Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
File: dy-5SkWdO3XOi_uPErTPcZgsY0M.mft (raw, json)
Hash identifier: 83lEkVecBK1/BtDrOXOX/8RhjcuqCm97S5znmkLKfE8=
Subject key identifier: 94:B3:6E:60:43:51:91:70:B4:11:E6:90:53:45:AE:2A:50:52:A8:D8
Authority key identifier: 77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
Certificate issuer: /CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Certificate serial: 01989F02EB0514EFA9314F75BD5EEE3DB463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
Manifest number: 01B1
Signing time: Tue 12 Aug 2025 16:00:25 +0000
Manifest this update: Tue 12 Aug 2025 16:00:25 +0000
Manifest next update: Wed 13 Aug 2025 16:00:25 +0000
Files and hashes: 1: IRnn9ORtzivUx2TGUOWiZn2YmA8.roa (hash: Xk0n7E/wui7qwpm2gqzzeQ3XkyXcylQYY0mSQoyL7gs=)
2: dy-5SkWdO3XOi_uPErTPcZgsY0M.crl (hash: 4sMYvv8SyJ4fVJFxmVz1sFMnuLY3jkXDrtQ4o9CLowM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 16:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:02:eb:05:14:ef:a9:31:4f:75:bd:5e:ee:3d:b4:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Validity
Not Before: Aug 12 16:00:25 2025 GMT
Not After : Aug 13 16:00:25 2025 GMT
Subject: CN=94b36e6043519170b411e6905345ae2a5052a8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e1:36:b5:66:2f:07:5f:75:80:00:0f:7e:cc:
e4:23:45:75:17:67:98:e6:2b:4a:80:b0:70:14:22:
18:e8:e8:78:47:cf:74:32:b0:ca:c5:0d:52:33:db:
0b:6d:60:5d:41:d8:80:b0:e5:a7:e4:f5:ef:f9:9c:
05:f5:79:2a:6f:a2:77:5d:40:7b:d8:cb:5a:19:b0:
a5:5b:d5:68:40:ed:89:f4:d9:04:9c:f3:84:19:ff:
4b:25:e2:ee:2a:6e:bf:b4:21:88:74:28:f2:8f:7e:
d7:b6:9b:55:c1:67:91:3e:cf:2e:4a:4d:74:77:35:
e9:c1:ab:76:93:a5:0b:3b:53:71:97:a2:a1:5f:52:
92:dd:e8:70:a3:60:ca:48:ec:09:2e:16:8a:87:c7:
b5:cb:83:f3:92:40:d1:26:41:8c:1d:1f:6a:79:e5:
d3:74:32:b2:6d:1f:8f:5f:1a:55:d5:db:8b:08:16:
15:76:bc:ec:ad:91:2d:90:e8:f5:51:e0:bf:2a:77:
c2:85:33:bd:23:50:b0:ae:15:32:67:09:57:65:fb:
c0:96:ba:00:cb:11:27:ac:4f:af:f6:1d:34:ec:7c:
50:10:3d:07:d8:b0:bf:cd:b8:db:9d:22:d1:d8:9c:
72:24:2b:95:d5:8d:00:a6:7f:d1:d1:e3:8a:f0:2c:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B3:6E:60:43:51:91:70:B4:11:E6:90:53:45:AE:2A:50:52:A8:D8
X509v3 Authority Key Identifier:
keyid:77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:36:5b:6e:17:f6:96:b6:59:70:67:e2:30:d4:de:bb:30:58:
c6:6b:3d:53:32:69:77:86:bc:4c:fd:e2:09:ec:6f:b0:c3:84:
a2:cd:06:b7:2c:5c:6c:d0:59:9c:1c:19:24:f1:ee:f0:5a:e3:
4b:b1:9e:0b:e9:58:53:a1:c6:08:fb:c5:28:26:dc:06:c4:05:
91:63:b2:f9:7e:2c:b0:e6:e4:47:39:20:55:b4:ff:71:98:78:
c5:0e:78:ca:70:33:91:e7:a7:2d:46:bb:0e:74:17:63:07:a0:
01:c9:82:c1:d0:a1:ab:be:bc:24:e8:8a:3c:dd:fc:a0:19:42:
16:00:3b:c5:eb:83:5f:49:0e:4c:01:93:11:bf:a8:75:89:74:
9b:c5:2f:48:d7:4a:e0:12:71:7a:d3:cd:14:aa:8e:fa:61:a8:
af:0d:b8:5f:3f:5e:9a:2e:cf:36:44:9d:1d:2e:a6:79:99:38:
ba:27:24:fe:0a:fd:39:b8:50:e7:1d:18:91:c7:9a:ae:a1:81:
b3:8e:6a:2c:0c:d1:56:73:b8:10:2a:1b:82:50:91:54:0a:fc:
04:ae:b7:04:4d:65:cf:a2:47:18:5e:9c:03:5f:68:95:13:22:
92:eb:f8:87:bc:8d:07:a7:01:4f:00:38:66:03:98:19:59:c0:
65:dd:93:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:31 2025 by rpki-client