Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: +GCZryVw2TYEETHmhkyU7vKEdVFFklO6wKV2NsoM6Iw=
Subject key identifier: E3:70:BB:D2:8C:4A:42:93:EF:2E:6D:CB:A2:5A:FE:09:78:A3:BF:D1
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 0199FC5890969AEF2EFCEBBB18D9FF4D7121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 05D3
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: 9Lg8t2QKFse3G-CZ2Zp542OLMtA.roa (hash: pzR3goZKI4C4CrcrTsbbX5Pt3NbXSkxC+j/aqvMv1vw=)
2: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (hash: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=)
3: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (hash: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=)
4: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: npVzJafOJoeFAkIa0gkx5B0PnBZzQYakSj0aJgGrwjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:90:96:9a:ef:2e:fc:eb:bb:18:d9:ff:4d:71:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=e370bbd28c4a4293ef2e6dcba25afe0978a3bfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c5:8e:2c:70:d6:43:4c:81:b1:01:b5:5a:58:
87:16:0b:74:57:00:eb:33:27:58:68:52:a2:73:c7:
3a:a8:91:05:af:77:a5:61:e2:59:5e:4e:8f:7a:3d:
4f:b3:f6:69:19:f3:d9:a7:a5:3c:b4:71:89:27:21:
4e:c1:8e:bd:b6:30:5c:84:cc:5a:2e:48:0e:e3:a7:
b4:93:45:35:1b:67:f2:f3:be:ae:4b:0d:d9:69:7e:
b4:d6:60:fe:a9:e2:82:98:b5:5f:3b:06:a0:0c:cb:
51:96:c1:00:57:84:e9:a3:a1:d9:b2:6d:92:ce:90:
c6:b3:61:a8:e1:cc:3d:5f:0e:d8:b4:a3:2b:35:f5:
a8:28:84:7e:73:3e:23:03:89:ff:81:5d:e7:d4:c6:
f2:ad:12:4a:6d:05:11:6c:da:fa:7a:4f:46:59:95:
5d:2d:d0:e1:bd:09:a4:fa:c3:a6:07:ed:f3:63:a8:
70:d9:cb:3a:cd:bf:c1:9d:4f:f7:96:72:e2:73:1c:
3b:6b:fb:f9:ee:fd:0c:f3:6f:a8:4e:ef:1a:62:83:
d9:ab:74:40:0b:bb:aa:0a:71:9b:fd:f9:71:29:65:
63:5d:c6:66:a1:56:63:35:ac:72:18:27:4f:13:06:
6c:2f:44:2e:e0:98:f6:65:fa:5f:30:1f:f0:90:d0:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:70:BB:D2:8C:4A:42:93:EF:2E:6D:CB:A2:5A:FE:09:78:A3:BF:D1
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:04:32:b6:a0:55:ae:f1:c7:dd:4d:99:f8:40:f0:db:b1:f0:
d0:1e:3c:20:0c:dd:c0:be:3b:fc:56:f4:0d:dc:e8:33:ef:31:
42:cf:ad:32:ad:d2:db:40:f6:04:65:9b:e6:15:0a:04:9d:4e:
79:78:5f:ea:1a:ba:b0:af:8b:56:ec:42:f3:60:ac:d8:db:e0:
2d:5b:78:6f:20:ef:e3:6b:02:93:21:26:96:d5:ce:8c:d7:0e:
f7:a9:43:a5:1d:dc:a5:79:86:15:99:90:b9:8f:7d:18:67:37:
23:1f:54:db:a5:6b:8c:86:c3:23:a7:0c:37:9d:f2:b3:53:08:
89:3d:3a:f5:b1:23:b9:23:d7:f2:c0:61:c6:42:5b:08:a2:68:
28:79:e0:ae:c4:04:18:22:95:9a:27:ea:2b:32:fb:1c:e2:fc:
5d:13:a5:2a:14:86:50:6a:7c:f4:ad:eb:ef:e4:3e:7f:28:72:
3f:bc:6b:49:19:9e:45:13:a7:4b:3f:79:e7:00:a0:40:72:88:
05:dc:d8:e8:07:55:64:ae:ae:d7:ea:d5:e0:79:91:42:b2:d1:
20:18:85:9b:8f:95:61:93:b3:f6:a4:23:b8:17:19:74:a9:02:
32:9a:1a:5e:1a:00:84:f2:d4:e9:2a:1a:93:cc:ab:c4:fb:1d:
2d:d4:f7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:11 2025 by rpki-client