Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier: wtX0PYs0x9Yo50oYza6/4Hmx9KLBrrGLhBABC/dPFeQ=
Subject key identifier: A8:D0:3A:29:43:83:09:FB:F3:66:F8:3A:EF:03:37:62:58:BA:A8:73
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial: 019A7225FF80104A6FFA23B93847DE60DA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:24 +0000
Manifest this update: Tue 11 Nov 2025 09:01:24 +0000
Manifest next update: Wed 12 Nov 2025 09:01:24 +0000
Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: GzjdP+yYbBglvGe3Qg04wk7t2vhfCLVonARb/uD6JZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ff:80:10:4a:6f:fa:23:b9:38:47:de:60:da:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
Validity
Not Before: Nov 11 09:01:24 2025 GMT
Not After : Nov 12 09:01:24 2025 GMT
Subject: CN=a8d03a29438309fbf366f83aef03376258baa873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bd:15:65:c2:9a:d0:ff:e9:b7:67:6b:57:37:
e6:4d:b6:8e:2b:99:fd:c2:db:74:64:a4:3a:71:7f:
33:50:08:d4:6b:5d:29:cb:38:4f:9e:ed:3e:97:25:
97:14:cc:a1:2e:b4:45:62:8e:85:0d:13:71:9b:b7:
ad:17:9b:1f:a0:9e:c3:e3:56:53:a9:8b:3c:a6:1f:
c9:fa:0e:df:12:12:7e:a8:06:9b:1c:4b:e1:6f:68:
34:1c:54:26:88:5e:b7:37:ee:82:dc:ea:02:15:3a:
b2:2e:f5:be:35:8c:71:8d:0d:e0:39:61:a0:f2:2e:
77:ae:d3:02:30:3d:61:3a:5c:51:83:32:f6:a7:95:
c2:18:6e:13:10:9a:44:1c:32:95:d6:38:6e:1e:99:
53:3b:8b:75:2d:2b:07:2c:d2:30:35:29:47:a0:b8:
d6:4d:13:d7:36:7b:c2:09:40:c9:7f:dd:25:e2:cd:
25:21:22:5e:f7:0c:92:2f:df:2c:19:8c:8d:e4:a1:
ab:e5:b9:a4:4a:4b:6b:06:37:42:83:48:29:09:af:
4b:c1:af:4e:e9:e4:59:cd:90:94:3a:12:a6:8a:3a:
34:20:bf:a9:86:21:6c:fb:8c:34:ae:c8:83:c3:f8:
a8:91:c3:32:0f:ee:e1:ff:95:7e:ec:71:19:06:fc:
6b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D0:3A:29:43:83:09:FB:F3:66:F8:3A:EF:03:37:62:58:BA:A8:73
X509v3 Authority Key Identifier:
keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:7e:a2:c4:d7:63:92:74:06:04:bd:83:a8:38:64:ad:e9:2b:
e6:10:a0:4c:93:af:2e:cf:83:7b:e3:5f:c8:21:04:fd:35:6f:
89:26:26:a4:aa:02:f4:fb:6d:46:ec:e6:79:84:d9:19:44:9c:
f5:17:27:ec:ad:df:e9:b9:b5:e8:27:99:9a:ec:d3:19:76:fc:
9d:35:04:fc:9b:45:e6:a9:ff:98:21:35:15:44:37:e4:d7:9f:
53:c4:73:57:04:d8:9f:4a:ec:b2:c9:6d:13:54:2e:be:f6:11:
54:07:85:0e:71:3e:ff:e3:51:b9:70:f5:30:4a:b2:88:1d:57:
ec:d9:90:42:32:1f:8e:10:be:c2:ca:e0:69:9b:a0:e6:9e:a0:
9b:39:99:43:6d:73:7c:1d:b7:b6:73:ca:07:71:77:ef:ac:cb:
18:40:91:97:e6:b5:fd:3f:9d:ee:24:9a:0c:ea:af:dc:17:bf:
1e:28:91:7b:99:7d:00:66:8b:0d:e9:54:de:24:c5:74:49:97:
6f:c3:15:e4:f0:94:e2:1b:02:fb:79:34:6d:ff:0c:db:94:07:
d8:86:c9:ec:e4:e6:c2:4e:d9:5b:b1:4e:e2:bd:2c:fb:2f:37:
2b:eb:4d:e1:bb:f4:d9:a8:ef:51:96:12:c8:86:4d:8a:da:5f:
ff:78:ca:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:35 2025 by rpki-client