
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
File: dy9i9-iZgXRBGAk19CuCo5mAotw.mft (raw, json)
Hash identifier: S5Py+zl5PvGfc3zTMJu6GzbdmUXrqGkxsDPzZH/LqTg=
Subject key identifier: 10:EC:6F:BE:92:04:3B:D5:72:AF:23:93:7C:DA:DB:4C:66:89:61:D0
Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Certificate issuer: /CN=772f62f7e899817441180935f42b82a39980a2dc
Certificate serial: 0198D698898EDA480880734E48F7CE6C3607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
Manifest number: 04F4
Signing time: Sat 23 Aug 2025 11:02:57 +0000
Manifest this update: Sat 23 Aug 2025 11:02:57 +0000
Manifest next update: Sun 24 Aug 2025 11:02:57 +0000
Files and hashes: 1: dy9i9-iZgXRBGAk19CuCo5mAotw.crl (hash: fU4UfM9D2Othwhqyoy3e50GZ49N0EmrleCavm7X5gd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:89:8e:da:48:08:80:73:4e:48:f7:ce:6c:36:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc
Validity
Not Before: Aug 23 11:02:57 2025 GMT
Not After : Aug 24 11:02:57 2025 GMT
Subject: CN=10ec6fbe92043bd572af23937cdadb4c668961d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:aa:f6:82:fd:b2:df:f6:e3:51:29:27:c8:f0:
81:7f:2b:d4:75:c7:9e:09:4f:83:63:e2:2e:49:cd:
b1:55:8b:ff:62:cb:06:b3:b1:8c:b4:51:7d:28:83:
ee:c0:79:ea:92:59:dc:49:28:08:fb:eb:2b:ce:d8:
3b:26:f6:f7:28:90:9f:cf:1f:16:bd:91:6b:e2:f4:
76:6c:e7:9c:46:c2:ca:78:09:fd:da:a1:9a:c3:3e:
18:25:d0:dc:98:47:63:5d:f3:f0:87:4a:01:9e:53:
91:82:e6:60:33:49:33:63:ef:fb:05:28:30:8e:9a:
b9:2f:00:fc:f3:d0:39:f7:11:11:8b:b4:c8:af:f8:
74:16:d0:c6:fb:83:2e:12:a2:40:54:c5:15:5c:7a:
10:16:26:5e:9b:3c:6c:41:1a:cf:21:78:41:65:96:
5f:f6:e1:9f:ff:16:d0:54:8b:db:10:05:8c:12:04:
61:48:de:c9:35:2f:d5:6d:e3:7c:fa:6b:20:a8:65:
0d:91:c2:df:5a:33:f2:3d:81:83:17:4f:df:52:98:
8e:ee:9f:01:91:bb:17:23:34:a4:bd:e8:28:89:8b:
3c:49:6a:c5:bb:64:e5:d8:43:0e:bd:2d:11:3f:45:
1a:95:67:45:d5:99:9c:e5:07:66:2c:24:b1:b4:72:
11:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:EC:6F:BE:92:04:3B:D5:72:AF:23:93:7C:DA:DB:4C:66:89:61:D0
X509v3 Authority Key Identifier:
keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cb:16:18:bb:ee:18:cf:0b:5b:5b:a5:ad:e2:b9:d3:c3:c9:
08:98:af:ef:2b:af:d6:e6:62:9f:25:d2:ab:b9:84:d9:aa:ea:
95:43:a2:9c:63:51:47:da:2f:28:16:2b:ae:b6:dd:1e:a5:05:
e7:3b:a9:94:4e:a2:a1:2a:d8:df:db:d0:d1:62:8d:69:a2:17:
2a:6c:d4:d0:76:9c:e6:4e:50:1f:9b:85:eb:53:b7:70:ea:af:
fc:59:51:b1:62:f8:6a:29:ac:3a:16:af:e7:fa:f2:cc:71:03:
c2:96:cc:b0:25:c6:c4:f7:29:f4:58:7c:c6:02:5c:0f:72:ef:
56:a2:6e:5b:34:cd:59:7c:e6:e2:6d:bc:c4:dd:87:cb:62:23:
ca:fa:5e:c7:24:93:df:cf:5e:4e:34:8c:0f:0d:9f:d6:e8:4f:
82:18:20:86:a0:cf:5b:28:cc:4e:bd:fa:24:a0:f3:f6:72:13:
bd:9c:c8:91:0d:be:06:1e:a1:46:41:ed:02:54:62:90:a6:da:
90:14:63:06:ea:83:3c:5f:b1:a4:a0:80:ec:3e:de:03:34:13:
a3:d4:59:00:7e:6c:d8:84:bd:71:1a:75:be:27:0b:b8:db:4a:
27:cc:06:6f:3e:35:f3:c6:0d:aa:df:cb:39:d0:30:ad:25:60:
3c:e2:9a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:05 2025 by rpki-client