Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: QvCVuwpz6ulDw3dmP0y1qdMcrHf/ZMpA+W09VNRN2Rs=
Subject key identifier: B4:48:4B:BF:A5:9B:65:CF:C0:B4:E4:5B:53:43:56:B9:85:B7:93:E5
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 0199FBEB450D436F38DE9566C4BE869DFF39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 1678
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=)
2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: Ki/zQ8exX8bqxEXIn3lvvW+uhcbJB68KmMnaaSiYocA=)
3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:45:0d:43:6f:38:de:95:66:c4:be:86:9d:ff:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=b4484bbfa59b65cfc0b4e45b534356b985b793e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:88:de:f7:9b:81:a6:45:12:77:81:52:95:
17:eb:9b:b0:29:b2:48:c5:a1:d2:c8:23:57:89:5b:
e8:e5:e7:d4:43:95:85:8c:ca:cf:57:30:60:de:94:
05:26:97:51:37:e3:e4:42:ce:bc:84:c2:76:94:97:
83:db:4e:61:8f:52:1f:bc:6a:b4:4b:c6:02:0c:02:
6b:fa:14:f9:64:13:8a:9b:85:92:8b:89:22:85:2a:
fa:41:b6:7a:83:84:f4:e2:87:6c:0a:23:0b:b2:78:
2a:44:d7:4f:e9:b3:78:73:fc:4f:46:c4:6f:24:ab:
6d:c4:9a:58:cc:8f:64:14:06:60:92:0f:ee:72:ca:
40:47:b2:9a:0a:55:44:c2:42:bc:a4:98:b6:49:55:
b0:94:e9:c6:cf:e3:bc:05:e8:d5:14:00:78:b5:44:
f4:eb:9b:2e:86:f6:bd:27:74:57:e3:b3:2b:18:ee:
f9:7c:4d:22:04:ae:91:9f:4c:13:c8:22:54:53:e1:
1f:4e:6a:fd:c9:44:e4:88:07:ed:6a:48:92:50:df:
11:f2:49:ee:ca:74:90:f4:59:b5:1f:7b:f5:bc:51:
56:c4:2e:7d:5b:22:4d:a2:12:5c:85:10:8b:89:a6:
be:6e:3d:8c:e1:09:52:66:33:d7:c1:f8:dd:6c:41:
0d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:48:4B:BF:A5:9B:65:CF:C0:B4:E4:5B:53:43:56:B9:85:B7:93:E5
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:56:49:ff:50:12:48:60:c8:8d:a4:55:05:e0:00:02:fe:ff:
61:70:56:3e:97:28:1c:14:fb:7c:a4:f9:ef:dc:86:68:a4:e5:
38:84:6d:54:53:0d:c6:f9:a4:7f:91:64:f8:be:16:86:ed:ba:
d5:53:09:e6:6c:09:64:1e:e3:d6:85:e0:cd:29:1b:11:3a:93:
db:13:f9:7e:f4:63:ca:75:3d:6b:f2:dc:f7:ee:9a:70:68:a8:
e6:15:d7:d3:c5:a6:4b:d4:3b:96:f6:7e:0a:8d:37:fd:f5:62:
57:64:1b:83:ea:19:4e:79:8a:4f:43:4b:65:6c:27:53:c8:c5:
b4:72:27:e5:84:3e:43:d6:54:ad:1f:cb:b5:be:9d:61:02:0f:
ff:e9:0d:f3:56:67:2f:ea:4f:97:1e:49:33:da:e2:f4:d5:b3:
ca:12:f6:38:a6:e2:c3:23:13:bf:e4:63:c1:f3:52:dd:23:62:
8e:22:8f:76:96:42:2a:fb:54:30:69:2b:9b:18:5d:69:d4:97:
bf:80:29:9b:c4:b2:05:90:96:4d:a7:63:ce:3b:1a:37:67:d9:
1b:7d:df:8c:5b:ae:69:77:5c:cc:04:6d:5a:1d:80:de:d5:21:
b2:02:e2:57:42:48:af:9f:cd:a9:13:51:4c:d5:b0:db:f4:d2:
e9:da:40:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:23 2025 by rpki-client