Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier: 6OlPIDd5mi1ssXYxmhANvOGL5TM/ZhQq9oBiNRP8N8c=
Subject key identifier: D0:FE:80:49:F7:0E:4C:EC:ED:9E:C0:39:3A:72:83:C0:B0:33:3C:76
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial: 01964632442F246CE74CD1FA58A26D5C88AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number: 14F3
Signing time: Fri 18 Apr 2025 00:00:21 +0000
Manifest this update: Fri 18 Apr 2025 00:00:21 +0000
Manifest next update: Sat 19 Apr 2025 00:00:21 +0000
Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: xQbITisUaRPn16nbZ9YRBPFq8Dr+HInVDsZCnZgejL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:44:2f:24:6c:e7:4c:d1:fa:58:a2:6d:5c:88:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
Validity
Not Before: Apr 18 00:00:21 2025 GMT
Not After : Apr 19 00:00:21 2025 GMT
Subject: CN=d0fe8049f70e4ceced9ec0393a7283c0b0333c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:5b:99:c1:aa:2e:29:3b:d0:eb:ae:79:5d:
3b:b1:c0:e1:b8:90:1d:30:9a:a4:55:fa:9e:06:db:
99:f1:d6:0f:bc:59:9c:33:c6:2f:2b:b2:92:f3:62:
68:19:67:26:65:fd:d9:b3:96:3a:87:9f:0f:e5:c4:
a5:84:c3:9c:6a:19:e8:af:7e:ca:e4:a6:16:e4:9b:
99:57:d9:ca:97:3a:dd:e8:0c:98:b1:e6:25:23:71:
33:de:15:6c:b0:fe:7f:80:a2:08:24:d6:77:19:d7:
40:41:b5:c7:8a:ef:b3:91:b7:b7:7a:ed:63:e7:06:
a5:b7:f2:a9:d0:44:74:e0:36:db:90:4c:c8:7f:40:
ce:50:a2:52:c3:06:a5:4c:a4:70:04:f6:f0:25:94:
0d:c9:64:e0:7a:0f:2b:cb:dd:1c:ba:0c:0d:d5:f0:
3b:0b:56:2c:98:cb:f1:4e:e2:13:68:51:95:33:ca:
8c:c0:aa:fb:78:11:9e:8e:8b:d0:e4:c5:a0:0b:80:
67:bc:18:8a:b0:19:84:d7:63:8f:9d:03:a9:20:f4:
51:11:a4:18:d9:e1:16:2b:d9:92:38:14:c6:98:79:
dd:38:bd:9d:5f:ea:44:90:7b:93:77:88:fb:2f:aa:
6c:b7:ea:9a:6e:ec:a8:2c:90:0b:6d:eb:c9:84:8d:
5d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FE:80:49:F7:0E:4C:EC:ED:9E:C0:39:3A:72:83:C0:B0:33:3C:76
X509v3 Authority Key Identifier:
keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9c:e4:84:37:9b:d6:a7:cc:ed:1a:42:8a:05:d2:0d:88:8a:
cd:29:1a:7b:be:7b:5e:bc:26:94:01:b5:3f:92:32:09:15:77:
0b:5d:2a:33:f0:af:79:d2:d1:57:c0:cc:a9:f8:b3:f9:83:0d:
53:93:4a:71:ea:ed:fb:75:58:a1:55:4f:a1:a2:9e:86:f3:db:
58:b3:b0:a9:11:f7:06:b8:ab:85:96:ac:d1:67:9b:9c:5e:29:
77:72:53:9c:e5:b9:95:36:93:bc:55:da:e6:63:82:df:0e:94:
da:f7:3d:e8:0b:cb:3a:1a:0a:41:66:ba:52:d5:fa:53:e8:28:
e9:0f:ce:24:16:64:ce:9a:e9:d1:a4:7d:31:2e:18:c4:a9:00:
4b:62:21:73:cd:9c:fa:ae:71:88:3d:b3:c9:bf:20:59:cb:7f:
71:83:62:54:87:6c:c3:1d:51:cd:15:46:64:12:2d:3e:87:0e:
b7:4e:e0:f0:4c:f7:bf:3f:a3:85:23:1c:a6:ea:9e:d8:b8:b5:
a6:17:07:9d:97:63:e6:87:3f:23:1f:26:71:fa:ef:95:f0:3a:
f4:6a:21:da:a5:48:95:c6:50:da:53:b7:30:a6:f9:8a:ed:68:
66:d5:af:83:47:52:1a:9e:4d:6e:b1:b2:a5:22:c8:f6:98:73:
f8:f6:c6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 04:52:42 2025 by rpki-client