Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
File: gyVb16Los8d3SMPFajBDu8ESbEE.mft (raw, json)
Hash identifier: TT1FTkVbziIdlthelOtGsiW5dbIdv43a55WPz6MZ9VY=
Subject key identifier: 0F:2E:99:E5:E6:C1:EB:7C:27:3A:A3:74:B5:2B:17:B9:E6:1E:B5:CA
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Certificate issuer: /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial: 019511A2908DE787E06FACD2830A48C6F105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
Manifest number: 0187
Signing time: Mon 17 Feb 2025 02:00:21 +0000
Manifest this update: Mon 17 Feb 2025 02:00:21 +0000
Manifest next update: Tue 18 Feb 2025 02:00:21 +0000
Files and hashes: 1: DSVZ5LWHMvVEjx2Ly8HogvfGbeg.roa (hash: 00oXnXEmoCajVRqJ5SAY3Z4mponT7rL20+QYAvfx80c=)
2: gyVb16Los8d3SMPFajBDu8ESbEE.crl (hash: 2S8r+1CMFEj87ivBQfWutwp/OtlJND5WPz4hJziyTNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:a2:90:8d:e7:87:e0:6f:ac:d2:83:0a:48:c6:f1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Validity
Not Before: Feb 17 02:00:21 2025 GMT
Not After : Feb 18 02:00:21 2025 GMT
Subject: CN=0f2e99e5e6c1eb7c273aa374b52b17b9e61eb5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6c:66:0f:9a:db:6c:41:9e:d4:3c:1f:ef:fb:
eb:98:8e:fc:6b:c8:21:3a:f3:a2:21:b3:d7:b6:7f:
2d:1f:1c:12:5a:b9:b8:1d:30:3f:32:79:f0:9d:c6:
07:50:25:0c:75:8d:91:a1:a4:44:cc:6d:7f:09:3b:
19:4e:8c:49:2b:37:2a:39:0c:a5:84:8f:07:7c:32:
c2:59:45:19:82:50:37:89:bf:a6:ca:29:0f:77:fe:
0d:c5:01:9d:5c:e3:20:d0:40:58:0c:2a:43:ac:c5:
01:28:1c:05:d8:f9:49:b7:35:96:bf:1f:9e:0f:0e:
dd:a2:4e:2c:29:0c:c3:8a:04:3a:5d:ee:65:45:46:
ce:2f:31:b7:20:4e:68:e1:4a:b3:3d:76:70:7b:52:
99:8c:6d:54:69:8e:65:d5:d9:3d:b7:f2:9f:e5:47:
06:db:c9:ed:77:d5:4b:da:48:93:99:7a:6c:4a:03:
2b:4e:eb:bf:f4:67:5a:b6:d7:55:2c:18:f5:f0:f9:
dc:79:9b:b7:d4:8c:6a:45:c1:1e:62:52:f7:be:31:
1d:91:cd:63:1b:82:28:b7:01:f7:70:13:36:3d:28:
cd:89:40:78:21:17:7b:64:16:0a:c1:fd:c3:98:7b:
54:8c:73:5b:ad:8f:2b:2d:37:81:06:93:b7:ac:4f:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2E:99:E5:E6:C1:EB:7C:27:3A:A3:74:B5:2B:17:B9:E6:1E:B5:CA
X509v3 Authority Key Identifier:
keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:22:3a:fc:13:40:df:b8:af:76:fc:a7:cb:f1:08:d5:d8:9d:
11:93:68:fd:44:0d:41:fd:53:76:fe:d5:2e:bd:90:c7:c3:7e:
ca:a5:84:12:fc:b3:ae:d7:54:f7:99:95:69:99:37:e6:07:46:
03:a1:1e:80:8d:dc:20:2c:37:62:b7:14:ba:21:fb:99:87:78:
95:0e:e0:f2:c5:07:25:59:e5:dc:f6:a5:26:3b:3e:c3:21:b3:
ca:7b:ff:8d:f2:ff:13:94:73:70:cd:59:f7:42:65:aa:c1:78:
29:fd:28:82:de:e7:d4:bb:30:67:97:fe:ac:5b:1c:23:bc:7b:
98:2c:14:4e:2c:5c:aa:51:c8:5c:77:1b:be:66:e7:45:25:05:
53:0f:b2:15:60:43:e9:35:7a:7d:d3:94:ea:14:06:87:21:13:
fe:6e:a3:5a:2b:02:30:4f:24:96:c8:4c:08:89:82:25:9b:b7:
c3:be:fe:59:a9:3d:29:aa:0c:1e:ed:40:b5:1b:4c:b4:24:22:
4f:75:78:76:22:b1:30:2d:7b:a8:7b:58:05:74:25:b5:21:3e:
7e:d6:10:25:b0:50:26:2a:de:0d:d4:86:d5:f3:ae:d2:58:be:
fe:45:56:ec:15:e0:33:5e:54:57:b0:00:0c:b0:46:5d:d8:c7:
95:5f:e5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:40 2025 by rpki-client