Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: PXnny4+RWYlUbzGSa1t1f4IcD/ncIfVsOGiMsgLqimo=
Subject key identifier: B0:7D:D6:EE:FE:05:76:53:1B:54:33:7A:3D:41:39:77:AF:34:CD:31
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 019A4EF4152F246BC71B833B26541E11B01F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 16A3
Signing time: Tue 04 Nov 2025 13:00:10 +0000
Manifest this update: Tue 04 Nov 2025 13:00:10 +0000
Manifest next update: Wed 05 Nov 2025 13:00:10 +0000
Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=)
2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: KLqhRxScbzpMKzJmj27LOAUxj4zZa3lEbOsuqsDpln0=)
3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:15:2f:24:6b:c7:1b:83:3b:26:54:1e:11:b0:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Nov 4 13:00:10 2025 GMT
Not After : Nov 5 13:00:10 2025 GMT
Subject: CN=b07dd6eefe0576531b54337a3d413977af34cd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:28:13:b6:a0:e5:eb:20:93:93:5f:f7:92:8f:
2f:28:16:3b:48:f2:16:95:76:5c:9a:2d:52:e2:f3:
a5:7a:34:04:ad:68:de:46:75:f6:ab:15:19:4e:23:
1b:30:12:4a:09:60:bf:7c:92:38:a6:88:33:24:b4:
e7:e1:30:43:de:57:95:66:4f:4e:92:8a:70:03:cf:
01:c3:a5:ac:47:f3:f0:a0:c9:1e:1a:7e:45:66:f5:
70:bc:d0:b7:19:31:a9:e5:68:26:4b:1a:fe:38:28:
6a:e2:d4:56:83:28:b7:a4:f9:0a:01:12:45:cf:7c:
b8:91:48:4b:76:eb:1a:0b:ad:b3:e0:e9:b4:f6:32:
3c:bf:77:ab:08:25:f5:12:07:d6:ba:48:3d:bf:64:
52:3b:83:04:50:82:15:2f:13:6d:fb:f9:a1:45:fc:
ff:d1:85:c2:c5:ee:5c:fa:24:a7:df:a0:4e:7e:fd:
cd:d0:7c:7e:52:d6:07:8e:89:4d:17:62:9b:c1:07:
55:a3:91:d0:62:62:92:f1:75:69:4e:eb:e1:d5:bb:
83:8a:1e:80:f0:b2:64:20:45:7f:b4:49:3f:da:d1:
fc:40:c3:f1:80:73:7c:24:b2:34:53:18:ff:8b:22:
76:64:c3:b3:31:1d:4c:86:74:55:72:ca:5d:f6:25:
fa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7D:D6:EE:FE:05:76:53:1B:54:33:7A:3D:41:39:77:AF:34:CD:31
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1f:ec:7e:ac:59:95:d9:c9:6c:b9:ac:75:cb:b0:e8:4d:70:
d0:dd:cb:a2:f0:ab:26:0f:2a:7a:60:54:16:cc:06:1b:09:56:
a8:12:d2:ed:55:12:26:ef:ce:d1:3b:1c:0d:63:f4:05:87:34:
cb:9f:26:32:f6:9b:28:e8:22:87:89:21:14:c6:c7:28:ff:df:
4f:14:96:31:d3:3e:e5:ab:ec:52:33:88:dc:0b:5b:c6:f0:2c:
a0:7a:e5:00:14:84:32:c6:d9:68:98:8a:51:a4:ef:25:a9:f1:
2a:c2:1e:3f:4d:00:1e:83:cb:4b:69:cd:d6:1e:48:46:7e:f5:
d6:ea:eb:f0:76:df:4f:42:5f:97:d2:75:99:a7:7a:98:07:4d:
4d:ee:74:94:ba:a6:59:bc:ce:42:94:7c:f9:d0:8b:ca:f2:84:
1d:39:01:d5:9c:39:74:36:15:53:8d:93:a5:fe:d0:aa:92:6a:
b7:4a:23:dd:d1:c2:9b:5d:94:3d:10:62:6a:ac:64:fd:03:27:
69:9f:ca:cc:1e:6c:15:11:55:4d:c5:08:f3:9c:61:bf:ed:4e:
28:a7:f2:a4:a5:60:a8:20:6e:3f:f9:e3:ba:db:d7:99:34:f9:
19:05:be:79:ca:b4:c4:03:a6:66:07:ce:27:04:f7:f6:5b:9f:
c1:75:a2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:17 2025 by rpki-client