Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
File: gyVb16Los8d3SMPFajBDu8ESbEE.mft (raw, json)
Hash identifier: 3ZmIa0PgsCPbyR49SxAzJ4+tF+LoAcOO8j9wBRQBN2E=
Subject key identifier: 69:F9:CE:AF:35:BC:6F:2F:61:29:FB:74:A8:FF:D2:F6:A5:9F:C3:F1
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Certificate issuer: /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial: 01958B4D595C7E93B5D835166B4AD49005A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
Manifest number: 01C6
Signing time: Wed 12 Mar 2025 17:00:56 +0000
Manifest this update: Wed 12 Mar 2025 17:00:56 +0000
Manifest next update: Thu 13 Mar 2025 17:00:56 +0000
Files and hashes: 1: DSVZ5LWHMvVEjx2Ly8HogvfGbeg.roa (hash: 00oXnXEmoCajVRqJ5SAY3Z4mponT7rL20+QYAvfx80c=)
2: gyVb16Los8d3SMPFajBDu8ESbEE.crl (hash: GwN4DtVDGTwKmRr93JQGGZ4vgXE7sONWUIksTlR7WwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:59:5c:7e:93:b5:d8:35:16:6b:4a:d4:90:05:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Validity
Not Before: Mar 12 17:00:56 2025 GMT
Not After : Mar 13 17:00:56 2025 GMT
Subject: CN=69f9ceaf35bc6f2f6129fb74a8ffd2f6a59fc3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:20:be:72:22:93:50:69:17:e7:b8:01:af:36:
92:b0:d1:b2:82:9a:27:9b:c5:38:47:cd:62:61:bd:
c8:98:86:0d:20:73:8d:25:38:78:fa:ac:82:05:92:
96:74:16:7a:d1:94:11:a6:2c:07:33:99:86:a7:9e:
d1:5d:99:61:89:d1:55:6d:09:24:34:83:1a:4b:26:
62:8a:96:f7:1b:9f:b7:8e:8f:e9:0d:bf:bc:3d:fd:
33:19:5a:dd:55:26:1d:0f:a2:3e:9d:34:59:fd:a6:
bb:b6:c3:b7:a2:87:ea:8c:31:70:50:aa:a3:8e:2c:
27:4d:4b:2c:c4:43:0d:f2:1c:16:b1:db:82:91:50:
44:9d:4f:d5:bc:8d:fd:b0:19:39:ff:e6:aa:af:bd:
d5:10:d9:be:c3:84:e0:2c:1e:62:3c:c7:2a:7e:85:
37:f9:d4:7b:83:f4:00:03:77:93:89:98:24:c9:a5:
8b:4a:33:44:f2:39:fb:c4:63:51:e8:31:b0:eb:74:
2e:5c:95:2d:d0:bb:41:ef:f4:db:22:f4:a3:6c:d7:
ce:3f:61:e8:98:66:c4:b6:a5:17:6c:aa:2a:9b:96:
67:c3:d1:7b:77:0c:24:cd:30:7e:96:51:45:2f:36:
ff:81:05:c0:48:c2:5d:bc:b4:7e:ea:10:39:59:0c:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F9:CE:AF:35:BC:6F:2F:61:29:FB:74:A8:FF:D2:F6:A5:9F:C3:F1
X509v3 Authority Key Identifier:
keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:b8:82:7e:57:d5:dd:3e:e8:36:20:1b:8a:90:7c:99:af:5f:
c6:bb:d3:51:52:ac:55:5f:e9:a0:df:23:d8:28:2e:2e:9b:9e:
a3:c1:a4:69:84:b6:b5:be:7d:1f:ac:5f:95:93:35:19:bb:1c:
94:27:2e:b3:f9:43:58:ca:8a:37:75:e4:a3:a4:be:18:98:3c:
66:9e:b1:84:c0:7e:96:9c:c6:a1:64:16:cb:ed:a0:fd:36:70:
6e:9d:46:45:df:14:19:08:aa:f7:ea:1c:63:bf:d6:9e:da:73:
a9:3d:df:2d:f8:b2:35:ea:5e:68:df:a2:7c:cb:c2:db:ea:5a:
9f:59:e7:c3:34:cc:ea:18:8a:13:e9:2d:00:bf:54:a1:95:52:
c1:ff:be:37:0c:8a:3e:30:87:0d:ff:20:49:0b:c6:fc:a8:dd:
f3:ad:0c:37:8e:41:8e:84:8e:a7:1c:65:56:71:e2:6e:c0:69:
f4:ba:55:4c:7c:59:f8:f6:5c:68:8c:d2:99:dc:2d:2c:97:34:
2d:3b:37:85:8f:f6:92:40:03:e2:84:8a:dc:e7:b2:f3:95:e3:
df:ff:1c:92:61:ae:6b:c3:82:8e:f1:0e:6f:f0:f9:67:13:d0:
ac:d4:65:8e:1d:4b:08:3a:05:9e:20:57:da:6f:2b:cf:df:23:
93:02:30:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLTVlcfpO12DUWa0rUkAWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMjU1YmQ3YTJlOGIzYzc3NzQ4YzNjNTZhMzA0M2JiYzEx
MjZjNDEwHhcNMjUwMzEyMTcwMDU2WhcNMjUwMzEzMTcwMDU2WjAzMTEwLwYDVQQD
Eyg2OWY5Y2VhZjM1YmM2ZjJmNjEyOWZiNzRhOGZmZDJmNmE1OWZjM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iC+ciKTUGkX57gBrzaSsNGygpon
m8U4R81iYb3ImIYNIHONJTh4+qyCBZKWdBZ60ZQRpiwHM5mGp57RXZlhidFVbQkk
NIMaSyZiipb3G5+3jo/pDb+8Pf0zGVrdVSYdD6I+nTRZ/aa7tsO3oofqjDFwUKqj
jiwnTUssxEMN8hwWsduCkVBEnU/VvI39sBk5/+aqr73VENm+w4TgLB5iPMcqfoU3
+dR7g/QAA3eTiZgkyaWLSjNE8jn7xGNR6DGw63QuXJUt0LtB7/TbIvSjbNfOP2Ho
mGbEtqUXbKoqm5Znw9F7dwwkzTB+llFFLzb/gQXASMJdvLR+6hA5WQxlhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGn5zq81vG8vYSn7dKj/0valn8PxMB8GA1UdIwQY
MBaAFIMlW9ei6LPHd0jDxWowQ7vBEmxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3lWYjE2TG9zOGQzU01QRmFqQkR1OEVTYkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82OGQ3MjQtZDYyZS00Njg5LTk5OGEt
ZTE0Mzg4ZTYxNDVkLzEvZ3lWYjE2TG9zOGQzU01QRmFqQkR1OEVTYkVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82OGQ3MjQtZDYyZS00Njg5LTk5OGEtZTE0Mzg4ZTYxNDVk
LzEvZ3lWYjE2TG9zOGQzU01QRmFqQkR1OEVTYkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbiCflfV
3T7oNiAbipB8ma9fxrvTUVKsVV/poN8j2CguLpueo8GkaYS2tb59H6xflZM1Gbsc
lCcus/lDWMqKN3Xko6S+GJg8Zp6xhMB+lpzGoWQWy+2g/TZwbp1GRd8UGQiq9+oc
Y7/WntpzqT3fLfiyNepeaN+ifMvC2+pan1nnwzTM6hiKE+ktAL9UoZVSwf++NwyK
PjCHDf8gSQvG/Kjd860MN45BjoSOpxxlVnHibsBp9LpVTHxZ+PZcaIzSmdwtLJc0
LTs3hY/2kkAD4oSK3Oey85Xj3/8ckmGua8OCjvEOb/D5ZxPQrNRljh1LCDoFniBX
2m8rz98jkwIwAw==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:25:42 2025 by rpki-client