Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
File: dy9i9-iZgXRBGAk19CuCo5mAotw.mft (raw, json)
Hash identifier: jNUPaD0t2hbKwJj3z5fa5ZipylwSqLAlHF3nr/UzjrY=
Subject key identifier: BA:D4:9B:36:FB:68:C8:4B:9B:9C:17:3C:1D:D7:7F:7E:3A:90:18:98
Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Certificate issuer: /CN=772f62f7e899817441180935f42b82a39980a2dc
Certificate serial: 019748C325A503F1819E36758A770F24878E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
Manifest number: 0426
Signing time: Sat 07 Jun 2025 05:00:37 +0000
Manifest this update: Sat 07 Jun 2025 05:00:37 +0000
Manifest next update: Sun 08 Jun 2025 05:00:37 +0000
Files and hashes: 1: dy9i9-iZgXRBGAk19CuCo5mAotw.crl (hash: 4RZoYvtt8rd3+8lj32ngh5tRSfaKNgXI9nx9lnpIiqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:25:a5:03:f1:81:9e:36:75:8a:77:0f:24:87:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc
Validity
Not Before: Jun 7 05:00:37 2025 GMT
Not After : Jun 8 05:00:37 2025 GMT
Subject: CN=bad49b36fb68c84b9b9c173c1dd77f7e3a901898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:ef:1e:1b:5a:bf:0c:5c:cd:5b:6c:96:3d:
32:ff:0f:68:75:b7:91:69:a9:f1:40:89:95:99:78:
b0:96:e8:b7:e5:0e:38:53:a7:af:66:b1:5f:1b:5d:
b1:e6:64:c6:59:24:b5:59:28:79:1e:46:18:18:04:
c3:15:78:27:c8:50:89:e4:93:c5:04:5d:bb:54:8e:
92:f5:88:e9:4e:01:f5:59:3d:c7:29:29:2f:58:39:
75:1e:b3:d8:d4:62:20:3d:3b:57:ab:3e:02:38:f8:
38:32:51:e7:3e:38:38:41:e7:56:ca:c3:49:32:d7:
4a:d5:85:f7:16:23:77:6b:35:3f:27:33:4a:68:9e:
0e:66:ba:dd:3b:b5:58:fb:22:13:8a:6b:eb:b7:a6:
95:bc:22:c2:be:92:8b:7c:65:41:2e:ae:52:f0:bf:
99:c7:70:fc:d9:fd:f1:e3:bd:67:03:5b:d6:0c:f7:
06:43:ef:b4:5e:b0:67:72:aa:ea:22:d3:bc:db:9d:
cf:34:14:f4:99:3f:5d:61:3d:04:05:d5:7a:a3:54:
e0:cf:e5:b8:0e:02:6a:a1:44:69:a9:d5:92:c7:78:
e1:d4:97:8e:fb:4d:b4:bd:13:a0:0d:f9:b2:8a:b3:
09:97:d2:17:6b:81:d1:46:83:79:d0:d8:8a:46:5c:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D4:9B:36:FB:68:C8:4B:9B:9C:17:3C:1D:D7:7F:7E:3A:90:18:98
X509v3 Authority Key Identifier:
keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f4:9d:b2:48:01:6e:85:4a:a2:5b:8a:7a:1a:39:9c:46:5e:
ec:55:fe:11:e6:1d:e9:e1:42:3a:0d:fa:9a:dd:a7:a5:99:93:
61:20:bc:13:5d:26:19:51:43:50:9d:76:22:5f:47:ce:48:d3:
a0:d3:66:a9:17:50:f7:1a:5e:96:ca:4e:b3:06:99:5d:c1:6f:
47:24:f3:2f:ea:21:e9:67:8d:44:68:7d:b3:cd:0c:bf:25:18:
a8:95:86:a0:ce:65:2e:48:fa:7c:7a:57:73:46:c2:dd:93:d3:
f4:f5:c6:0e:d6:f9:dc:3c:8c:48:ca:b2:b0:c4:cc:17:8f:14:
c4:08:25:bd:13:62:46:41:e7:ec:f3:48:5d:7e:34:1b:39:0f:
31:46:ef:70:1a:62:90:23:6d:6b:0c:54:4a:83:12:f0:77:77:
bb:5c:a2:75:30:64:3c:c2:50:45:30:d6:1b:17:c5:f9:25:fc:
f1:24:82:41:f2:bb:e8:9a:2c:58:cb:4c:75:09:05:f3:3c:08:
b8:0b:46:7e:65:92:ca:d1:b6:db:30:83:7b:4d:74:1e:bb:0e:
32:40:86:da:2e:94:81:bc:3d:87:15:95:f1:4b:d3:64:45:d8:
6a:13:ae:be:dc:49:99:47:8d:9d:bb:37:29:64:80:96:f4:e1:
c0:9d:fc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:58:44 2025 by rpki-client