Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
File: gyVb16Los8d3SMPFajBDu8ESbEE.mft (raw, json)
Hash identifier: krWoFk35rwya90pFOg47GmaDlV1h3z2OjVwhG1sk04w=
Subject key identifier: 91:F3:BF:41:58:6D:2E:67:5F:55:76:0A:66:B7:88:64:7B:ED:FD:80
Authority key identifier: 83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
Certificate issuer: /CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Certificate serial: 019880545BD9B801949686FA0112AD48F120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
Manifest number: 034E
Signing time: Wed 06 Aug 2025 17:01:08 +0000
Manifest this update: Wed 06 Aug 2025 17:01:08 +0000
Manifest next update: Thu 07 Aug 2025 17:01:08 +0000
Files and hashes: 1: DSVZ5LWHMvVEjx2Ly8HogvfGbeg.roa (hash: 00oXnXEmoCajVRqJ5SAY3Z4mponT7rL20+QYAvfx80c=)
2: gyVb16Los8d3SMPFajBDu8ESbEE.crl (hash: qkGXl/7+G2cYxMLccCBQDF9wpk/4oJ39OrZV6Lt3tLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 17:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:54:5b:d9:b8:01:94:96:86:fa:01:12:ad:48:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83255bd7a2e8b3c77748c3c56a3043bbc1126c41
Validity
Not Before: Aug 6 17:01:08 2025 GMT
Not After : Aug 7 17:01:08 2025 GMT
Subject: CN=91f3bf41586d2e675f55760a66b788647bedfd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:fd:0b:d3:7a:82:de:7c:d5:c1:57:e6:04:
8e:c3:8f:e9:9f:93:42:ad:1c:01:1a:5c:67:a2:45:
06:39:1f:06:dd:01:21:99:c6:0e:87:51:71:f1:74:
20:2d:0f:e0:3f:79:f6:37:1b:bc:d6:3f:6e:1e:6b:
d8:80:ca:d0:49:5d:30:f3:49:ca:ba:c8:f1:47:8d:
1e:20:0c:5a:eb:b4:f0:57:01:e7:2d:98:d7:69:e5:
20:c5:ff:ee:d1:12:2c:f2:83:b3:aa:f1:95:8c:a1:
7f:a7:a3:24:c2:f5:0e:0a:f3:5a:c8:77:75:fd:5f:
48:57:6f:1a:32:fd:57:2b:16:6f:38:85:ff:f3:78:
a9:0e:7d:86:65:c8:ca:92:cd:e2:53:f5:a4:2a:79:
a1:66:ff:80:87:87:e5:d0:8c:4d:10:82:26:b0:f3:
9f:e9:cf:34:e5:89:fa:9e:73:d0:47:e9:27:80:3d:
57:20:32:79:98:ee:8a:26:09:51:83:75:bd:b2:85:
d9:a0:25:13:55:8c:d9:71:7d:7d:1a:ad:a7:da:62:
0c:3b:64:f9:ac:dd:32:19:0f:9c:3c:b0:89:fe:4c:
da:0e:0c:76:b4:9e:eb:ae:01:ef:f2:0a:80:90:6d:
b9:d3:70:27:d2:ba:7c:bb:b3:f4:27:16:c7:9f:bd:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F3:BF:41:58:6D:2E:67:5F:55:76:0A:66:B7:88:64:7B:ED:FD:80
X509v3 Authority Key Identifier:
keyid:83:25:5B:D7:A2:E8:B3:C7:77:48:C3:C5:6A:30:43:BB:C1:12:6C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyVb16Los8d3SMPFajBDu8ESbEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/68d724-d62e-4689-998a-e14388e6145d/1/gyVb16Los8d3SMPFajBDu8ESbEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b7:d4:76:35:4c:19:0c:7a:57:49:f5:71:e9:7d:5a:e7:01:
2d:03:5e:f1:ce:5f:04:68:30:9a:03:65:63:2e:d1:f5:e4:5f:
1c:85:e8:1d:fa:e9:72:4e:8d:0d:27:36:a4:99:d5:75:a1:97:
f9:52:68:ec:f6:76:a0:48:93:8f:f5:31:9a:07:3e:5b:a7:c2:
96:0c:5e:9a:1d:cb:5c:e6:c9:aa:0a:32:5a:e8:54:02:69:e7:
70:ca:69:9a:f2:20:20:f8:c3:a9:00:5d:91:91:a4:15:76:4a:
0a:8f:ea:91:34:88:ad:b0:d9:1a:5f:d0:ea:14:e2:43:62:8a:
90:bd:97:58:34:49:79:38:03:ca:40:36:79:e2:58:63:30:33:
dc:1b:a9:0a:42:09:22:ee:58:34:ae:c7:e1:73:3c:ce:c9:64:
81:ec:5a:21:22:ed:db:a3:bc:7a:a6:5e:c3:e6:9d:e9:cc:61:
df:60:27:59:4f:fd:57:5f:0f:b5:a9:26:af:7b:0a:67:cd:1e:
91:f2:68:75:ed:2d:64:2a:37:80:ba:28:c7:05:8d:4c:58:0d:
2c:03:2c:2c:b8:72:4d:86:a1:86:6a:c8:52:20:e9:32:49:0e:
61:e9:1e:59:15:f9:b6:0c:fb:a5:b3:ff:c7:55:cf:56:51:ad:
41:03:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:28:57 2025 by rpki-client