Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier: fx/2jXvsuPitDLcQcBNjy0Pk2qkQiGE+sNgrwTSnz1I=
Subject key identifier: 29:B0:58:E2:43:DF:44:6F:B4:AC:FE:00:FD:A8:54:21:77:D6:DD:D5
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial: 0196DAE68BFAB0324B119B2BD17A878A9F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number: 1540
Signing time: Fri 16 May 2025 21:01:04 +0000
Manifest this update: Fri 16 May 2025 21:01:04 +0000
Manifest next update: Sat 17 May 2025 21:01:04 +0000
Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: lmLI9vlUZQt4qAZuhHJVzTZaqie8efObW17Bl+Vx57Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:e6:8b:fa:b0:32:4b:11:9b:2b:d1:7a:87:8a:9f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
Validity
Not Before: May 16 21:01:04 2025 GMT
Not After : May 17 21:01:04 2025 GMT
Subject: CN=29b058e243df446fb4acfe00fda8542177d6ddd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:7b:56:cb:1d:dc:72:49:85:4a:0c:56:9d:
30:89:af:2f:2c:2d:ae:2f:d6:34:49:31:0c:59:c2:
fc:e8:2a:73:ba:cf:42:56:dd:46:0a:66:b4:41:0c:
44:64:b6:8d:ac:48:76:3b:c0:75:75:f5:12:3e:c0:
c3:6a:c1:ae:c3:a6:b7:59:a7:86:c1:1a:af:93:c3:
69:e4:da:ce:03:82:f5:c9:b5:f0:55:52:0d:a9:e5:
57:b4:94:c2:f3:d3:4f:be:68:46:4d:24:ff:8f:32:
1f:9e:85:db:b6:1e:bd:ff:5c:f3:82:00:bd:52:4c:
0c:0e:1d:66:d2:e0:bd:fa:2d:a8:83:08:77:ff:d5:
ea:b0:51:18:e0:01:25:4a:80:07:6e:d9:c7:76:f3:
fe:07:47:42:c6:79:b4:dd:cc:4b:f3:1d:c2:35:7e:
cb:2d:41:d4:2a:c2:d3:c3:cc:3a:8f:39:19:46:49:
ec:8d:d6:86:f2:9f:d5:44:55:31:76:11:1d:89:95:
e7:1f:17:44:af:8e:60:a8:dd:9f:44:52:04:b6:4a:
3d:2d:34:20:30:9d:de:5e:da:aa:c7:dc:75:2b:79:
8b:a8:41:f5:de:43:80:34:29:b6:e2:1d:0e:18:8d:
2c:69:11:63:67:16:ca:ff:d1:be:fe:b3:98:8c:04:
6e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B0:58:E2:43:DF:44:6F:B4:AC:FE:00:FD:A8:54:21:77:D6:DD:D5
X509v3 Authority Key Identifier:
keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:04:80:58:c4:fd:3d:ca:7a:46:18:3c:b4:f4:ce:e5:10:15:
fe:fa:5a:1d:8b:97:be:00:64:ae:c6:fe:a7:f6:2b:61:81:d9:
53:f5:14:84:89:0a:dd:be:8d:58:46:8c:14:17:f8:32:49:aa:
dd:01:4d:72:fa:16:f6:f2:cc:d7:7d:cc:80:61:c3:a3:ee:4d:
83:7b:15:9f:9c:30:1f:28:0b:31:17:a4:cb:50:fc:a0:78:fd:
7a:9f:5b:fc:50:07:b8:3b:6c:c1:4b:74:f0:79:01:54:be:63:
b2:aa:0a:0f:95:96:3f:04:84:51:73:c8:c6:46:85:30:af:d3:
af:c2:ae:5e:a9:cc:d4:d5:d0:ec:5a:b6:87:2a:e7:51:47:f3:
c0:07:82:a8:d1:76:03:00:c6:13:73:73:79:ce:9c:d1:74:5b:
ff:bf:9f:3a:50:52:83:c8:a0:d2:b5:03:fe:53:f6:4b:fd:ac:
08:fd:c3:56:1e:3c:2d:e2:41:f9:32:c3:f1:a4:7e:46:d5:4c:
2c:7b:9f:85:a6:54:e0:0d:7e:90:e5:a0:0e:35:17:e6:81:d6:
9f:41:7d:2f:c2:4e:60:f7:85:e6:38:cf:e7:d0:d3:c3:f2:02:
5a:f2:b1:f2:ce:51:41:c7:ac:1c:f3:fc:b3:94:33:8e:a7:fb:
c7:e4:53:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZba5ov6sDJLEZsr0XqHip85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MmY4ZTI1Nzg0MzczMmVjNWVkMGY2MWExM2FjYWJlZTYw
OTBhOTYwHhcNMjUwNTE2MjEwMTA0WhcNMjUwNTE3MjEwMTA0WjAzMTEwLwYDVQQD
EygyOWIwNThlMjQzZGY0NDZmYjRhY2ZlMDBmZGE4NTQyMTc3ZDZkZGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+V7Vssd3HJJhUoMVp0wia8vLC2u
L9Y0STEMWcL86Cpzus9CVt1GCma0QQxEZLaNrEh2O8B1dfUSPsDDasGuw6a3WaeG
wRqvk8Np5NrOA4L1ybXwVVINqeVXtJTC89NPvmhGTST/jzIfnoXbth69/1zzggC9
UkwMDh1m0uC9+i2ogwh3/9XqsFEY4AElSoAHbtnHdvP+B0dCxnm03cxL8x3CNX7L
LUHUKsLTw8w6jzkZRknsjdaG8p/VRFUxdhEdiZXnHxdEr45gqN2fRFIEtko9LTQg
MJ3eXtqqx9x1K3mLqEH13kOANCm24h0OGI0saRFjZxbK/9G+/rOYjARuwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmwWOJD30RvtKz+AP2oVCF31t3VMB8GA1UdIwQY
MBaAFHcvjiV4Q3Muxe0PYaE6yr7mCQqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mNzQxMTEtNTQxMy00MDQ4LTlhYjkt
OTZjYWM3ODc1ODJiLzEvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9mNzQxMTEtNTQxMy00MDQ4LTlhYjktOTZjYWM3ODc1ODJi
LzEvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgSAWMT9
Pcp6Rhg8tPTO5RAV/vpaHYuXvgBkrsb+p/YrYYHZU/UUhIkK3b6NWEaMFBf4Mkmq
3QFNcvoW9vLM133MgGHDo+5Ng3sVn5wwHygLMReky1D8oHj9ep9b/FAHuDtswUt0
8HkBVL5jsqoKD5WWPwSEUXPIxkaFMK/Tr8KuXqnM1NXQ7Fq2hyrnUUfzwAeCqNF2
AwDGE3Nzec6c0XRb/7+fOlBSg8ig0rUD/lP2S/2sCP3DVh48LeJB+TLD8aR+RtVM
LHufhaZU4A1+kOWgDjUX5oHWn0F9L8JOYPeF5jjP59DTw/ICWvKx8s5RQcesHPP8
s5Qzjqf7x+RTyQ==
-----END CERTIFICATE-----
Generated at Fri May 16 23:20:20 2025 by rpki-client