Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
File: GYC7us-p483M9sDpNTYaerJ9oU0.mft (raw, json)
Hash identifier: 59oKx1WccLzxxyiBh+SVeCtt969FPnu65QfhEXKTFXE=
Subject key identifier: A4:61:10:AD:35:2E:79:CD:18:90:E1:3C:AE:EE:CC:45:3B:2F:8D:FF
Authority key identifier: 19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
Certificate issuer: /CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Certificate serial: 0196B6A29AAB383354122C67398B431BB667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 20:00:31 +0000
Manifest this update: Fri 09 May 2025 20:00:31 +0000
Manifest next update: Sat 10 May 2025 20:00:31 +0000
Files and hashes: 1: Da6dAF-NGphy1zgRhDQ05RyQ1mQ.roa (hash: R5La2aCfCSDGzXotldIBaostZmuzpfxF11D1+dvqQ6Q=)
2: GYC7us-p483M9sDpNTYaerJ9oU0.crl (hash: vWwD7kuCVqStyWNTekChpBq0Fr3FPNcFVNy3sPgiGUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:a2:9a:ab:38:33:54:12:2c:67:39:8b:43:1b:b6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Validity
Not Before: May 9 20:00:31 2025 GMT
Not After : May 10 20:00:31 2025 GMT
Subject: CN=a46110ad352e79cd1890e13caeeecc453b2f8dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:c4:7a:3a:62:4f:52:a7:83:b7:94:3a:16:
51:a9:f4:6d:33:31:35:1e:6f:be:74:b9:6a:30:27:
35:ac:8c:62:5e:a3:9e:9e:d6:71:0a:bc:21:a4:62:
75:2a:d4:0c:f5:04:fb:b0:e8:e3:86:9b:a0:33:25:
13:ff:3b:89:5f:be:d2:5a:86:0e:24:5f:07:bc:d4:
90:5f:6a:29:5f:ef:fe:77:d2:33:24:c5:85:c6:82:
aa:9a:25:a7:ec:c4:dd:31:2f:e7:ae:22:8e:2c:54:
53:43:f4:df:b5:cc:63:d8:2d:46:7b:99:4e:55:ed:
e1:02:44:a6:26:b5:b5:6c:dc:b3:3a:51:2a:a7:d7:
6d:68:e0:d2:b4:f6:61:c4:e7:44:d1:d8:ba:1e:42:
7d:3b:fa:33:a6:9b:a7:fc:8f:89:25:ad:96:d4:ef:
13:50:97:62:b9:ad:15:1c:33:70:b7:ad:ce:18:94:
e2:b2:a4:d6:29:26:62:59:5c:56:79:9d:c9:b0:91:
10:a1:11:c6:0b:4f:50:e8:80:d6:a7:6e:86:76:e6:
88:3c:20:f4:b7:30:5b:62:92:d5:a1:e7:20:e2:68:
f0:cb:c8:b2:83:dc:e7:42:a2:82:54:f8:78:5b:fd:
02:88:62:00:f0:26:8b:7d:af:e0:cb:14:d6:2f:0f:
5f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:10:AD:35:2E:79:CD:18:90:E1:3C:AE:EE:CC:45:3B:2F:8D:FF
X509v3 Authority Key Identifier:
keyid:19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:02:a6:d4:be:9b:38:ec:e0:48:6d:e0:1d:a8:3e:f4:0a:30:
89:ef:96:07:c8:14:b3:01:1b:43:d5:57:c7:04:be:e3:75:f5:
e0:04:7d:f5:0f:f6:60:9b:12:b4:83:cc:7e:f5:cd:3a:78:fd:
8c:cb:fb:6e:ce:e3:cd:27:bb:25:20:1a:31:6c:b8:81:6b:25:
82:7b:33:11:c3:92:b7:f6:10:67:aa:87:4a:8b:a6:3f:be:66:
d2:b3:a6:12:67:16:83:4e:ef:79:cd:71:c3:b8:1b:d2:82:2f:
2e:33:04:43:9b:40:78:fd:34:fd:9e:82:c1:f0:d6:e3:ed:47:
3d:4b:ae:32:c2:47:a3:e4:47:19:87:65:0c:2b:48:5a:c6:b4:
f8:e2:bb:10:78:c8:85:33:f9:37:8c:f5:0c:34:ce:e3:16:60:
72:37:39:f5:aa:83:50:fc:65:b5:43:3e:94:04:23:f4:d3:ca:
33:fa:66:45:5d:c9:0c:4f:b4:35:49:31:7f:76:09:c2:d1:9f:
ca:46:54:f8:33:6a:d1:42:9b:7f:60:f3:f9:eb:32:a6:56:9b:
b9:25:83:84:c3:e5:67:87:17:0e:a0:3d:e8:60:ad:75:07:f0:
68:ca:36:80:98:10:ee:e0:9f:59:1c:87:ab:a4:79:1a:ce:fe:
7e:ca:2a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:19:28 2025 by rpki-client