Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: bT0J9Q4xA/rbge+Le3fC8+L6FgEGT6bAinhghjbSWpY=
Subject key identifier: 11:F4:EF:DA:F1:BC:98:1C:D0:53:02:85:1B:2D:AE:27:94:2E:A9:46
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 0198D69880091E2B16AE956D6D4A5DC8992F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 15E0
Signing time: Sat 23 Aug 2025 11:02:55 +0000
Manifest this update: Sat 23 Aug 2025 11:02:55 +0000
Manifest next update: Sun 24 Aug 2025 11:02:55 +0000
Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=)
2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: LmFhAuMl+ns6pa5EeKF9TpEgjh9GBPYHTZ92r/gSigE=)
3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:80:09:1e:2b:16:ae:95:6d:6d:4a:5d:c8:99:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Aug 23 11:02:55 2025 GMT
Not After : Aug 24 11:02:55 2025 GMT
Subject: CN=11f4efdaf1bc981cd05302851b2dae27942ea946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:10:74:e4:d4:7a:77:18:4b:c7:08:a3:56:
e2:80:d6:13:b2:a7:e5:19:02:91:33:38:d6:f6:31:
99:25:1f:f2:f7:31:c1:6e:d2:77:51:19:eb:4d:b8:
44:82:5c:ec:b7:60:9c:ee:f2:5a:a5:0f:bd:95:27:
e4:b3:c5:2e:fb:45:ec:cc:62:67:d3:a9:e8:ae:0c:
75:c5:45:7c:f5:ad:1a:ca:32:f7:cc:97:35:38:71:
41:6b:a4:55:61:b1:01:65:75:4e:e7:00:5a:6d:07:
55:c5:ca:8c:87:a2:a5:ca:f8:e8:0c:de:06:a0:36:
aa:2f:8b:b2:cf:03:d4:0d:40:01:f9:1e:4b:17:12:
52:cd:c2:56:78:e0:bd:bb:19:3e:f1:ae:d0:f5:03:
75:24:7b:25:b5:6c:96:e4:81:72:85:ef:f0:16:b1:
cd:94:05:56:a5:98:25:2b:b0:d5:89:8c:d9:41:eb:
f7:07:2d:42:cc:07:1e:bc:22:70:3b:be:4a:8b:cd:
0a:22:2c:69:87:3f:d6:4e:1e:be:cf:45:03:e4:28:
03:27:47:d9:d6:ab:d2:c0:fc:0e:a1:ae:2b:01:8a:
28:12:7a:4d:8d:0c:fb:f6:c0:de:8f:c0:f0:d9:d5:
30:2c:b1:ef:63:ea:bf:13:d4:14:d9:a5:03:5d:db:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F4:EF:DA:F1:BC:98:1C:D0:53:02:85:1B:2D:AE:27:94:2E:A9:46
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:91:4a:96:8b:75:cf:0f:67:fd:99:17:2e:d3:a0:f2:56:ec:
3b:20:31:43:6b:a1:a9:9d:29:d4:56:b5:87:7d:d4:dd:ce:64:
f5:15:c8:57:3d:16:d7:af:8e:22:dc:9d:3f:e5:7a:84:25:af:
80:c8:fd:ea:41:f2:d8:dd:86:3f:f6:eb:8e:b4:64:35:67:79:
3e:08:d1:c6:c4:a4:c2:0f:8c:59:dc:46:d8:2c:6c:a8:46:22:
d2:f8:34:ae:fd:c5:ee:cd:f6:72:41:dd:1d:b1:2c:cf:f5:6a:
5d:fe:97:38:22:1b:ab:58:2a:a7:e7:3a:3d:4a:b9:f5:87:ae:
71:8c:a9:4b:f8:06:9d:67:80:b1:43:6c:4b:55:ad:55:a2:59:
fd:2f:cd:9a:d8:58:bf:4a:36:46:7e:fa:df:c1:23:c1:8d:c5:
c2:d5:05:66:a2:1a:66:ed:53:e0:40:1d:38:65:da:1b:7a:83:
c7:e6:27:15:d4:be:f2:1b:f5:c6:12:bc:d8:24:c4:e7:72:95:
c2:fc:eb:a2:dc:1f:85:d4:8d:a8:b4:e8:f5:18:83:ae:b2:12:
82:45:5a:d4:54:c9:04:46:be:0b:a0:d8:01:49:0b:ed:63:cd:
39:99:64:d5:16:e8:e1:92:e7:f3:ea:94:ac:59:34:91:60:da:
b3:37:f0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:55:59 2025 by rpki-client