Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
File: gyVb16Los8d3SMPFajBDu8ESbEE.mft (raw, json)
Hash identifier: E7mye8j/poALOeEZd/P4PZyxZQtFSmhDJpUsl1u0QyA=
Subject key identifier: 37:95:A5:70:92:D1:2C:D5:CC:09:D1:8B:74:DE:FA:5C:1B:7F:70:A5
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Certificate issuer: /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial: 01965613A0208B4CB3BB6371407098E6D142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
Manifest number: 022F
Signing time: Mon 21 Apr 2025 02:00:48 +0000
Manifest this update: Mon 21 Apr 2025 02:00:48 +0000
Manifest next update: Tue 22 Apr 2025 02:00:48 +0000
Files and hashes: 1: DSVZ5LWHMvVEjx2Ly8HogvfGbeg.roa (hash: 00oXnXEmoCajVRqJ5SAY3Z4mponT7rL20+QYAvfx80c=)
2: gyVb16Los8d3SMPFajBDu8ESbEE.crl (hash: EnK7wKblBbPZtLMS4N7J9JLO2k9wVGW5gFrPoGwjCco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:a0:20:8b:4c:b3:bb:63:71:40:70:98:e6:d1:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Validity
Not Before: Apr 21 02:00:48 2025 GMT
Not After : Apr 22 02:00:48 2025 GMT
Subject: CN=3795a57092d12cd5cc09d18b74defa5c1b7f70a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:28:d6:fe:2a:5f:7a:aa:4c:c6:06:a3:9c:bd:
fd:07:76:c7:a4:fa:00:7a:3d:85:eb:43:e6:4f:fd:
c5:0f:6e:e7:30:bd:97:bf:06:3a:d6:22:dd:55:13:
9f:b5:07:39:82:ac:d6:06:73:a4:95:e3:db:f5:7b:
fe:b3:ca:35:c7:88:5d:d6:af:a3:05:ea:47:a6:ec:
87:ce:b7:44:71:83:47:26:35:73:8e:3f:f6:63:70:
04:ef:bd:7a:d9:e4:82:c9:32:64:08:e8:5e:24:ee:
ae:62:12:2d:53:5d:3f:fb:f3:85:78:87:da:42:fd:
d9:0a:1d:9f:7c:1d:61:87:42:2e:d5:15:63:8a:49:
6a:e9:b8:3c:c7:8d:7a:dd:a4:ba:2a:60:fb:51:ee:
f0:1a:9a:70:7b:1b:e2:6c:4e:c2:98:df:20:f6:a3:
d3:ed:07:23:90:8d:ce:11:15:39:94:92:f6:e3:4c:
bd:50:8c:27:25:aa:d2:11:41:1a:99:a1:c1:ee:f9:
26:1f:a3:60:b7:69:a9:df:0b:e3:a8:8a:c0:d3:4b:
99:c1:05:c5:c6:e6:e4:2f:7a:d9:06:b6:a3:16:ae:
3e:9c:29:33:be:b7:5f:cf:05:01:2a:e6:f2:52:46:
0f:37:8b:40:31:50:5f:e6:9e:f7:9d:63:7f:e5:6e:
fd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:95:A5:70:92:D1:2C:D5:CC:09:D1:8B:74:DE:FA:5C:1B:7F:70:A5
X509v3 Authority Key Identifier:
keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5b:3f:a6:98:0f:fb:c0:d2:04:23:27:9b:89:d6:3b:0b:f1:
0e:34:e2:c5:33:82:3b:30:6c:0e:c1:44:0c:a8:f4:54:ef:19:
3e:6a:6b:8c:f6:8b:8c:97:54:e2:3f:d5:0c:9a:a1:59:46:d3:
b4:44:be:4a:ee:b3:94:01:61:05:da:1f:35:8c:5a:34:22:b5:
23:f2:17:28:3f:10:8b:59:a1:ef:78:d8:36:e3:6a:27:cd:53:
76:3d:68:22:50:a3:8a:f9:54:d2:04:58:5f:8e:90:23:a4:d3:
14:46:c7:ae:e6:cf:4d:f5:10:37:71:dd:c4:e2:c3:eb:f4:04:
84:46:65:9d:73:8c:a5:54:6f:30:ea:ef:48:86:7e:92:dc:0d:
19:ee:4e:01:cb:82:3f:eb:f3:24:76:15:b7:fc:33:13:fd:5e:
ff:95:08:e5:12:66:30:09:6e:25:c3:d2:54:2f:df:17:dc:43:
d7:e6:b4:75:7e:cf:94:bd:86:1c:a3:84:81:20:47:b2:b5:05:
0f:a9:b3:20:44:70:74:16:4e:80:db:40:eb:d2:64:97:29:22:
12:4e:e5:5a:54:66:54:f8:4d:90:dc:e2:16:25:bc:90:71:20:
90:bd:83:a6:80:8f:47:3d:a4:94:cc:cd:1e:e0:79:1b:37:7f:
f8:04:b7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:41:40 2025 by rpki-client