Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json)
Hash identifier: JA6AO/vN4ZH7wEkcY77UswyX3CHehihgS4syGx0kBBI=
Subject key identifier: 3A:B4:D8:EB:AF:2A:2A:CF:5B:3F:94:AE:B6:88:62:7C:30:70:39:99
Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Certificate serial: 019645FB8A4788788F775130AEEA7C14C39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
Manifest number: 148C
Signing time: Thu 17 Apr 2025 23:00:34 +0000
Manifest this update: Thu 17 Apr 2025 23:00:34 +0000
Manifest next update: Fri 18 Apr 2025 23:00:34 +0000
Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=)
2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: c0U3ehe+NI2rEGbfJaO5u3GpA2zGp7SefoM1y/2B9ys=)
3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 18:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:fb:8a:47:88:78:8f:77:51:30:ae:ea:7c:14:c3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3
Validity
Not Before: Apr 17 23:00:34 2025 GMT
Not After : Apr 18 23:00:34 2025 GMT
Subject: CN=3ab4d8ebaf2a2acf5b3f94aeb688627c30703999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:ef:81:9c:24:fd:7e:a4:ef:c6:f2:0d:95:
4d:de:6a:c6:c3:7b:d7:c3:2a:60:9f:3e:9a:a0:32:
7f:21:19:cb:e0:75:1f:ef:6e:f6:b5:36:c6:e9:c5:
46:ff:32:95:2f:58:b3:a8:b7:6f:6f:62:96:9c:f4:
71:5a:59:8e:54:c2:2d:f3:8f:58:ce:ae:b2:36:9c:
e4:f1:cd:fa:57:20:88:2a:94:8b:ec:25:24:93:bc:
65:9e:28:ee:d9:54:3d:d2:ea:01:94:f4:72:75:62:
b1:0a:ca:69:10:ce:20:0a:b3:46:69:5b:22:ee:4c:
84:88:e0:0d:80:1b:80:d6:4a:58:e8:ec:fb:9f:d8:
3d:3b:c0:b9:97:ca:ea:67:99:6c:d9:ae:9b:0c:0f:
dd:74:4a:5b:ec:01:88:b5:a8:d7:08:34:42:56:a0:
a8:56:a6:bd:11:27:64:b3:04:4e:b8:f1:3d:20:ed:
c5:ba:20:86:84:b6:57:27:21:dd:2b:6c:e8:a3:43:
3c:3e:a6:03:16:ae:6f:b8:3f:f9:4b:d9:23:60:8a:
4d:2d:65:da:9e:86:fe:22:20:6e:63:8e:e3:1b:e9:
de:de:4b:a7:ad:d2:fe:4a:ba:5f:f5:94:8a:9e:db:
21:25:c3:4f:26:e8:a5:22:05:a3:a1:f2:a6:ef:19:
0c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B4:D8:EB:AF:2A:2A:CF:5B:3F:94:AE:B6:88:62:7C:30:70:39:99
X509v3 Authority Key Identifier:
keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:9d:96:b0:2d:1f:6c:37:3c:af:5f:12:22:da:b3:65:27:f1:
59:61:f2:e6:92:8b:f6:70:e4:b8:b8:d9:06:86:0a:3e:b1:8a:
63:55:7c:a5:66:88:51:0b:0b:65:5b:7c:ae:48:d2:2f:89:7f:
9e:43:b8:3d:61:84:d6:f0:06:2f:38:e2:8c:be:13:88:a8:55:
f3:1c:4b:0c:52:5d:ab:a6:9c:d9:48:69:2c:b8:a1:06:fe:b3:
35:0c:a0:ce:65:1a:3d:78:61:9d:74:c3:c0:68:a4:de:42:50:
8c:0f:66:27:b7:af:d3:4b:8e:53:c3:a7:9d:38:2d:44:74:89:
8e:6c:af:27:32:e4:6f:10:e8:da:29:a4:24:90:22:75:a9:1d:
4f:bd:8d:eb:a8:be:98:83:50:66:1c:e4:1c:8c:75:69:41:ee:
b8:4f:58:a9:ec:ef:d1:27:d2:ed:55:a8:f1:8a:0e:76:77:ba:
71:66:d3:e5:05:a8:1d:6f:73:67:ac:15:78:8f:74:4c:b0:ab:
9e:03:3c:5f:4c:17:ed:3e:cc:d9:fd:ee:fc:21:44:2a:bd:80:
2e:e6:78:bd:c6:dc:a4:68:dc:b2:18:c1:45:75:5e:89:24:15:
10:08:b6:ca:82:58:94:90:08:50:6a:b6:78:70:27:2a:29:3d:
69:30:68:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:09:32 2025 by rpki-client