Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: EogTkerKWiSg6XkP1t88vFG2PJfpICArLpN25Hbw/Lo=
Subject key identifier: 5F:7E:61:0B:43:2C:EB:14:DB:40:0C:4D:CC:76:3C:9F:69:A4:A0:17
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 019A24779D9FE3A937A1D21A53FD9513D936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 168D
Signing time: Mon 27 Oct 2025 07:00:10 +0000
Manifest this update: Mon 27 Oct 2025 07:00:10 +0000
Manifest next update: Tue 28 Oct 2025 07:00:10 +0000
Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=)
2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: i10f7ic3oFk0TX//bbGSHs2+bBm4dluZ+cqb5zr8hsk=)
3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:9d:9f:e3:a9:37:a1:d2:1a:53:fd:95:13:d9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Oct 27 07:00:10 2025 GMT
Not After : Oct 28 07:00:10 2025 GMT
Subject: CN=5f7e610b432ceb14db400c4dcc763c9f69a4a017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:36:b3:ff:d4:7e:79:43:4e:76:cf:2d:3f:a2:
89:9b:67:b0:b9:39:99:15:51:9a:e0:aa:28:58:e8:
0f:8a:4a:9e:e0:33:a3:da:47:c0:d3:b7:72:df:17:
6f:55:53:b9:67:aa:27:19:61:59:42:02:59:38:c0:
5b:72:87:70:50:6a:5f:ec:c4:24:bb:ea:6b:5a:08:
9c:5e:c3:9e:4e:4b:d8:64:d0:c3:2a:98:5b:98:48:
db:93:e7:c0:02:7b:9f:2a:87:fd:3b:0b:e7:e9:53:
25:2d:5b:c8:67:df:0f:0a:f0:71:35:22:29:69:20:
af:3a:17:46:88:05:dc:1a:13:fe:2d:05:c3:58:9d:
cc:20:07:15:e5:66:f8:8d:eb:ca:46:20:82:b2:8e:
d1:85:7b:00:ee:d1:3d:ec:b5:61:9c:42:e4:21:9e:
fc:93:f7:d2:31:a7:7f:e2:8d:c5:50:c5:69:c8:0f:
61:d8:df:ea:cb:9d:3b:f3:f1:7e:33:52:b2:e4:b4:
2c:f3:2b:f9:7e:78:0e:61:7e:2d:f1:7a:df:28:cc:
8a:6c:38:86:92:8a:93:58:a3:a3:54:98:ac:72:27:
0c:7b:7b:a7:10:76:06:65:c8:16:9a:23:2f:9c:c9:
a9:6b:86:d1:17:35:18:3b:e2:cc:7e:c1:9b:98:63:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7E:61:0B:43:2C:EB:14:DB:40:0C:4D:CC:76:3C:9F:69:A4:A0:17
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:34:01:84:c8:bc:6c:16:9d:d3:07:65:bb:71:de:a6:bb:13:
84:3d:d2:23:9f:70:bf:af:a0:3d:fa:92:e7:37:5a:24:d4:a5:
b3:cc:62:d7:42:c6:55:cc:77:7e:da:e7:52:c7:1c:57:35:58:
34:e6:e0:09:46:46:7f:b4:55:72:df:ec:8a:e7:1a:f9:f8:58:
bf:b5:cb:eb:00:41:8e:7d:00:8d:3d:5f:c9:87:b6:1e:59:89:
5c:ed:fa:48:8c:ea:f3:99:35:dc:a3:bd:46:05:7d:2c:26:51:
d4:cb:9b:a4:9e:d9:ff:90:30:91:23:08:d1:45:f0:a7:29:b9:
b7:73:a2:4f:3b:46:54:ea:61:f1:99:bb:9c:cc:b1:5e:0f:6a:
7b:12:70:61:b7:68:63:f7:41:ed:ac:2d:21:94:46:87:be:86:
c4:67:80:ab:4c:5c:7e:9c:4d:0d:2c:b8:d4:69:a9:1e:24:da:
fd:3b:8b:0d:59:2b:7a:30:f3:19:3f:f9:52:cf:72:fd:13:90:
0e:08:2b:27:f0:0b:b0:81:cf:4b:e2:9a:b7:4a:23:9e:72:db:
d2:47:62:c1:34:2b:56:05:f1:97:b1:23:4b:01:eb:74:bd:e2:
ea:7b:2f:16:14:ac:52:f8:0f:79:33:51:20:2d:02:26:2e:44:
09:a6:64:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:08:21 2025 by rpki-client