Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier: XArV70QIZut9JgUQJqHWND7H7K94g8S/uc5Yh/u7qb4=
Subject key identifier: A5:4A:DF:D5:B5:D1:41:A3:88:7C:48:1A:B4:8D:71:1D:A7:86:6B:BE
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial: 0199FC58DBA1AE64C26DEEA81AA878E16F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:45 +0000
Manifest this update: Sun 19 Oct 2025 12:01:45 +0000
Manifest next update: Mon 20 Oct 2025 12:01:45 +0000
Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: IlHOQPxgx+huKcEdZOkbLjJNZ3tEraPgucuSyEbLMec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:db:a1:ae:64:c2:6d:ee:a8:1a:a8:78:e1:6f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
Validity
Not Before: Oct 19 12:01:45 2025 GMT
Not After : Oct 20 12:01:45 2025 GMT
Subject: CN=a54adfd5b5d141a3887c481ab48d711da7866bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:13:a5:17:f1:d6:79:47:d8:05:ab:7f:a9:
7c:f3:7b:d5:e8:c0:f9:ff:aa:a4:ec:83:67:55:6f:
a1:bc:0f:9a:85:9f:33:75:9d:cd:b4:86:8f:2c:03:
fc:fc:4e:b8:1e:d1:c5:82:46:5a:39:e1:95:e0:e3:
d1:ab:de:a3:5b:5b:48:2c:f4:62:a0:6c:cd:32:ad:
f8:ee:ee:00:6b:55:5c:9f:25:92:1e:25:bc:fe:e7:
31:77:be:37:17:98:e9:72:47:08:9c:6a:f0:e6:16:
88:f9:f4:a4:87:3d:92:9f:24:f4:9f:7a:69:9b:fa:
34:6b:88:16:83:f9:c8:22:55:bd:9b:12:f9:66:3e:
a6:4b:76:6a:f2:69:25:4b:f3:ae:e6:6f:e4:21:cd:
f1:36:5f:e2:22:73:da:04:c4:b0:90:dd:fb:0a:7a:
08:f8:1f:07:0e:0f:31:8b:35:ea:37:4b:28:26:97:
a2:1b:d7:d3:90:86:67:43:2f:8f:04:73:1c:01:4e:
cd:79:2c:21:47:ea:b0:37:53:26:bc:52:ab:e0:fe:
b1:cb:6c:02:5e:f2:7d:5b:16:22:67:bb:96:34:96:
2d:21:7b:d0:7b:3f:29:54:6c:08:03:f4:d0:37:59:
9b:af:bd:53:7e:62:97:77:a9:95:4d:8c:d7:33:4f:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4A:DF:D5:B5:D1:41:A3:88:7C:48:1A:B4:8D:71:1D:A7:86:6B:BE
X509v3 Authority Key Identifier:
keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2a:c0:ce:1e:ee:1f:f4:2a:de:27:e9:5a:51:ed:cb:92:89:
aa:36:26:a6:64:b9:84:81:cc:c9:db:5b:5e:80:c3:8d:d9:85:
44:15:f3:2a:e3:6f:c2:8b:b3:5a:0e:75:97:26:da:32:10:3e:
97:b8:fa:eb:0f:32:9a:f3:52:9a:42:ba:d7:33:a3:a6:6e:68:
d7:64:78:53:57:60:e8:fd:49:c9:56:0d:67:a0:d0:79:94:5a:
4c:d3:16:7b:d5:59:d8:7b:63:a6:0c:d1:d6:16:e7:7b:d3:36:
9a:63:de:d8:17:9a:93:3f:1a:54:de:d9:b3:a0:7e:83:cd:82:
ae:fd:f6:80:fb:c0:27:e1:f4:bc:db:28:f5:95:de:50:9c:7c:
7e:72:9a:c7:bc:af:b5:55:b5:8c:d8:9d:8a:74:ce:34:3d:ff:
11:08:fd:68:63:8a:dc:27:69:fd:aa:68:83:48:dc:a8:e6:39:
76:e6:c9:d1:64:cd:6e:d1:09:c7:15:9d:73:73:7c:91:ed:94:
34:39:89:12:ed:34:80:13:52:7f:fa:72:39:9c:a8:70:73:d9:
25:09:8f:a5:9f:18:75:9a:d4:61:5d:b1:81:a6:b0:32:df:bd:
6c:26:70:90:ff:0b:f8:66:d5:08:a0:d9:60:e1:aa:47:1a:a4:
f9:eb:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:04 2025 by rpki-client