Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: V2jRmAN9CGfyGnqwymxyPMwQa6HYugkPrfhl6cVd3JU=
Subject key identifier: B5:6F:4A:4D:23:95:54:2E:BD:CF:67:43:47:04:31:31:D8:2D:0E:9A
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 0196B5FE0ECAC9A63FBBE152EA3E9F31FA44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 14C6
Signing time: Fri 09 May 2025 17:00:48 +0000
Manifest this update: Fri 09 May 2025 17:00:48 +0000
Manifest next update: Sat 10 May 2025 17:00:48 +0000
Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=)
2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: rOEHOg9avRURkwA6ekK/G4UCGRitsNPPsx45p7pVFOI=)
3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:fe:0e:ca:c9:a6:3f:bb:e1:52:ea:3e:9f:31:fa:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: May 9 17:00:48 2025 GMT
Not After : May 10 17:00:48 2025 GMT
Subject: CN=b56f4a4d2395542ebdcf674347043131d82d0e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:4b:9f:56:e2:8f:10:07:a4:56:82:e8:9d:
56:96:15:d1:25:29:5a:bb:e2:4e:7b:81:1c:43:a3:
c6:21:77:15:30:b0:2f:33:e4:43:31:51:bc:33:46:
b1:1e:df:d4:f2:ba:85:6a:b1:b1:09:ef:2e:88:44:
cc:6d:7e:76:82:b6:00:93:fb:f4:e1:bf:15:3e:0a:
00:cc:04:8f:97:ac:3a:d2:58:b3:d5:18:2b:19:a1:
a3:3a:c7:4b:c4:bc:ba:9b:cf:62:67:18:82:e1:b2:
c4:b6:99:1d:ca:ec:ec:35:00:6e:d7:08:ca:26:f2:
a0:b8:6e:74:e0:c3:53:da:0f:19:63:69:36:16:e4:
ec:60:5f:31:65:aa:5d:fd:40:c4:a4:53:06:23:29:
ad:24:b2:af:00:7d:c8:15:9f:79:ed:d0:9e:00:83:
6f:cb:22:ee:6c:a9:2a:21:fc:c3:88:6b:43:23:f2:
08:07:b5:3d:7c:bd:9f:a3:d2:00:e0:87:5b:d3:a1:
0d:48:b6:e5:ba:7a:67:73:86:e5:b1:b7:0e:4c:63:
bb:ee:15:f7:f5:87:a8:43:50:b7:2c:b1:01:06:d4:
9e:99:58:61:0d:e2:6c:3e:82:1b:d2:08:5c:78:59:
ad:2c:54:aa:0a:4a:87:e3:dd:be:75:b4:10:a1:6c:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6F:4A:4D:23:95:54:2E:BD:CF:67:43:47:04:31:31:D8:2D:0E:9A
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1d:01:6e:4e:a7:58:95:04:ae:b5:b4:38:28:48:35:48:42:
14:5f:17:b8:98:2c:19:03:9a:93:8a:ca:5e:6d:4a:7d:e3:dd:
e7:7c:32:25:27:eb:e8:c4:e0:61:44:6c:96:a8:3d:59:20:ae:
1e:8e:fa:97:3e:f9:8a:86:cb:95:9f:1a:57:8f:ab:29:48:e2:
92:61:27:7b:2b:61:02:67:f0:7a:3d:16:72:69:67:bf:b5:2f:
c8:66:a7:61:fd:50:ee:95:8b:a6:bf:8e:99:f5:9f:6f:52:ab:
d3:a0:c0:5b:72:35:3e:27:87:c4:81:57:fa:5b:93:c4:bf:62:
b3:dc:e8:d1:e9:01:38:80:3c:86:a4:be:06:9c:8d:16:99:e8:
9a:7d:07:f8:41:2e:7f:3d:bd:5c:49:99:d1:06:dc:46:97:a1:
9b:71:f9:18:8e:a2:d8:1e:fa:a7:82:37:f1:3d:6e:43:1e:da:
6d:f8:45:f0:f4:29:d0:b9:8e:25:c8:06:cc:3d:c4:0c:01:15:
21:fd:4e:c7:a3:05:33:81:31:f9:65:e8:88:5d:f3:8d:f7:32:
23:e7:27:75:c2:52:ae:42:a9:7f:a4:4f:19:14:20:38:6b:2b:
ab:18:d1:cb:27:b0:9c:ce:54:19:ae:22:38:8b:c2:f5:50:b2:
b3:04:05:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1/g7KyaY/u+FS6j6fMfpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjkyZGM2MzcxOGVlYmM3MDRhYjAwMmVjYjgxZDNkNTJk
NGQxYzMwHhcNMjUwNTA5MTcwMDQ4WhcNMjUwNTEwMTcwMDQ4WjAzMTEwLwYDVQQD
EyhiNTZmNGE0ZDIzOTU1NDJlYmRjZjY3NDM0NzA0MzEzMWQ4MmQwZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubpLn1bijxAHpFaC6J1WlhXRJSla
u+JOe4EcQ6PGIXcVMLAvM+RDMVG8M0axHt/U8rqFarGxCe8uiETMbX52grYAk/v0
4b8VPgoAzASPl6w60liz1RgrGaGjOsdLxLy6m89iZxiC4bLEtpkdyuzsNQBu1wjK
JvKguG504MNT2g8ZY2k2FuTsYF8xZapd/UDEpFMGIymtJLKvAH3IFZ957dCeAINv
yyLubKkqIfzDiGtDI/IIB7U9fL2fo9IA4Idb06ENSLblunpnc4blsbcOTGO77hX3
9YeoQ1C3LLEBBtSemVhhDeJsPoIb0ghceFmtLFSqCkqH492+dbQQoWxHuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVvSk0jlVQuvc9nQ0cEMTHYLQ6aMB8GA1UdIwQY
MBaAFHcpLcY3GO68cEqwAuy4HT1S1NHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEt
ZDljNWQyNjQxOWIyLzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEtZDljNWQyNjQxOWIy
LzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVR0Bbk6n
WJUErrW0OChINUhCFF8XuJgsGQOak4rKXm1KfePd53wyJSfr6MTgYURslqg9WSCu
Ho76lz75iobLlZ8aV4+rKUjikmEneythAmfwej0Wcmlnv7UvyGanYf1Q7pWLpr+O
mfWfb1Kr06DAW3I1PieHxIFX+luTxL9is9zo0ekBOIA8hqS+BpyNFpnomn0H+EEu
fz29XEmZ0QbcRpehm3H5GI6i2B76p4I38T1uQx7abfhF8PQp0LmOJcgGzD3EDAEV
If1Ox6MFM4Ex+WXoiF3zjfcyI+cndcJSrkKpf6RPGRQgOGsrqxjRyyewnM5UGa4i
OIvC9VCyswQF/w==
-----END CERTIFICATE-----
Generated at Fri May 9 20:34:42 2025 by rpki-client