Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: QwERMKUtyItG+cSceWq9qIpm017b+mVLzRoBCRXQMRw=
Subject key identifier: 5C:38:4F:F4:0E:2B:77:18:C7:47:21:97:59:25:C4:FF:AE:1B:AA:F4
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 0198364CBE480B03D550647D4BCEAA138AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 158D
Signing time: Wed 23 Jul 2025 08:00:55 +0000
Manifest this update: Wed 23 Jul 2025 08:00:55 +0000
Manifest next update: Thu 24 Jul 2025 08:00:55 +0000
Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=)
2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: KNbT05vpHjKaoYYYY+KXjP++L/BzC+3p4yT/YoQnJmw=)
3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:4c:be:48:0b:03:d5:50:64:7d:4b:ce:aa:13:8a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Jul 23 08:00:55 2025 GMT
Not After : Jul 24 08:00:55 2025 GMT
Subject: CN=5c384ff40e2b7718c74721975925c4ffae1baaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:14:47:30:53:53:2f:9d:cb:bc:3f:0b:83:
ac:d1:2f:07:61:5b:b8:94:78:77:39:48:e3:91:3a:
95:b9:73:ee:f3:21:47:03:e8:93:ca:4b:65:23:d7:
57:b7:f5:32:0e:1f:e5:1f:ce:09:f6:3f:8d:12:63:
5f:99:25:18:6a:0d:b0:68:ca:38:a6:e9:67:c2:ec:
8c:d0:e5:80:17:6d:d2:d8:55:bc:49:85:f7:3c:ab:
f3:e8:08:5a:d8:ec:ad:b8:11:69:53:48:eb:8f:e9:
7c:51:e5:f6:b3:81:c1:e3:8c:76:19:75:7a:d7:ab:
0d:35:39:06:e2:1c:05:b1:ab:ca:40:48:b3:5d:9b:
2b:f2:ae:83:9b:59:fa:a6:25:75:7b:e5:49:e2:51:
0b:57:0e:96:f2:26:b2:57:0b:2e:55:6d:f8:9e:80:
a0:9c:ac:60:29:fa:53:b5:b5:45:ab:02:9e:33:b5:
52:b7:ba:18:de:ee:99:f4:2e:23:15:a1:7d:bb:c0:
0c:d3:50:73:61:5b:9d:21:a3:79:d7:91:2e:9c:2f:
e8:f4:56:62:64:eb:07:80:23:6b:05:ff:b6:99:96:
bd:5f:75:54:54:63:07:38:b2:1b:fe:f2:29:92:86:
9f:80:fd:b4:9c:be:9a:d2:fc:f6:62:43:c9:50:62:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:38:4F:F4:0E:2B:77:18:C7:47:21:97:59:25:C4:FF:AE:1B:AA:F4
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a7:49:01:88:98:f8:eb:97:c8:99:35:e9:0d:ea:79:13:88:
db:5b:d5:9f:23:8a:73:ba:c7:1b:63:dd:6d:64:2d:f5:91:96:
0e:fd:65:a2:fc:4f:30:52:67:d5:aa:36:15:1d:f5:8a:c0:73:
30:7a:57:25:8f:89:35:23:1f:4a:51:97:7a:45:9d:01:9b:71:
6f:cd:5e:9f:58:dd:6c:bb:a9:a1:f8:ac:1b:62:a5:78:7e:f9:
76:2e:cd:36:f0:fd:0a:cc:b4:7a:e1:0c:2b:fb:57:12:1d:e6:
e9:9d:84:a9:61:11:4c:78:4d:a5:67:d0:ef:70:73:aa:9c:a9:
78:f1:a2:e5:cb:67:22:11:a7:34:a5:75:e7:71:99:f6:68:4b:
2a:31:a3:bf:8d:e9:85:c8:af:b5:d3:d9:d5:23:e8:d9:f5:d5:
ee:21:10:3b:dd:e9:1e:c9:cb:04:a3:ad:b5:4d:5e:45:cb:b3:
d9:ad:61:90:27:87:6a:c1:9f:51:a4:88:a5:a5:a4:89:2c:d6:
b8:d3:bc:44:da:14:d4:8f:9f:20:62:f1:ec:cc:69:9f:49:61:
13:52:d2:0e:d8:24:04:58:a9:b5:58:4c:76:5c:8e:da:6e:82:
c5:01:48:fc:49:59:12:77:5f:bf:4f:2c:b6:12:5e:53:84:55:
0a:67:54:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg2TL5ICwPVUGR9S86qE4rqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MjkyZGM2MzcxOGVlYmM3MDRhYjAwMmVjYjgxZDNkNTJk
NGQxYzMwHhcNMjUwNzIzMDgwMDU1WhcNMjUwNzI0MDgwMDU1WjAzMTEwLwYDVQQD
Eyg1YzM4NGZmNDBlMmI3NzE4Yzc0NzIxOTc1OTI1YzRmZmFlMWJhYWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGkURzBTUy+dy7w/C4Os0S8HYVu4
lHh3OUjjkTqVuXPu8yFHA+iTyktlI9dXt/UyDh/lH84J9j+NEmNfmSUYag2waMo4
pulnwuyM0OWAF23S2FW8SYX3PKvz6Aha2OytuBFpU0jrj+l8UeX2s4HB44x2GXV6
16sNNTkG4hwFsavKQEizXZsr8q6Dm1n6piV1e+VJ4lELVw6W8iayVwsuVW34noCg
nKxgKfpTtbVFqwKeM7VSt7oY3u6Z9C4jFaF9u8AM01BzYVudIaN515EunC/o9FZi
ZOsHgCNrBf+2mZa9X3VUVGMHOLIb/vIpkoafgP20nL6a0vz2YkPJUGLSZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw4T/QOK3cYx0chl1klxP+uG6r0MB8GA1UdIwQY
MBaAFHcpLcY3GO68cEqwAuy4HT1S1NHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEt
ZDljNWQyNjQxOWIyLzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEtZDljNWQyNjQxOWIy
LzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqdJAYiY
+OuXyJk16Q3qeROI21vVnyOKc7rHG2PdbWQt9ZGWDv1lovxPMFJn1ao2FR31isBz
MHpXJY+JNSMfSlGXekWdAZtxb81en1jdbLupofisG2KleH75di7NNvD9Csy0euEM
K/tXEh3m6Z2EqWERTHhNpWfQ73BzqpypePGi5ctnIhGnNKV153GZ9mhLKjGjv43p
hcivtdPZ1SPo2fXV7iEQO93pHsnLBKOttU1eRcuz2a1hkCeHasGfUaSIpaWkiSzW
uNO8RNoU1I+fIGLx7Mxpn0lhE1LSDtgkBFiptVhMdlyO2m6CxQFI/ElZEndfv08s
thJeU4RVCmdUnQ==
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:00:21 2025 by rpki-client