Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
File: GYC7us-p483M9sDpNTYaerJ9oU0.mft (raw, json)
Hash identifier: Fb5s0Xx064YU23e70Vduqbq/nAgd3QmqWxay7+k44AU=
Subject key identifier: 42:F7:00:BD:47:22:C0:CA:16:52:54:39:08:F3:16:86:D9:54:D1:EA
Authority key identifier: 19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
Certificate issuer: /CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Certificate serial: 0194BABB18E58D5FBEC01BB25854773A3711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 05:00:11 +0000
Manifest this update: Fri 31 Jan 2025 05:00:11 +0000
Manifest next update: Sat 01 Feb 2025 05:00:11 +0000
Files and hashes: 1: Da6dAF-NGphy1zgRhDQ05RyQ1mQ.roa (hash: R5La2aCfCSDGzXotldIBaostZmuzpfxF11D1+dvqQ6Q=)
2: GYC7us-p483M9sDpNTYaerJ9oU0.crl (hash: TYEwRwE5f/6qfvuclhHMc0VsHDQqnWTueW9rTawK8CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:18:e5:8d:5f:be:c0:1b:b2:58:54:77:3a:37:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1980bbbacfa9e3cdccf6c0e935361a7ab27da14d
Validity
Not Before: Jan 31 05:00:11 2025 GMT
Not After : Feb 1 05:00:11 2025 GMT
Subject: CN=42f700bd4722c0ca1652543908f31686d954d1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:54:b6:b6:52:6e:e4:33:bd:2e:d4:93:0d:0d:
14:a7:38:8d:a2:68:30:7c:01:50:02:05:bb:e5:bd:
0e:97:a8:0d:7c:35:7b:4f:72:88:a2:79:53:1a:52:
f6:ff:6b:b8:da:43:ac:00:bc:d9:8f:7d:ea:c6:e4:
95:c6:f1:88:77:ad:32:0c:7f:33:74:c7:79:78:72:
63:e9:81:40:5f:7a:2d:b2:66:29:73:fd:ee:3e:6c:
d7:53:6d:b1:45:24:0d:d7:d5:f0:64:4b:b6:51:ff:
a8:03:6a:d1:ca:26:c4:29:dd:2e:8d:e7:0c:ad:d2:
4c:ee:87:08:35:fa:d2:a1:e6:05:21:87:9b:56:fa:
2e:88:8b:26:81:db:15:03:14:37:20:0e:66:42:38:
f3:0a:78:c9:38:12:3f:e7:1b:a3:36:73:b8:20:67:
4c:00:f5:f2:8f:3c:c1:a8:c3:b1:3c:97:1e:9b:63:
f2:08:47:07:d5:92:ba:37:36:47:48:17:9d:58:e1:
ab:c3:ac:aa:1d:03:27:da:90:9d:fe:c5:30:1e:e1:
a2:6c:1d:5c:67:50:61:eb:97:06:44:2a:b3:8a:79:
bb:ca:24:7f:99:31:c3:d9:3f:ed:c9:f0:5e:d0:97:
ab:26:30:65:89:b1:3b:d2:73:28:d0:f5:0a:ca:5f:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F7:00:BD:47:22:C0:CA:16:52:54:39:08:F3:16:86:D9:54:D1:EA
X509v3 Authority Key Identifier:
keyid:19:80:BB:BA:CF:A9:E3:CD:CC:F6:C0:E9:35:36:1A:7A:B2:7D:A1:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYC7us-p483M9sDpNTYaerJ9oU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4765e8-61b8-40c7-847f-dcce0c9f4d94/1/GYC7us-p483M9sDpNTYaerJ9oU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c4:07:da:7b:7e:1d:ff:93:93:7f:7f:6c:88:4c:83:80:13:
ee:c3:a2:1c:b8:c1:7b:cc:a1:4f:7e:88:df:78:7b:86:b1:d6:
66:55:b7:16:80:0d:00:1b:c9:6b:1b:20:0c:d9:f1:62:35:f0:
61:a7:6c:3e:7c:e4:3c:3a:c4:92:36:d7:60:62:6e:13:b2:e8:
6c:af:9c:b0:05:45:df:9f:40:10:ab:ee:28:09:f6:6b:72:8c:
99:fe:9b:99:5a:a8:cc:07:77:9f:ca:0b:54:1b:4b:08:a8:e5:
08:d9:64:6d:a0:0f:d2:53:0b:36:2d:16:ca:43:63:e7:52:aa:
e4:bf:5f:1d:8d:69:c4:32:d7:6c:d2:cd:bb:fa:0c:f2:3a:b8:
55:15:b7:28:de:a0:5a:57:28:4c:a7:45:bd:92:8e:d0:86:66:
e4:d4:74:ec:90:c8:90:4f:29:9d:92:c9:98:67:d1:97:84:53:
6b:0d:d8:18:c3:78:30:e8:e3:94:35:0c:f0:16:d2:bf:d0:1c:
09:2f:43:9a:2b:f8:4d:a4:80:b3:fc:92:62:96:7f:3a:b1:7c:
cc:4e:59:ec:c7:58:53:14:82:a9:27:10:e6:8a:06:21:bb:4b:
ff:0f:3c:38:d0:a0:a5:69:6f:88:c0:ee:b7:44:75:19:8e:cd:
c8:33:e8:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6uxjljV++wBuyWFR3OjcRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODBiYmJhY2ZhOWUzY2RjY2Y2YzBlOTM1MzYxYTdhYjI3
ZGExNGQwHhcNMjUwMTMxMDUwMDExWhcNMjUwMjAxMDUwMDExWjAzMTEwLwYDVQQD
Eyg0MmY3MDBiZDQ3MjJjMGNhMTY1MjU0MzkwOGYzMTY4NmQ5NTRkMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lS2tlJu5DO9LtSTDQ0UpziNomgw
fAFQAgW75b0Ol6gNfDV7T3KIonlTGlL2/2u42kOsALzZj33qxuSVxvGId60yDH8z
dMd5eHJj6YFAX3otsmYpc/3uPmzXU22xRSQN19XwZEu2Uf+oA2rRyibEKd0ujecM
rdJM7ocINfrSoeYFIYebVvouiIsmgdsVAxQ3IA5mQjjzCnjJOBI/5xujNnO4IGdM
APXyjzzBqMOxPJcem2PyCEcH1ZK6NzZHSBedWOGrw6yqHQMn2pCd/sUwHuGibB1c
Z1Bh65cGRCqzinm7yiR/mTHD2T/tyfBe0JerJjBlibE70nMo0PUKyl+b1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEL3AL1HIsDKFlJUOQjzFobZVNHqMB8GA1UdIwQY
MBaAFBmAu7rPqePNzPbA6TU2GnqyfaFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80NzY1ZTgtNjFiOC00MGM3LTg0N2Yt
ZGNjZTBjOWY0ZDk0LzEvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80NzY1ZTgtNjFiOC00MGM3LTg0N2YtZGNjZTBjOWY0ZDk0
LzEvR1lDN3VzLXA0ODNNOXNEcE5UWWFlcko5b1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMQH2nt+
Hf+Tk39/bIhMg4AT7sOiHLjBe8yhT36I33h7hrHWZlW3FoANABvJaxsgDNnxYjXw
YadsPnzkPDrEkjbXYGJuE7LobK+csAVF359AEKvuKAn2a3KMmf6bmVqozAd3n8oL
VBtLCKjlCNlkbaAP0lMLNi0WykNj51Kq5L9fHY1pxDLXbNLNu/oM8jq4VRW3KN6g
WlcoTKdFvZKO0IZm5NR07JDIkE8pnZLJmGfRl4RTaw3YGMN4MOjjlDUM8BbSv9Ac
CS9Dmiv4TaSAs/ySYpZ/OrF8zE5Z7MdYUxSCqScQ5ooGIbtL/w88ONCgpWlviMDu
t0R1GY7NyDPoYA==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:29:51 2025 by rpki-client on console-fra.rpki-client.org