Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
File: gyVb16Los8d3SMPFajBDu8ESbEE.mft (raw, json)
Hash identifier: VTK3pgfdRDhiqWQy/yBsXenHEkEKSW8pUD8EM+fIa3c=
Subject key identifier: 8E:F0:3C:4D:22:2A:D9:5E:04:53:6E:AB:1D:78:2B:3B:F7:E4:5B:CA
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Certificate issuer: /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial: 0196BA7FDDCD86A96FE2EAE7537AE84157CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
Manifest number: 0263
Signing time: Sat 10 May 2025 14:01:04 +0000
Manifest this update: Sat 10 May 2025 14:01:04 +0000
Manifest next update: Sun 11 May 2025 14:01:04 +0000
Files and hashes: 1: DSVZ5LWHMvVEjx2Ly8HogvfGbeg.roa (hash: 00oXnXEmoCajVRqJ5SAY3Z4mponT7rL20+QYAvfx80c=)
2: gyVb16Los8d3SMPFajBDu8ESbEE.crl (hash: /ltQ6yY3bKNFXUi/cTf07j6Zx2XpJMPOcWceLZvoA6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:7f:dd:cd:86:a9:6f:e2:ea:e7:53:7a:e8:41:57:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Validity
Not Before: May 10 14:01:04 2025 GMT
Not After : May 11 14:01:04 2025 GMT
Subject: CN=8ef03c4d222ad95e04536eab1d782b3bf7e45bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:3e:75:ad:d6:b0:ec:17:b7:c1:77:1f:df:
62:7b:13:02:f9:8a:c1:7c:95:9c:93:9c:67:9b:98:
90:fd:cc:23:21:38:ea:f4:4d:48:a2:d8:d9:26:36:
96:fb:bd:a0:06:c4:d3:a2:af:72:cf:7d:a7:ee:2a:
86:c6:e7:74:24:31:59:0e:ec:b8:13:39:5a:dc:c6:
76:b8:39:ca:09:9f:7c:c7:5f:95:0e:24:93:cd:7a:
fa:02:1d:5d:de:05:d5:99:24:e9:71:7d:ad:28:33:
1a:bb:c8:6f:5b:b5:02:09:bd:ab:34:6c:c3:a0:36:
c6:e8:ea:8d:ce:6c:8d:13:f4:9b:26:ba:28:b1:e7:
1c:1e:28:c7:97:1c:b1:ee:b3:ef:86:fc:93:37:f9:
72:4c:10:2d:31:cc:85:38:9f:29:18:7a:bd:1d:0d:
a8:67:02:6e:c8:86:11:f0:bb:67:ea:65:6a:1e:72:
c4:2d:46:58:10:cd:2f:22:31:2a:f1:2f:79:99:c4:
07:53:c5:2e:e0:96:94:da:41:52:fb:09:5b:e8:ae:
f0:cf:f7:2c:e6:f0:03:e9:d8:3f:63:b3:4f:48:ac:
82:fb:1b:4b:b7:b5:54:ae:de:4f:cb:a8:93:87:ac:
90:7a:e9:02:4e:14:89:6c:25:ea:06:47:96:89:00:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F0:3C:4D:22:2A:D9:5E:04:53:6E:AB:1D:78:2B:3B:F7:E4:5B:CA
X509v3 Authority Key Identifier:
keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:64:b5:7a:2c:1e:12:f4:5d:a4:72:21:3e:5e:2b:a8:88:53:
79:6c:39:2b:a0:46:34:92:44:a1:e9:dc:d6:54:d0:cf:df:ca:
1e:98:42:fb:9e:36:19:51:3a:a5:3c:a2:e3:a3:63:64:ad:ee:
7d:92:1a:69:23:0f:32:69:c9:6f:34:8e:3f:72:ce:04:9a:33:
ed:60:1e:12:6e:dc:ee:3b:86:71:37:df:ac:78:36:4e:66:bf:
d5:d9:a8:2e:9c:ee:0d:30:84:d7:5b:cd:e6:46:83:11:61:26:
99:a0:68:f9:cd:7c:6e:16:8f:f6:9e:c4:83:8f:bd:b5:49:cc:
62:f0:e9:9e:a3:34:90:d0:73:0b:5e:ea:de:41:a8:34:9c:63:
83:a1:30:b2:69:6b:df:07:a0:d5:e3:04:50:1f:b4:7d:dc:74:
c5:ef:f5:9a:df:42:18:47:50:e6:7c:af:bc:75:72:7f:9e:45:
4a:aa:7d:d9:1d:dd:74:fe:89:b1:d9:48:77:31:33:72:03:d2:
dc:61:5c:9c:b5:a9:c9:1a:90:7a:ea:1f:35:7b:a7:23:33:7a:
da:fb:70:37:f8:12:c6:5c:17:ec:e6:22:e9:41:36:b9:45:5c:
a5:bc:1c:83:36:2f:d1:a2:ca:a6:fe:77:1f:15:e5:7f:a5:d0:
a3:33:67:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:42:22 2025 by rpki-client