Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
File: dy-5SkWdO3XOi_uPErTPcZgsY0M.mft (raw, json)
Hash identifier: 3Zz8Vy0KpYX0TNdRGof0HBvEaLi3Zc4t9vfIOK5i7YQ=
Subject key identifier: D5:9D:B3:DA:0D:AB:B2:0C:B3:99:F6:19:C2:3E:C3:F3:D3:6F:B9:26
Authority key identifier: 77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
Certificate issuer: /CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Certificate serial: 019655DCF88984182592C3004A0ED2DACA8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
Manifest number: 82
Signing time: Mon 21 Apr 2025 01:01:06 +0000
Manifest this update: Mon 21 Apr 2025 01:01:06 +0000
Manifest next update: Tue 22 Apr 2025 01:01:06 +0000
Files and hashes: 1: IRnn9ORtzivUx2TGUOWiZn2YmA8.roa (hash: Xk0n7E/wui7qwpm2gqzzeQ3XkyXcylQYY0mSQoyL7gs=)
2: dy-5SkWdO3XOi_uPErTPcZgsY0M.crl (hash: z7mVvZsMToSM8p+CZbodTUOZHNmOQTwVHu2A4cZh6u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:dc:f8:89:84:18:25:92:c3:00:4a:0e:d2:da:ca:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343
Validity
Not Before: Apr 21 01:01:06 2025 GMT
Not After : Apr 22 01:01:06 2025 GMT
Subject: CN=d59db3da0dabb20cb399f619c23ec3f3d36fb926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:5c:fe:59:a8:70:8c:b5:2b:59:4d:6e:47:
25:5a:6e:ae:02:da:ae:e0:68:5a:06:e5:73:d9:a5:
57:38:a8:d3:be:46:d2:98:d1:7f:6c:73:13:93:2b:
5a:87:57:55:11:81:6e:96:9c:72:d4:88:5f:b0:f0:
d7:d5:7c:d0:21:8e:13:be:76:88:ca:03:bf:66:89:
18:df:5f:74:14:bb:b7:5d:b7:2c:be:bd:80:f0:60:
3c:24:13:91:98:a2:09:06:fd:b3:22:b4:1d:52:c7:
2c:c8:d7:c4:4e:9c:48:20:6b:f3:87:cc:c0:b1:a6:
8d:0e:3d:c2:2c:86:8c:90:1e:a8:d5:21:8f:1c:ee:
b8:e5:c0:da:ad:a2:1f:14:3a:1b:61:cb:2a:1f:07:
50:4f:9d:4c:70:73:40:e7:20:80:da:42:5e:0c:56:
8f:5d:57:cc:a1:e9:2f:7f:e1:26:6c:24:11:f9:c3:
db:bb:41:40:0b:b3:f3:a0:60:5b:bf:59:a8:e0:53:
43:ad:16:81:2e:43:37:a1:de:ff:8d:52:05:9e:99:
ac:85:ff:52:17:de:f6:e3:22:a9:8e:09:08:57:88:
08:32:a5:b2:6c:8d:9c:ef:8d:25:ea:da:bc:89:2a:
ed:1e:15:84:19:a6:6d:5c:17:f0:7e:ad:39:04:82:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9D:B3:DA:0D:AB:B2:0C:B3:99:F6:19:C2:3E:C3:F3:D3:6F:B9:26
X509v3 Authority Key Identifier:
keyid:77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b1:41:bf:b4:8d:a8:c9:4d:52:51:b2:7a:f1:69:dc:86:a8:
58:44:d8:35:25:06:1d:e0:0a:f9:d2:57:8e:fb:fd:60:7d:3f:
06:3c:10:a8:aa:77:3c:b5:36:51:c0:0a:cc:3b:f5:41:80:a2:
cd:4c:3e:7f:85:fc:d9:4f:66:dc:c3:6e:54:3d:a5:1a:0e:b6:
08:d8:b2:52:7f:d9:b8:9a:2c:0a:e7:bc:97:8a:b3:fb:4c:42:
0b:5a:37:67:04:ed:31:e9:01:14:21:24:77:35:bc:a5:a5:92:
7b:98:2c:a1:fb:70:a9:be:79:71:78:b9:4d:c7:0d:bf:ec:4c:
41:37:e7:51:52:4f:d9:3e:ba:3e:78:7b:08:f4:d1:82:c3:87:
ec:db:b4:c4:ae:3c:b8:e1:33:c8:a8:23:90:91:ae:93:2f:b5:
7e:6f:82:48:47:61:5c:f1:5f:30:03:fc:85:29:f6:a3:e1:89:
cf:8d:4c:59:5b:dd:c2:49:60:f7:22:9b:7e:b8:14:ac:79:bb:
e5:32:0c:98:49:bb:da:3a:68:d5:a2:1e:eb:ea:a5:03:3f:0e:
5d:2b:60:33:a9:59:74:fc:3c:6f:d2:33:86:44:87:1b:27:1b:
36:ba:2c:bf:45:e2:d8:37:ab:95:74:79:04:34:6a:90:3f:2a:
a8:70:d4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:01:42 2025 by rpki-client