Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: jqwwQ911TqnIF49MUOVsNu0ImSOe6qvMcWt393MbVZM=
Subject key identifier: D0:C2:D7:1B:E6:20:79:33:B7:FD:3F:2A:2A:7C:1D:DD:FF:F0:D5:B5
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 01976D7461A30CE7275199F6890257D80C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 1525
Signing time: Sat 14 Jun 2025 08:00:33 +0000
Manifest this update: Sat 14 Jun 2025 08:00:33 +0000
Manifest next update: Sun 15 Jun 2025 08:00:33 +0000
Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=)
2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: v4SeygYriT2e0md8giqtgbS9Cl6efeUwqT6iiN0HlMM=)
3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:61:a3:0c:e7:27:51:99:f6:89:02:57:d8:0c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Jun 14 08:00:33 2025 GMT
Not After : Jun 15 08:00:33 2025 GMT
Subject: CN=d0c2d71be6207933b7fd3f2a2a7c1dddfff0d5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:7d:1c:80:44:19:5c:71:c5:b4:9d:2b:66:
60:c3:a6:56:78:4a:b6:1d:48:d3:49:5b:4f:81:0b:
60:2c:ad:1a:ff:26:3d:b6:32:95:0b:58:e4:14:17:
2c:be:cc:cb:75:78:8f:ab:4e:ab:33:5f:72:3b:5e:
e2:92:95:01:a8:59:31:0a:e6:01:c9:ce:0b:34:29:
78:54:7f:7b:f3:14:64:52:09:ad:f6:ba:6c:6f:0a:
9e:7f:df:7e:90:d4:b3:d6:a0:26:fd:23:02:d8:71:
4d:7d:7f:3c:47:df:13:f1:ff:d0:c0:29:3b:dd:05:
c4:d7:b6:a1:53:31:4f:9a:d6:4a:1f:58:c4:e0:9d:
74:7d:f2:f0:44:b4:3c:0c:87:42:f1:de:cc:5f:ba:
ce:3a:0c:da:cd:3a:25:50:28:16:ce:63:66:a6:5d:
7e:f7:d9:82:de:e2:f9:43:1e:86:ae:bf:a1:25:73:
e1:63:db:f5:5b:d6:5b:49:b3:35:62:ab:e4:30:b2:
06:51:05:aa:dc:90:9e:a4:62:75:9a:49:63:9a:13:
e3:71:23:af:82:bd:ae:8b:70:98:84:1a:42:6b:89:
5c:4e:82:91:59:8c:59:3b:79:b2:8f:61:05:3a:70:
2d:86:59:e4:ca:1f:72:4c:99:9a:5b:a2:60:af:fe:
9c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C2:D7:1B:E6:20:79:33:B7:FD:3F:2A:2A:7C:1D:DD:FF:F0:D5:B5
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:de:b4:b7:86:63:73:38:04:11:6b:df:06:62:83:37:d5:49:
33:a8:99:89:aa:57:24:fa:a1:12:bf:4f:30:3f:6c:59:8e:48:
16:30:19:e2:6f:07:5e:1e:e6:06:ec:17:2c:20:a8:c9:19:65:
f0:aa:82:c5:2a:9d:29:df:42:43:8e:06:2f:6d:ae:20:dc:24:
73:8d:84:f4:8f:08:50:d1:b8:cb:14:74:78:80:38:18:ce:b7:
f6:0a:6f:a1:45:dc:e9:64:da:3c:fe:26:fa:e9:73:2e:6c:81:
56:22:02:46:ac:4d:fa:35:6a:bd:da:61:75:81:f2:eb:59:b2:
6c:4e:0c:06:51:b6:40:28:97:d8:ed:d8:e8:8c:d0:90:89:0f:
63:57:05:5a:c3:1a:5e:b4:3d:1e:d7:8f:58:fe:4a:eb:ba:3f:
fe:5c:16:57:85:5b:04:22:17:0c:08:d2:d4:cc:20:e3:93:6a:
c8:69:54:2f:5b:82:e2:08:01:f8:6a:c7:65:d2:c0:a4:80:5d:
32:dd:8b:1e:dd:79:7f:c8:06:aa:d6:e8:09:a4:3f:0e:75:1f:
18:a6:97:03:4a:a4:73:31:bb:8e:bd:52:19:25:61:06:78:f0:
18:9f:6d:87:fe:30:86:54:b0:dd:4a:52:c6:c4:53:7b:aa:49:
00:e0:c0:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtdGGjDOcnUZn2iQJX2AyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjkyZGM2MzcxOGVlYmM3MDRhYjAwMmVjYjgxZDNkNTJk
NGQxYzMwHhcNMjUwNjE0MDgwMDMzWhcNMjUwNjE1MDgwMDMzWjAzMTEwLwYDVQQD
EyhkMGMyZDcxYmU2MjA3OTMzYjdmZDNmMmEyYTdjMWRkZGZmZjBkNWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/l9HIBEGVxxxbSdK2Zgw6ZWeEq2
HUjTSVtPgQtgLK0a/yY9tjKVC1jkFBcsvszLdXiPq06rM19yO17ikpUBqFkxCuYB
yc4LNCl4VH978xRkUgmt9rpsbwqef99+kNSz1qAm/SMC2HFNfX88R98T8f/QwCk7
3QXE17ahUzFPmtZKH1jE4J10ffLwRLQ8DIdC8d7MX7rOOgzazTolUCgWzmNmpl1+
99mC3uL5Qx6Grr+hJXPhY9v1W9ZbSbM1YqvkMLIGUQWq3JCepGJ1mkljmhPjcSOv
gr2ui3CYhBpCa4lcToKRWYxZO3myj2EFOnAthlnkyh9yTJmaW6Jgr/6cIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDC1xvmIHkzt/0/Kip8Hd3/8NW1MB8GA1UdIwQY
MBaAFHcpLcY3GO68cEqwAuy4HT1S1NHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEt
ZDljNWQyNjQxOWIyLzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEtZDljNWQyNjQxOWIy
LzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsN60t4Zj
czgEEWvfBmKDN9VJM6iZiapXJPqhEr9PMD9sWY5IFjAZ4m8HXh7mBuwXLCCoyRll
8KqCxSqdKd9CQ44GL22uINwkc42E9I8IUNG4yxR0eIA4GM639gpvoUXc6WTaPP4m
+ulzLmyBViICRqxN+jVqvdphdYHy61mybE4MBlG2QCiX2O3Y6IzQkIkPY1cFWsMa
XrQ9HtePWP5K67o//lwWV4VbBCIXDAjS1Mwg45NqyGlUL1uC4ggB+GrHZdLApIBd
Mt2LHt15f8gGqtboCaQ/DnUfGKaXA0qkczG7jr1SGSVhBnjwGJ9th/4whlSw3UpS
xsRTe6pJAODAVg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:39 2025 by rpki-client