Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
File: gyVb16Los8d3SMPFajBDu8ESbEE.mft (raw, json)
Hash identifier: vwC18kh3FZeSmYN6tWMPmsVuDzc4gsZlcBtkLh4dDXs=
Subject key identifier: 40:E7:53:B9:97:89:8C:27:29:2E:13:0E:6E:B6:E7:92:91:31:A8:2A
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Certificate issuer: /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial: 019846648026DBAFB94E2C54054942355A0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
Manifest number: 0330
Signing time: Sat 26 Jul 2025 11:00:48 +0000
Manifest this update: Sat 26 Jul 2025 11:00:48 +0000
Manifest next update: Sun 27 Jul 2025 11:00:48 +0000
Files and hashes: 1: DSVZ5LWHMvVEjx2Ly8HogvfGbeg.roa (hash: 00oXnXEmoCajVRqJ5SAY3Z4mponT7rL20+QYAvfx80c=)
2: gyVb16Los8d3SMPFajBDu8ESbEE.crl (hash: ZzXSbPfq376eppcPzh1lY8fbLBjnskC/OYB/2dC1EO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:80:26:db:af:b9:4e:2c:54:05:49:42:35:5a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Validity
Not Before: Jul 26 11:00:48 2025 GMT
Not After : Jul 27 11:00:48 2025 GMT
Subject: CN=40e753b997898c27292e130e6eb6e7929131a82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:60:38:29:49:3d:a7:9b:7c:ab:81:7a:b6:31:
24:e9:05:c0:ea:12:4e:c2:47:9b:2e:66:89:b5:4b:
60:8f:e1:0b:e0:d1:e4:1b:05:da:0e:7d:4d:9a:48:
8f:c2:1c:ae:a5:62:d7:a1:d9:95:39:48:1d:b2:6e:
5c:bb:10:38:0a:0c:36:dd:6b:fb:f0:e1:d2:bf:3f:
aa:5d:70:34:c1:ba:a3:ad:93:75:54:56:e9:e9:e6:
aa:2e:10:8a:ef:17:7e:8d:f8:64:b9:fa:cd:e3:b6:
22:e2:05:03:4c:9a:61:6d:31:3f:48:f2:dd:89:c1:
a7:1f:c1:27:e6:a3:7c:33:64:59:f4:cb:7c:12:aa:
62:f1:bf:42:d9:a0:6f:17:8f:53:a1:6a:1d:08:21:
9d:ab:44:d0:bc:9b:3e:16:0e:28:82:ce:24:0b:44:
81:49:85:a3:6d:10:a5:7d:3b:05:5a:60:e8:08:c7:
d2:3b:89:1b:b5:2f:c6:09:26:de:1a:e0:8b:41:2a:
17:0e:fc:86:23:75:b1:f4:3e:f2:46:b3:19:3a:df:
12:4e:10:f8:92:4c:17:33:e9:d2:c4:39:c3:25:5f:
9e:70:9e:c3:b4:01:31:40:75:43:a5:0e:05:12:40:
56:a7:a2:c1:f5:f5:d6:0a:43:65:f0:3b:f3:4d:c0:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E7:53:B9:97:89:8C:27:29:2E:13:0E:6E:B6:E7:92:91:31:A8:2A
X509v3 Authority Key Identifier:
keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a7:41:54:1e:6a:64:bc:a5:e5:89:56:3a:25:23:2d:fb:68:
d5:a6:f7:27:85:12:8e:d8:29:c0:ab:7a:b7:b8:43:0c:3e:e9:
a0:cf:c5:00:10:40:c7:1c:09:2f:f3:32:b9:0b:50:9a:cb:80:
3f:53:61:37:ec:57:5c:73:45:73:e9:87:6a:06:4a:53:ed:b6:
65:01:a5:39:b5:03:b5:d8:c8:60:4d:9f:8e:67:92:fd:7b:64:
f7:33:6c:ea:da:35:35:6b:75:da:cb:32:a6:b5:21:1c:dc:78:
fa:3e:13:9c:11:0b:93:70:f4:7c:b1:1d:a7:69:d1:4d:d5:88:
02:49:1c:3b:4c:30:59:b1:24:00:cb:c2:95:c0:7e:5f:48:0c:
a4:16:93:e2:bb:ad:76:96:08:51:11:8f:83:f7:e2:ea:88:d4:
65:50:ba:30:87:61:bb:5c:f1:8b:7a:8e:23:23:07:8c:98:94:
ba:8b:58:b3:c8:0b:6e:71:f3:7f:23:64:37:1b:18:17:59:c8:
e2:32:45:5e:94:ce:21:de:1b:8d:fd:ec:cd:0a:52:c1:40:60:
f4:d9:ae:1e:18:68:2d:74:b0:98:d3:c1:3d:54:6e:b1:fb:c7:
29:1a:ee:ff:58:28:a0:cb:f7:1d:78:68:13:11:bc:01:4e:ab:
2d:fa:34:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:10:34 2025 by rpki-client