Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: gtoa8ky9TB104GTMkjTXd74W2drC8UxZRhJqou+9NRA=
Subject key identifier: DE:E8:35:68:6B:3A:A9:67:E3:4A:C1:4E:4F:1D:69:A6:20:9C:5E:4A
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 0197B6D7B7D288027A33E26A7FAD3ECA4FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 154B
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=)
2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: n9aNTC5ZA1QAXlXTLH6Op0MmxBa9L4gmxZDCS+ezwVU=)
3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:b7:d2:88:02:7a:33:e2:6a:7f:ad:3e:ca:4f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=dee835686b3aa967e34ac14e4f1d69a6209c5e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:a7:9f:21:26:f8:63:e4:29:1b:87:17:1d:
08:28:56:38:8b:55:a4:8a:c3:18:5d:a4:b4:6a:34:
e9:c2:43:7f:fb:a7:5a:d8:05:41:7f:4e:0f:67:e0:
d1:12:48:41:53:a2:42:35:5b:ef:c9:4b:57:85:bd:
ea:c2:1d:d5:73:4f:1e:f7:21:9b:1b:b4:0c:be:1d:
ad:5b:d3:31:f8:ba:18:30:d7:50:99:e2:f6:0a:6d:
8b:76:f2:34:a9:a1:56:22:f9:8e:b7:b6:f5:a2:88:
81:b3:49:28:58:97:45:98:46:bd:81:3b:0f:2b:75:
f8:64:e5:13:57:69:2a:5e:e3:3f:64:d0:6c:15:72:
6a:2b:50:95:1f:8a:2e:81:05:5e:51:34:16:48:bd:
86:da:cd:1e:83:5b:83:79:47:21:0a:bc:fc:89:3d:
be:58:34:44:34:a4:9c:68:a9:31:62:b5:54:df:a7:
05:d7:ed:d5:71:b2:65:b2:ee:a1:f6:24:24:ae:85:
e8:39:64:a8:ab:88:3d:7c:0d:ab:93:17:10:47:03:
18:34:b8:a8:b5:61:54:4a:f6:02:1b:1b:00:39:a5:
4c:2a:50:5c:cb:54:cd:ce:ff:ce:0c:19:1b:5e:5e:
cf:8b:ea:b4:c0:44:11:ff:d0:8a:53:38:7c:e9:f5:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E8:35:68:6B:3A:A9:67:E3:4A:C1:4E:4F:1D:69:A6:20:9C:5E:4A
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1a:19:af:3e:19:0a:0b:f7:c3:3a:54:da:be:49:d0:23:88:
42:ca:64:22:7c:a0:cb:12:da:a7:c4:26:e3:9c:c5:9d:6b:47:
9f:78:6b:0c:1d:02:5d:81:03:f9:bb:f7:fc:91:5f:a4:1b:68:
37:a6:e8:bc:19:a6:58:27:f1:fa:bf:44:46:b1:4e:0a:30:33:
b1:81:c8:31:e1:7f:c4:3a:c8:57:f5:20:99:d7:ad:2b:b4:64:
71:97:27:e9:c5:df:4d:fb:80:46:bb:6e:2a:06:01:2f:68:f9:
a5:8c:05:e9:99:be:6f:55:cf:88:19:fd:3e:06:4a:dd:44:a4:
4e:74:63:b4:21:7b:bd:28:4d:b8:06:a3:55:a2:65:da:9e:5b:
0e:33:5f:d0:bc:c5:b9:26:89:8b:22:49:f9:c5:4f:c7:5b:eb:
09:94:43:27:4e:5c:85:72:c9:0a:12:2d:09:79:d6:ae:14:cf:
b0:ec:7b:2e:3e:70:ff:e2:f8:5d:2e:95:4b:5e:8f:82:9e:61:
de:22:f6:8c:78:bf:63:1a:21:e5:0c:70:50:c6:40:ff:f1:17:
5f:7b:2e:84:16:f5:dc:ab:e5:3b:ec:2d:f0:68:19:73:b1:1c:
93:88:19:20:45:21:0c:cf:53:c4:6a:05:b5:3e:1a:f4:50:92:
1d:2e:b4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:38 2025 by rpki-client