Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: UVITys0r2CJXD3EBU73vWavzrqOwDZPRrOCVc0uAESY=
Subject key identifier: D2:B4:62:99:43:9F:81:71:56:C2:06:CD:4B:A0:B4:3F:F3:80:71:06
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 019681D93833BE8BF391833FF8E7DA9C1834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 14AB
Signing time: Tue 29 Apr 2025 14:00:18 +0000
Manifest this update: Tue 29 Apr 2025 14:00:18 +0000
Manifest next update: Wed 30 Apr 2025 14:00:18 +0000
Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=)
2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: fgul5L1MGUTQJvOih0+0E8eAuceMCq+lehsEZMHbxEc=)
3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:d9:38:33:be:8b:f3:91:83:3f:f8:e7:da:9c:18:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Apr 29 14:00:18 2025 GMT
Not After : Apr 30 14:00:18 2025 GMT
Subject: CN=d2b46299439f817156c206cd4ba0b43ff3807106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d3:b7:46:22:f9:3e:6c:6c:a0:81:0f:41:6b:
0b:be:cb:66:4a:66:0c:5a:17:32:80:bf:10:f2:4e:
ba:a1:34:31:f3:e2:3c:e3:12:36:74:81:a4:71:f5:
d6:34:d7:20:f3:ee:79:f7:04:50:fc:49:26:1f:fa:
18:ed:2a:1f:95:f7:d7:6b:42:2d:f1:c3:8e:18:c8:
b7:3c:33:88:ac:ee:22:47:23:5b:37:2d:3d:28:47:
cf:6f:79:f5:b4:f2:e5:a1:06:fd:31:db:2c:b5:06:
27:b0:33:cd:84:41:fe:96:2a:bc:f5:3b:2c:ca:a2:
06:d2:98:cf:51:e2:4b:69:bf:68:0a:67:ae:0e:f3:
7f:20:c8:91:90:09:33:03:52:0d:0a:05:6a:ff:0e:
41:7f:33:7e:79:39:af:d8:31:25:57:cc:bb:e2:35:
6a:53:6e:aa:eb:19:ba:bd:b2:3c:ed:05:6c:ee:8d:
42:fd:50:a3:47:4a:c1:5f:df:ea:11:6c:a0:6b:ab:
7d:38:a7:ff:17:03:fb:af:cd:84:dd:9a:86:a7:20:
87:c3:2a:91:8a:43:b8:6f:d7:58:16:9a:d0:d5:4e:
be:12:21:01:86:84:22:59:58:d3:c9:79:52:8d:5c:
7c:59:6a:f4:b6:df:1a:00:14:ef:80:f6:ae:f2:d3:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B4:62:99:43:9F:81:71:56:C2:06:CD:4B:A0:B4:3F:F3:80:71:06
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ad:8c:61:d6:6c:21:52:a9:3b:2a:7b:81:db:3e:55:8c:e6:
28:d0:d7:ad:49:cc:52:f7:4e:9a:ee:70:ad:58:3e:c9:90:7a:
b1:63:6b:4a:d1:0a:3b:55:d9:05:bc:55:a2:cd:ec:78:26:02:
2a:50:99:a2:37:62:06:01:cc:98:ff:e5:16:0e:cc:93:35:fb:
cb:ef:3d:94:79:e7:b6:6a:13:a4:5a:0e:c4:bc:e5:3f:d2:30:
3b:6d:8a:20:1c:a8:50:a2:00:ef:92:05:ce:7b:f9:d6:f9:3f:
cc:0f:0f:ae:ed:df:9d:82:60:bc:91:60:ca:cd:f8:56:06:e9:
6e:92:9d:fe:84:19:43:51:fb:fe:fa:9a:7c:e8:6c:70:e7:30:
9f:93:75:64:d9:29:40:6c:6e:18:99:db:18:73:d4:33:79:97:
bc:49:7a:e8:aa:08:e9:67:0a:9f:2c:3b:63:be:45:6a:60:e8:
35:24:04:37:2b:a8:0a:14:a7:96:33:53:23:85:ef:07:0d:83:
fe:c0:30:bc:ac:9c:3c:26:10:33:c1:6b:9c:e7:ee:ad:46:7b:
8b:c3:62:b0:03:07:16:3e:e5:e7:52:d3:27:8c:cf:85:b7:7e:
10:85:19:07:4b:be:3a:fe:17:d8:a0:37:9a:12:8b:ac:9f:a9:
8f:ed:56:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:15:36 2025 by rpki-client