Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
File: dy-5SkWdO3XOi_uPErTPcZgsY0M.mft (raw, json)
Hash identifier: racBR7oe/lgtiBPea9nmOXZWPGjJahO6P069AFhaJ+g=
Subject key identifier: 18:DF:E8:70:48:83:86:30:55:A3:AB:F2:7B:11:47:B2:B3:DE:DB:0A
Authority key identifier: 77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
Certificate issuer: /CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Certificate serial: 019686245AEE6CA1E31F06386867AF90601B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
Manifest number: 9B
Signing time: Wed 30 Apr 2025 10:00:51 +0000
Manifest this update: Wed 30 Apr 2025 10:00:51 +0000
Manifest next update: Thu 01 May 2025 10:00:51 +0000
Files and hashes: 1: IRnn9ORtzivUx2TGUOWiZn2YmA8.roa (hash: Xk0n7E/wui7qwpm2gqzzeQ3XkyXcylQYY0mSQoyL7gs=)
2: dy-5SkWdO3XOi_uPErTPcZgsY0M.crl (hash: nYzplUUsyHBW3e+AWyB8SRqAbHC1g3L5W//J8zbWcyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:24:5a:ee:6c:a1:e3:1f:06:38:68:67:af:90:60:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Validity
Not Before: Apr 30 10:00:51 2025 GMT
Not After : May 1 10:00:51 2025 GMT
Subject: CN=18dfe8704883863055a3abf27b1147b2b3dedb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5a:9a:cb:86:f4:80:59:42:09:39:53:ee:17:
d6:40:d8:5f:93:b9:55:b8:a9:d4:40:36:63:86:f6:
b9:8c:26:ee:2c:29:1d:4c:51:f5:5c:64:2f:ab:7e:
bd:96:68:3a:dc:fe:61:30:d8:90:ad:20:14:41:82:
e7:9d:9a:a8:9b:b6:1d:b2:0c:25:2f:25:83:d9:5d:
29:99:06:82:6c:68:27:3a:de:c1:0f:bf:32:a8:cb:
13:c6:05:ac:7a:a0:56:09:69:73:93:37:21:8e:7d:
f9:db:51:7a:ce:fd:4e:ad:f7:af:34:da:12:f6:bd:
a7:44:69:69:fe:15:84:cb:b2:00:c8:1f:28:3d:0d:
10:d7:5b:34:85:98:63:42:98:5a:53:f7:0b:c3:e7:
f4:8f:92:31:52:74:01:cf:05:80:6e:c0:69:6e:4b:
c7:87:0c:d1:ed:44:b1:1d:2f:0e:75:51:9f:23:8c:
70:7f:29:74:7a:be:c0:48:32:35:64:1c:fd:83:65:
b9:c7:98:d3:88:dd:46:f0:22:27:c7:57:71:9d:1b:
f4:22:ae:61:e0:35:3e:df:24:8c:ac:c5:3b:78:c6:
0d:e1:7a:29:68:64:5d:b2:f6:e1:94:f1:d3:38:c2:
b2:a1:ce:b7:aa:ed:6e:d6:53:d3:fe:61:9e:57:f5:
52:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:DF:E8:70:48:83:86:30:55:A3:AB:F2:7B:11:47:B2:B3:DE:DB:0A
X509v3 Authority Key Identifier:
keyid:77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:22:d6:49:b6:3d:51:40:fd:0c:5f:a5:6f:1f:5b:62:fb:3c:
eb:25:2e:01:c8:71:50:09:89:63:2f:b4:08:8c:cd:bd:e8:dd:
91:10:c0:9b:a6:0c:b6:3c:9b:03:a2:ba:c8:f2:91:24:31:a1:
98:81:57:a6:0a:bf:1e:75:18:2b:86:6e:7d:8e:ea:7f:67:2a:
7a:5b:ef:e3:d6:9f:e4:f7:f8:f9:7e:4c:e6:28:b1:84:c7:eb:
60:b5:55:a0:89:50:50:4d:61:9b:c4:a0:a5:1d:0d:0b:aa:49:
59:8b:2d:0c:20:01:28:ea:4c:ce:b4:82:1d:4e:c1:76:e1:ad:
a6:eb:46:95:ab:a4:09:d4:e9:5a:3e:42:85:6c:75:62:86:f4:
38:84:2c:31:22:c0:65:ac:11:0e:25:31:a0:63:24:c7:ad:cd:
5f:be:96:5e:5b:9e:c1:1a:ae:bc:ee:7b:99:d0:cc:1a:f5:a4:
6b:21:79:94:bf:e6:21:31:e9:e5:5b:a7:b9:b2:90:59:aa:ce:
10:be:af:6e:f1:f5:2f:63:61:e7:7e:b7:17:f8:91:d5:be:53:
d1:d5:a8:14:d3:12:ac:7d:58:59:4a:25:0d:4c:25:19:e2:6a:
ec:83:cb:30:cb:67:f0:d6:46:e6:7c:cc:3a:e5:e8:45:40:35:
e6:2e:87:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 12:22:06 2025 by rpki-client