Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: hzo+XoDUDAPoIAKcrwuehFnxCT7AdZ8VxrHablJrOsc=
Subject key identifier: 05:B2:06:4F:0A:73:D0:01:32:00:A0:88:E7:60:DA:BB:BF:AE:6B:80
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 01987BD28C6B67396140CAC41D3931C4089C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 15B1
Signing time: Tue 05 Aug 2025 20:00:52 +0000
Manifest this update: Tue 05 Aug 2025 20:00:52 +0000
Manifest next update: Wed 06 Aug 2025 20:00:52 +0000
Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=)
2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: JX7B5u1Any0I/VtI7yXDC/1YMM4IBQNAZBzjfXri6gU=)
3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:8c:6b:67:39:61:40:ca:c4:1d:39:31:c4:08:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Aug 5 20:00:52 2025 GMT
Not After : Aug 6 20:00:52 2025 GMT
Subject: CN=05b2064f0a73d0013200a088e760dabbbfae6b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8b:f0:75:94:4b:56:4c:38:d7:d5:9e:7b:1f:
02:62:37:ba:5b:8b:31:49:a7:4a:95:a8:b9:cf:1f:
f7:2d:16:d8:d1:0a:b4:c0:e6:42:a7:77:50:cc:3c:
c6:ed:88:88:7b:bf:b3:c3:2e:81:a1:10:87:0d:b8:
73:75:1f:78:41:7b:2e:ec:8c:36:59:ff:96:b3:de:
8a:34:c4:ef:42:16:cb:ed:39:b9:8f:32:97:b8:9b:
36:42:8a:7c:cd:8b:ac:d2:8e:be:25:6c:89:e2:4e:
3a:56:6e:ee:2f:9e:d1:43:eb:7f:99:7d:b0:e8:f2:
2c:27:e7:42:e3:b1:f3:91:83:0a:94:fe:33:1d:04:
23:0b:b8:2e:2b:1a:36:82:4c:c0:35:f5:3a:bf:1b:
4c:01:6a:6a:80:50:77:16:07:50:d0:38:6c:1b:b6:
5e:3d:3d:45:05:1f:08:63:25:ff:35:7c:69:fa:ab:
c0:ed:4d:38:b9:dd:d7:94:f6:1a:61:78:8d:e6:d3:
99:87:a0:94:a8:ad:50:51:a3:3f:af:9a:86:ed:12:
f5:c5:17:4a:c0:4f:6b:eb:a4:9b:68:70:81:e7:1b:
fd:6b:1c:ba:72:26:1b:0f:0d:51:64:63:06:89:70:
fe:bc:38:e8:10:5e:74:b7:df:05:45:01:a4:b0:22:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B2:06:4F:0A:73:D0:01:32:00:A0:88:E7:60:DA:BB:BF:AE:6B:80
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:e4:15:a1:2c:d3:a1:9d:a4:ca:da:8e:39:e8:60:22:b4:34:
e2:79:b8:c0:f8:61:ab:60:c2:38:8b:09:f3:1b:cb:8f:ff:1b:
c6:43:7d:b4:f2:00:b6:04:e4:0b:a2:2a:9b:98:52:c8:b5:9d:
68:52:01:01:e6:b7:a5:50:39:54:2b:ff:af:b9:9e:7a:8a:e9:
55:da:b9:94:7a:90:a2:b9:8e:e8:5f:d0:dd:4c:05:4b:12:13:
c4:1d:99:4d:20:44:f4:99:40:d6:e2:0f:7c:5f:52:37:7e:11:
11:ad:a6:1b:1c:c5:d8:09:18:21:d7:aa:5d:b4:8f:25:6a:da:
41:4b:dd:3a:a6:78:99:b1:7f:23:ec:df:56:95:6b:7d:d1:03:
99:12:57:18:21:b3:0a:2f:c0:a6:48:e3:85:01:8d:cb:6b:c7:
37:8b:52:72:10:aa:63:66:57:7d:47:5b:b9:e7:f1:b1:dc:d4:
e0:5e:8a:50:46:36:00:8a:f3:7f:ae:d6:07:36:7a:85:6b:83:
a6:a7:56:be:1d:a4:e1:c2:a0:3f:34:c0:b7:8b:ed:41:73:2c:
4e:ab:13:d0:a1:16:12:cb:07:03:0f:25:fc:52:f2:82:21:11:
6f:a2:aa:80:db:1e:16:f4:2e:4d:ce:de:8a:3a:3d:f3:0b:05:
96:29:12:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:03:41 2025 by rpki-client