Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
File: GYC7us-p483M9sDpNTYaerJ9oU0.mft (raw, json)
Hash identifier: 3W2aIsKzCNTZwP/u7zncAxkaZG/uPLWFjfKppH1Dw0U=
Subject key identifier: 6D:36:28:6C:F7:DC:AD:BA:D1:76:24:9C:1D:BB:FD:C3:C6:D8:C4:98
Authority key identifier: 19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
Certificate issuer: /CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Certificate serial: 01984A40EA3FBF43B8481F4C429A9D559CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 05:00:24 +0000
Manifest this update: Sun 27 Jul 2025 05:00:24 +0000
Manifest next update: Mon 28 Jul 2025 05:00:24 +0000
Files and hashes: 1: Da6dAF-NGphy1zgRhDQ05RyQ1mQ.roa (hash: R5La2aCfCSDGzXotldIBaostZmuzpfxF11D1+dvqQ6Q=)
2: GYC7us-p483M9sDpNTYaerJ9oU0.crl (hash: iLERHb4zHQrzEN8Zl/9+OAnFkIBXJul+OJPcfmGcK2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:ea:3f:bf:43:b8:48:1f:4c:42:9a:9d:55:9c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Validity
Not Before: Jul 27 05:00:24 2025 GMT
Not After : Jul 28 05:00:24 2025 GMT
Subject: CN=6d36286cf7dcadbad176249c1dbbfdc3c6d8c498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b4:a0:f2:bd:8a:e3:64:57:ff:3e:98:b5:74:
cf:9f:ff:f4:d8:b3:7c:69:f4:e1:34:f3:7e:ce:c4:
89:6f:42:40:b5:87:d8:cf:02:e0:ea:81:5a:c1:f7:
17:4c:cc:1a:a1:c0:11:84:58:26:e2:6b:10:b2:ed:
8a:9e:9b:10:f3:b1:dc:08:50:d3:ae:6d:07:44:c9:
ee:f5:fd:61:a6:56:59:2e:d6:1d:5d:7c:c9:84:6a:
a1:b4:53:84:e0:ae:35:3a:4f:3b:55:df:bd:f4:fc:
eb:21:89:33:40:94:c0:20:a0:4e:a1:38:07:67:7e:
91:43:6e:53:04:6e:70:67:56:de:8a:3e:3a:e8:17:
bd:c5:1d:4c:1a:ba:c9:36:c5:31:ad:a8:4a:99:cc:
7e:30:0e:a5:94:82:0b:3d:3e:14:45:22:98:3c:cc:
3f:1f:59:9a:e7:09:43:f0:f5:45:cd:b4:ca:3c:25:
0e:b2:82:44:75:db:2f:81:18:07:bb:c8:49:c5:0f:
c2:27:c5:4c:45:82:a0:96:20:be:d3:9f:68:82:64:
11:1f:e6:ed:e5:ff:3f:6e:88:d4:7f:e6:85:6d:8e:
da:e4:c2:3c:27:93:33:80:ec:0f:b9:18:68:06:22:
11:83:a6:a2:0f:2f:ec:3a:e9:2f:d5:70:5b:02:6d:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:36:28:6C:F7:DC:AD:BA:D1:76:24:9C:1D:BB:FD:C3:C6:D8:C4:98
X509v3 Authority Key Identifier:
keyid:19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:22:0f:1a:13:60:05:cb:83:f5:bc:ef:6d:51:d4:41:39:ad:
df:53:68:ce:59:35:08:8c:82:2f:e0:20:a5:35:05:42:01:c3:
b4:72:72:78:59:5f:02:78:e7:c4:ae:4c:e6:73:c1:f3:9f:05:
3b:cb:d9:43:bc:6c:46:2a:af:af:86:4d:83:82:82:dd:98:71:
9f:f8:ba:30:4f:99:37:1c:d6:ba:2e:2c:a4:92:53:52:69:9c:
c8:fa:1f:11:e3:32:a2:67:8e:e1:ca:ad:6b:10:9f:8a:07:9e:
13:20:90:3c:02:99:fd:f3:07:05:21:f4:2a:37:23:ac:4a:3d:
b4:7b:59:5e:9f:1b:a1:48:50:9e:bf:18:4e:0f:10:4c:25:07:
33:b0:b3:e5:28:ad:29:1a:d7:1f:5d:9b:f2:c5:d8:bb:73:31:
de:68:c4:b5:91:10:b0:e5:9c:9f:9a:9a:bd:18:fc:20:ea:96:
39:dc:40:ef:a9:63:a2:dd:9b:f3:82:a6:c1:67:a2:c4:22:1b:
a8:09:a1:09:2b:60:13:61:c0:7c:5b:22:c2:db:dc:f5:02:cb:
fe:e7:02:ca:90:10:fe:77:e5:20:dd:3c:7e:02:f7:62:e3:02:
01:68:b9:dd:fd:e9:60:f7:52:25:e4:ad:b5:0a:d8:84:cd:5d:
0d:b3:f9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:19:45 2025 by rpki-client