Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
File: GYC7us-p483M9sDpNTYaerJ9oU0.mft (raw, json)
Hash identifier: cVjPyqEKvT2MLgSIZAK3qn9o0kZVXY/4LXSyRcnMucU=
Subject key identifier: 1E:BB:ED:9D:96:40:41:5E:CE:68:C7:A3:A1:E1:18:5B:45:93:79:D0
Authority key identifier: 19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
Certificate issuer: /CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Certificate serial: 0199FAD7A3223635F96CA8E3E4E90EED7450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 05:00:59 +0000
Manifest this update: Sun 19 Oct 2025 05:00:59 +0000
Manifest next update: Mon 20 Oct 2025 05:00:59 +0000
Files and hashes: 1: Da6dAF-NGphy1zgRhDQ05RyQ1mQ.roa (hash: R5La2aCfCSDGzXotldIBaostZmuzpfxF11D1+dvqQ6Q=)
2: GYC7us-p483M9sDpNTYaerJ9oU0.crl (hash: Jw+8gLmeI6iBfoJch+6LCx4AcA69L030G5gW9XhPGco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a3:22:36:35:f9:6c:a8:e3:e4:e9:0e:ed:74:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Validity
Not Before: Oct 19 05:00:59 2025 GMT
Not After : Oct 20 05:00:59 2025 GMT
Subject: CN=1ebbed9d9640415ece68c7a3a1e1185b459379d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:fc:9e:dd:42:ee:8e:88:94:2b:50:b9:4d:
3f:a9:1d:87:8b:86:10:ff:0a:47:ff:7e:99:5b:47:
88:f8:32:83:7c:56:b3:0a:a8:f8:14:40:76:d6:6b:
74:36:34:d2:bc:bc:fa:ae:4d:5c:38:19:0f:89:95:
8f:07:24:95:1f:95:26:77:8c:f4:20:07:d1:c9:f4:
09:5b:7f:9a:d1:f6:30:72:6b:83:47:17:5c:d0:f9:
7a:f2:76:08:cf:b3:dc:6d:b7:96:28:f7:8f:64:4d:
e3:46:56:69:fe:3f:b5:41:b1:d7:d9:01:ee:21:02:
3e:9e:6d:a1:f1:e0:c7:65:88:70:7b:51:00:90:78:
d4:ca:95:90:41:38:a3:b5:24:70:3d:10:73:a8:40:
1d:26:e2:d7:3a:2f:0d:c6:0d:74:d7:7e:cc:e8:79:
b9:c8:25:51:ab:b4:ba:e5:37:e3:22:0b:4f:e2:87:
be:68:0b:fe:9e:b3:e2:de:9e:ad:9a:99:eb:39:28:
04:8b:bc:be:a5:59:4d:38:42:2c:3e:02:37:22:15:
dc:e9:c2:20:82:e0:b4:79:5a:74:69:32:6b:46:fd:
63:3f:3d:3d:1b:40:1c:9f:49:44:a6:cc:0c:02:c9:
63:f0:59:29:8f:bc:70:2f:ae:be:cb:6b:e8:62:c7:
10:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BB:ED:9D:96:40:41:5E:CE:68:C7:A3:A1:E1:18:5B:45:93:79:D0
X509v3 Authority Key Identifier:
keyid:19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:47:43:c9:2d:12:c1:de:0d:ed:70:d1:ba:da:69:c8:20:b2:
5c:4e:c6:3e:3d:e3:03:d8:d5:75:3e:bd:87:5d:13:1c:e1:7e:
ac:40:ad:60:57:82:d5:12:3c:f4:30:91:96:d4:1c:d9:5a:03:
5f:80:04:32:84:6b:3c:de:b0:c1:24:f1:b8:93:94:a0:6d:18:
bb:d4:d0:98:a0:cb:ad:83:1e:74:00:6d:81:a0:5c:01:b4:07:
35:df:24:cd:12:f5:a5:a0:71:13:a6:4c:b5:32:50:18:90:d9:
7e:ed:8c:02:31:5b:2b:4b:4e:25:3f:f3:8b:6b:7e:bf:9d:28:
05:10:58:3c:69:bf:1c:f7:3c:52:d6:89:eb:dd:ff:a0:25:16:
eb:0e:9d:1e:7d:b8:cb:f7:a6:9e:77:9c:6a:57:09:2f:1a:b4:
39:26:26:f0:0d:3a:26:ec:1c:37:5d:ba:35:6b:03:7e:ab:31:
1f:bb:92:ba:b2:10:29:de:bb:9e:d4:63:6d:5c:ac:d5:f1:af:
6c:8c:98:eb:04:f1:8f:9d:9d:2a:e7:e9:3a:34:f1:00:69:b7:
7a:ce:92:1d:3b:69:2c:cf:60:7f:98:01:f3:bc:27:7a:1b:5a:
36:9c:48:a6:21:09:a8:c8:7d:f3:a2:22:b5:57:01:d8:13:2e:
32:49:ea:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn616MiNjX5bKjj5OkO7XRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODBiYmJhY2ZhOWUzY2RjY2Y2YzBlOTM1MzYxYTdhYjI3
ZGExNGQwHhcNMjUxMDE5MDUwMDU5WhcNMjUxMDIwMDUwMDU5WjAzMTEwLwYDVQQD
EygxZWJiZWQ5ZDk2NDA0MTVlY2U2OGM3YTNhMWUxMTg1YjQ1OTM3OWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriv8nt1C7o6IlCtQuU0/qR2Hi4YQ
/wpH/36ZW0eI+DKDfFazCqj4FEB21mt0NjTSvLz6rk1cOBkPiZWPBySVH5Umd4z0
IAfRyfQJW3+a0fYwcmuDRxdc0Pl68nYIz7PcbbeWKPePZE3jRlZp/j+1QbHX2QHu
IQI+nm2h8eDHZYhwe1EAkHjUypWQQTijtSRwPRBzqEAdJuLXOi8Nxg10137M6Hm5
yCVRq7S65TfjIgtP4oe+aAv+nrPi3p6tmpnrOSgEi7y+pVlNOEIsPgI3IhXc6cIg
guC0eVp0aTJrRv1jPz09G0Acn0lEpswMAslj8Fkpj7xwL66+y2voYscQ1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB677Z2WQEFezmjHo6HhGFtFk3nQMB8GA1UdIwQY
MBaAFBmAu7rPqePNzPbA6TU2GnqyfaFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NzY1ZTgtNjFiOC00MGM3LTg0N2Yt
ZGNjZTBjOWY0ZDk0LzEvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80NzY1ZTgtNjFiOC00MGM3LTg0N2YtZGNjZTBjOWY0ZDk0
LzEvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEdDyS0S
wd4N7XDRutppyCCyXE7GPj3jA9jVdT69h10THOF+rECtYFeC1RI89DCRltQc2VoD
X4AEMoRrPN6wwSTxuJOUoG0Yu9TQmKDLrYMedABtgaBcAbQHNd8kzRL1paBxE6ZM
tTJQGJDZfu2MAjFbK0tOJT/zi2t+v50oBRBYPGm/HPc8UtaJ693/oCUW6w6dHn24
y/emnnecalcJLxq0OSYm8A06JuwcN126NWsDfqsxH7uSurIQKd67ntRjbVys1fGv
bIyY6wTxj52dKufpOjTxAGm3es6SHTtpLM9gf5gB87wnehtaNpxIpiEJqMh986Ii
tVcB2BMuMknqng==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:12 2025 by rpki-client