Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: jDQ+tKkF7gEdYj6ULMcTFGuXOMioxGqE5hq1JL8SdLU=
Subject key identifier: C9:CA:DF:CC:09:1E:CD:DB:F3:B0:4C:5F:C1:61:08:50:AF:62:26:D6
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 0197C68165475CABC818F9FBDA3463EDFF73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 04AE
Signing time: Tue 01 Jul 2025 15:00:58 +0000
Manifest this update: Tue 01 Jul 2025 15:00:58 +0000
Manifest next update: Wed 02 Jul 2025 15:00:58 +0000
Files and hashes: 1: 9Lg8t2QKFse3G-CZ2Zp542OLMtA.roa (hash: pzR3goZKI4C4CrcrTsbbX5Pt3NbXSkxC+j/aqvMv1vw=)
2: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (hash: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=)
3: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (hash: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=)
4: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: mq4ruLRT+ZgyxUBxMVYTuTzITC5LLv6sbvSQLxsNCQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:81:65:47:5c:ab:c8:18:f9:fb:da:34:63:ed:ff:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Jul 1 15:00:58 2025 GMT
Not After : Jul 2 15:00:58 2025 GMT
Subject: CN=c9cadfcc091ecddbf3b04c5fc1610850af6226d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:81:b0:b7:10:cd:12:ea:2b:82:61:d8:fc:50:
fc:7c:7d:5b:ff:06:0b:d2:b1:0c:db:38:0c:eb:f3:
f5:ee:2a:31:c2:e9:0c:2d:f0:ec:a5:c8:a6:52:92:
12:1e:f2:d0:a3:35:87:de:09:cc:df:82:9d:00:52:
e2:42:c6:42:59:0a:7f:5d:47:8d:6e:cb:00:67:c4:
e1:46:de:62:2a:ce:02:d0:3a:6c:7e:19:01:10:a2:
16:9e:4c:fe:30:5b:1d:f2:8f:fe:61:7f:2d:01:d7:
8d:af:16:ec:59:7d:3f:5e:d1:27:2f:a3:8f:6f:6f:
59:14:67:e1:22:28:bf:56:8c:e8:d6:cd:e6:f3:ee:
4c:4b:3a:c0:4c:e9:28:ce:b1:31:53:33:88:db:06:
57:be:41:e1:ea:f1:42:b2:c7:5f:e9:92:c2:3d:5f:
ce:7d:9e:3b:2f:b9:8c:14:81:ef:55:9a:59:1a:2c:
fa:0a:11:ed:f3:63:df:b6:6b:e7:2b:2c:d3:8f:75:
6c:40:21:50:4d:69:46:83:7f:92:e2:7c:02:60:b7:
7c:f4:a2:b8:35:c0:e2:15:d9:7a:c5:ca:b9:5b:a4:
29:ce:87:5b:49:65:21:63:70:ad:30:bf:22:03:45:
cc:20:45:53:6d:c5:48:5c:68:65:22:a6:05:46:b8:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CA:DF:CC:09:1E:CD:DB:F3:B0:4C:5F:C1:61:08:50:AF:62:26:D6
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:39:72:2c:c6:c7:95:b9:2f:4d:e3:b3:39:e9:7f:5a:d3:e0:
e5:af:f9:7c:41:f2:d1:3e:d4:78:97:fa:18:35:2f:39:4e:a8:
5f:23:9a:6b:17:d1:36:32:94:29:bc:87:65:d1:34:c3:c0:ad:
09:a4:07:68:13:0c:25:be:50:ce:20:b7:37:86:34:eb:94:a0:
94:60:c8:9f:91:7c:20:66:28:94:fa:24:8e:75:a4:af:dd:41:
ca:d9:c5:41:bc:38:99:0e:ce:2f:f7:17:2f:dc:19:23:00:2f:
89:bd:cd:1a:07:73:4f:90:0f:3e:26:56:64:fe:d3:9c:53:b0:
aa:fd:6f:8e:73:e6:da:57:a8:bd:a0:b6:3d:4e:e8:f6:46:96:
54:20:e2:d5:de:72:a8:dc:7a:bc:be:62:11:53:8e:78:14:03:
7a:a5:a9:32:dd:44:af:fb:7a:75:b0:41:49:2d:14:0d:41:2f:
1c:a9:dd:8c:f3:0c:bc:fa:5f:e0:a5:f6:d7:25:e7:24:e5:6c:
9b:df:6d:d5:c5:c9:9f:f0:20:fb:34:77:3b:b7:62:86:9c:7b:
25:27:88:5a:ee:4a:e7:7d:fd:d1:3e:09:16:35:c8:83:eb:31:
a8:4a:49:91:b3:f0:53:5e:cf:ca:d6:ce:29:7e:74:45:11:72:
75:6d:f2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:37:49 2025 by rpki-client