Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier: HLbbgeej66Ueawfu7cF4unKij8tY5LMHIXtScqzhD8o=
Subject key identifier: E6:59:60:84:77:82:0C:B8:68:2F:C1:7C:1E:9D:1E:A9:05:44:9B:38
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial: 01989524F041F681AEBAA7714A6FE66B43DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 18:01:22 +0000
Manifest this update: Sun 10 Aug 2025 18:01:22 +0000
Manifest next update: Mon 11 Aug 2025 18:01:22 +0000
Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: UJ643a3W0+orz4yOEDkMpk5F2J9cyuU8IiKMXy2ii60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:f0:41:f6:81:ae:ba:a7:71:4a:6f:e6:6b:43:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
Validity
Not Before: Aug 10 18:01:22 2025 GMT
Not After : Aug 11 18:01:22 2025 GMT
Subject: CN=e659608477820cb8682fc17c1e9d1ea905449b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:23:61:6f:2a:96:12:e9:3f:ec:fb:46:de:
e9:ed:80:69:83:ab:50:55:91:0b:1d:94:c6:c5:0a:
b6:41:3e:34:be:7d:92:78:7b:e1:75:22:14:41:b6:
28:06:5f:b1:53:e4:4f:02:7e:92:56:90:00:19:e6:
64:69:3f:7c:5f:a8:d7:67:75:ea:20:26:d5:02:1f:
fc:cf:09:3c:f0:bb:31:6c:36:cf:03:4e:e5:60:92:
4f:21:b0:fd:f7:a2:b4:cc:e6:41:63:eb:c4:1e:a4:
6b:3b:6b:14:81:23:64:fc:d2:7e:79:ae:37:60:ad:
d4:60:bb:cf:9d:57:f8:00:23:65:6b:8e:46:31:36:
f6:d8:3a:52:ca:a7:65:5a:50:10:f6:f5:9e:c2:31:
59:20:c8:50:c9:e3:78:7f:17:ad:ae:3e:f4:c4:2b:
78:0d:5b:1c:79:2d:e3:3e:ef:8b:cd:d5:78:70:10:
4a:a0:f7:60:be:f7:5b:63:1c:be:67:4f:c4:62:eb:
f1:d3:73:03:19:1d:c9:13:79:bb:6c:b8:7f:48:fe:
f1:48:c6:68:66:7e:18:3b:19:81:70:16:90:b3:a0:
17:c2:82:54:c6:e4:b0:31:5a:35:7c:10:f2:c7:15:
76:66:89:92:49:79:59:b2:a1:c0:3f:aa:6c:b9:9a:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:59:60:84:77:82:0C:B8:68:2F:C1:7C:1E:9D:1E:A9:05:44:9B:38
X509v3 Authority Key Identifier:
keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:96:c3:7c:95:a6:7d:95:4c:98:9c:77:85:66:0f:e0:4c:ac:
2b:5d:3d:59:91:26:6f:a4:d2:a4:5b:3e:e2:b3:38:d3:4f:15:
37:aa:33:1b:45:d0:68:5e:97:f7:c9:f8:2a:01:5c:0e:93:28:
46:1a:91:84:f9:3e:eb:ad:57:01:cd:ad:c7:a3:a9:d5:95:54:
39:16:e9:38:ce:e2:1f:11:f3:09:0c:71:2f:9e:50:ae:7b:b8:
d9:5a:cd:16:80:c8:37:8e:05:2b:7b:2d:64:e6:49:96:3a:91:
91:11:1d:77:e1:26:41:ae:7d:7b:21:e0:af:de:69:b5:4d:b7:
34:be:50:74:df:53:bc:e3:ec:46:96:f3:a5:61:c7:44:28:37:
85:31:dc:24:e5:42:89:94:b4:0e:13:40:5a:d3:1f:8d:ff:82:
e0:02:44:4c:07:12:1e:dd:fd:d5:46:6d:be:50:50:8d:28:17:
1b:37:18:fe:48:d2:59:d7:0c:10:4b:4e:a8:30:82:92:d9:01:
73:98:e2:53:ba:7d:fc:b4:5f:4d:38:ef:26:24:18:3f:04:5f:
84:30:e1:86:39:1b:5e:49:61:cd:57:a3:51:7d:36:23:3a:3f:
b5:26:02:4c:60:1e:d2:fb:9c:38:a3:3a:90:40:41:b9:b7:e3:
c5:30:24:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:42 2025 by rpki-client