:53:23:6d:bc:65:cb:1f:5d:3b:53:5e:cb:
2a:cc:21:59:7a:d5:df:d3:50:aa:cd:d3:e7:5f:7f:
27:22:fe:92:34:43:67:4f:ea:8e:95:e3:4a:ec:d5:
5c:12:b8:97:4b:cd:80:60:81:3d:d5:d4:49:1b:a7:
cb:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E0:3C:AD:37:1B:A6:EE:4C:2F:0E:F7:83:C7:E4:54:C1:4E:C5:4B
X509v3 Authority Key Identifier:
keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9e:96:17:07:24:8d:88:c0:93:bf:05:de:00:9e:70:2f:2e:
f0:16:7b:26:c5:a6:ab:82:70:5b:da:97:0c:f3:e1:1a:8a:3c:
5e:88:0c:a7:f2:0b:a2:38:02:d3:b7:35:34:7d:89:62:79:42:
f4:24:26:b8:9d:57:33:1c:46:8e:b4:83:f7:05:88:2d:74:dc:
4d:85:c4:ce:76:7e:65:b6:e3:77:5b:4e:b4:fe:76:18:64:d8:
16:a5:b2:9a:1c:4e:74:1c:f7:bc:e8:0a:c0:37:d8:bc:e3:40:
27:ee:d5:4f:17:4c:c7:50:a3:eb:68:cb:45:93:3b:06:ac:a8:
6e:ec:86:43:43:c1:e8:a2:fa:2c:55:c6:78:04:3b:fe:26:a5:
da:4d:7c:44:f7:78:ea:06:6b:d3:78:29:de:d4:a3:77:2f:d2:
c9:00:3b:c1:79:71:63:7e:da:92:c4:da:92:12:a0:2a:0f:56:
e6:a9:66:6a:a4:71:fe:7c:94:40:7f:e5:a6:d4:15:41:2f:29:
8c:a9:8e:97:33:fd:e7:09:a5:90:96:14:14:72:b8:8d:01:fb:
35:c0:0a:63:c8:38:d1:b9:84:ba:e8:db:95:55:51:88:fa:d6:
14:21:d8:3e:66:d9:0b:1d:5d:51:77:98:d5:10:ac:75:6a:d3:
82:09:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:24:41 2025 by rpki-client