Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json)
Hash identifier: YZ906L9oTJ4QQ+lKS1FxPAxyy7Mus6wiQV6dY6Eys6U=
Subject key identifier: 87:FA:A0:05:D4:48:55:B6:A8:61:F4:D3:70:B5:E3:E5:B9:BE:2E:7A
Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96
Certificate serial: 0198D8BD3E66FDBC7886E40B35909DCB9518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 21:02:17 +0000
Manifest this update: Sat 23 Aug 2025 21:02:17 +0000
Manifest next update: Sun 24 Aug 2025 21:02:17 +0000
Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: epqtvOsfp+SuI5wS+cbBv9njzi5dK7yVtOf6ZCv2pls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:3e:66:fd:bc:78:86:e4:0b:35:90:9d:cb:95:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96
Validity
Not Before: Aug 23 21:02:17 2025 GMT
Not After : Aug 24 21:02:17 2025 GMT
Subject: CN=87faa005d44855b6a861f4d370b5e3e5b9be2e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:2a:94:eb:be:02:20:22:56:45:64:29:0d:
c8:20:4d:9d:46:3b:aa:c8:86:9b:a8:66:8d:79:b1:
c4:b5:5d:34:74:9e:a8:e1:3f:c3:de:05:d7:7a:75:
5d:13:8b:76:58:e9:87:6b:e7:72:e5:0e:76:9c:ca:
04:9e:08:3b:47:bc:cd:76:e9:aa:25:a2:a3:99:ca:
63:6b:3d:6e:42:42:52:e0:f1:5e:a1:7f:8f:df:34:
d6:cd:e8:c6:80:3f:b5:97:91:7c:2e:d5:a8:1b:21:
1a:c4:89:2b:7d:a2:1d:40:39:43:dc:ac:91:d2:dd:
2a:4a:c0:7b:ae:ab:97:fc:1b:cf:52:ff:13:ae:9c:
f9:dc:50:c6:5c:d6:9f:7a:37:9c:77:a5:33:43:40:
5f:44:6c:aa:d4:4e:bf:0f:dd:c8:c9:9f:3e:8f:1c:
6f:70:61:1e:6d:d6:11:89:3a:5e:6a:50:c4:d2:d6:
f9:8a:4e:b0:14:3d:64:dc:91:8d:f2:68:62:19:d2:
38:b1:95:5c:c5:20:6d:e1:72:b3:5e:d3:29:30:a7:
4e:1a:04:52:e4:31:41:61:21:35:b0:76:7a:1c:3f:
b3:6f:42:8a:08:08:8b:65:ee:ec:4e:f2:66:1b:cb:
5e:b5:53:20:4a:85:8e:b7:39:41:05:1c:6e:ef:bf:
ec:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FA:A0:05:D4:48:55:B6:A8:61:F4:D3:70:B5:E3:E5:B9:BE:2E:7A
X509v3 Authority Key Identifier:
keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4a:1f:ba:d1:36:e4:64:d5:a7:8c:b5:31:08:35:8d:c6:f9:
a1:93:31:ec:90:40:a4:40:26:f9:54:78:a7:be:f2:cd:3d:75:
27:62:ca:e4:80:8e:57:6f:f0:3c:e6:97:ca:93:61:bf:b0:7c:
16:f1:fa:49:40:bf:43:d5:63:fb:7d:85:60:25:68:82:92:20:
64:6c:27:86:d4:f6:dc:62:6c:ca:7e:63:af:6a:c7:a9:55:bc:
ed:c3:73:44:71:f7:cd:eb:88:dd:bd:85:a6:82:b1:42:5b:40:
81:b5:2c:48:57:5d:cd:c0:cc:1f:47:a2:07:32:e3:ca:c4:df:
54:b1:78:06:7c:85:19:f0:02:10:d9:fd:1e:2e:9f:19:cb:ad:
8e:33:54:96:e3:ee:2d:5d:c1:d7:6a:99:f5:90:46:e7:9f:d4:
bb:0f:c7:eb:8e:14:27:d4:47:f3:5e:f0:34:83:a7:5f:29:9e:
69:08:e4:d5:24:25:c2:34:c5:64:9d:ed:e9:11:5b:dd:25:da:
13:1b:62:28:85:82:7d:e8:4c:7f:96:09:5f:ca:83:35:b2:c0:
8c:34:9e:03:03:9d:a8:8f:ad:ff:f6:23:bc:76:d5:ad:3d:53:
68:1b:d5:67:6b:b3:4a:52:43:9d:b0:cb:fa:78:de:47:3d:f4:
b4:96:75:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvT5m/bx4huQLNZCdy5UYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MmY4ZTI1Nzg0MzczMmVjNWVkMGY2MWExM2FjYWJlZTYw
OTBhOTYwHhcNMjUwODIzMjEwMjE3WhcNMjUwODI0MjEwMjE3WjAzMTEwLwYDVQQD
Eyg4N2ZhYTAwNWQ0NDg1NWI2YTg2MWY0ZDM3MGI1ZTNlNWI5YmUyZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/EqlOu+AiAiVkVkKQ3IIE2dRjuq
yIabqGaNebHEtV00dJ6o4T/D3gXXenVdE4t2WOmHa+dy5Q52nMoEngg7R7zNdumq
JaKjmcpjaz1uQkJS4PFeoX+P3zTWzejGgD+1l5F8LtWoGyEaxIkrfaIdQDlD3KyR
0t0qSsB7rquX/BvPUv8Trpz53FDGXNafejecd6UzQ0BfRGyq1E6/D93IyZ8+jxxv
cGEebdYRiTpealDE0tb5ik6wFD1k3JGN8mhiGdI4sZVcxSBt4XKzXtMpMKdOGgRS
5DFBYSE1sHZ6HD+zb0KKCAiLZe7sTvJmG8tetVMgSoWOtzlBBRxu77/swQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIf6oAXUSFW2qGH003C14+W5vi56MB8GA1UdIwQY
MBaAFHcvjiV4Q3Muxe0PYaE6yr7mCQqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mNzQxMTEtNTQxMy00MDQ4LTlhYjkt
OTZjYWM3ODc1ODJiLzEvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9mNzQxMTEtNTQxMy00MDQ4LTlhYjktOTZjYWM3ODc1ODJi
LzEvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEofutE2
5GTVp4y1MQg1jcb5oZMx7JBApEAm+VR4p77yzT11J2LK5ICOV2/wPOaXypNhv7B8
FvH6SUC/Q9Vj+32FYCVogpIgZGwnhtT23GJsyn5jr2rHqVW87cNzRHH3zeuI3b2F
poKxQltAgbUsSFddzcDMH0eiBzLjysTfVLF4BnyFGfACENn9Hi6fGcutjjNUluPu
LV3B12qZ9ZBG55/Uuw/H644UJ9RH817wNIOnXymeaQjk1SQlwjTFZJ3t6RFb3SXa
ExtiKIWCfehMf5YJX8qDNbLAjDSeAwOdqI+t//YjvHbVrT1TaBvVZ2uzSlJDnbDL
+njeRz30tJZ1bg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:16:19 2025 by rpki-client