Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: 6oKmAZDY+tCgX/PolXkJzq++UnDz7vTzVAEoqjDElAs=
Subject key identifier: E0:C7:8D:8A:12:5D:6D:8D:04:FB:6A:B2:46:B5:1C:95:11:65:EB:AD
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 0196C1CB7C0EF0DC17FF69E6CBC8ABF66843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 0427
Signing time: Mon 12 May 2025 00:01:00 +0000
Manifest this update: Mon 12 May 2025 00:01:00 +0000
Manifest next update: Tue 13 May 2025 00:01:00 +0000
Files and hashes: 1: 9Lg8t2QKFse3G-CZ2Zp542OLMtA.roa (hash: pzR3goZKI4C4CrcrTsbbX5Pt3NbXSkxC+j/aqvMv1vw=)
2: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (hash: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=)
3: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (hash: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=)
4: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: vWqcO8b5Xmomz7geC33a9t7YZQG7lsD7zRMMtV/NTiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:7c:0e:f0:dc:17:ff:69:e6:cb:c8:ab:f6:68:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: May 12 00:01:00 2025 GMT
Not After : May 13 00:01:00 2025 GMT
Subject: CN=e0c78d8a125d6d8d04fb6ab246b51c951165ebad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:9a:4c:66:b8:5c:3c:0e:d2:a2:53:9a:51:
20:13:56:f1:0e:60:e7:cb:45:34:aa:d9:ff:ac:04:
8f:81:26:27:4f:25:3a:e5:0c:c8:6f:8c:b5:02:32:
91:91:66:a8:8d:db:d1:42:de:9f:0e:08:c1:fc:8a:
d4:da:3c:25:09:11:29:ea:0b:52:7f:02:4b:30:2b:
dd:fb:87:c5:4b:87:55:d1:85:e2:b3:10:b9:bb:ac:
c0:b9:b4:f0:6e:10:f9:55:d0:a7:09:84:c2:85:e3:
68:15:ed:25:26:75:8a:aa:86:da:d0:a9:b3:2b:c6:
db:f5:b9:da:64:46:a3:71:71:0d:52:91:8b:8d:29:
a2:4a:cf:7a:6d:a3:33:ef:44:3a:9a:0e:03:cc:aa:
50:30:da:12:d0:48:2a:9f:7c:dd:5d:bd:58:a2:f6:
e3:6e:34:95:c7:f2:f4:69:87:5b:f0:cf:6a:7a:54:
0e:22:47:d9:47:5b:f4:05:de:b0:2b:f4:ce:8a:66:
d6:dd:9a:0e:fe:c0:8c:c6:f9:ce:b3:84:c6:e3:97:
88:ce:db:d7:f5:e6:ef:f6:bd:0a:be:5b:50:0f:b9:
4f:f3:76:66:e3:69:60:48:24:88:7d:2e:0e:7c:9f:
fa:91:df:ea:68:03:fd:4c:d8:ba:f9:44:c6:17:b5:
4c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C7:8D:8A:12:5D:6D:8D:04:FB:6A:B2:46:B5:1C:95:11:65:EB:AD
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:b7:52:ea:f7:e4:7d:38:47:5b:75:a0:d5:28:7b:aa:d6:88:
21:2e:46:52:5a:00:0d:2d:92:5f:a7:d3:f1:d9:91:56:46:71:
eb:e9:36:e4:10:80:6f:33:b1:df:1b:8c:5e:1f:a1:e6:85:af:
1b:47:58:6e:e0:af:3b:4a:ae:00:49:d6:16:b9:bc:d0:51:8e:
f9:f4:be:85:e1:bd:4a:91:a1:90:4f:a0:2c:f3:83:2b:78:af:
a7:ad:a4:cf:93:48:57:85:10:36:bb:f1:34:88:34:e2:05:d2:
d8:8f:1c:a3:07:b2:ad:a7:0e:a1:d5:2e:80:25:da:db:52:80:
78:26:ca:26:b7:6a:44:c6:4e:ef:a7:c0:64:d0:ea:b1:ce:c7:
b0:02:a5:d3:be:aa:19:b6:fc:fc:31:33:d4:18:08:9a:17:02:
18:00:77:5d:42:dd:24:74:10:e1:5c:dd:32:2f:5e:93:d9:01:
df:e6:3c:f0:d4:f6:6e:20:11:b8:1f:28:69:20:3a:65:e3:81:
d4:7b:9a:7e:d3:87:02:59:17:38:3c:09:7b:e4:fd:07:73:a4:
58:d7:66:7d:7c:37:c9:89:63:e4:da:ac:43:79:42:be:d4:22:
09:f9:23:ed:f1:68:7e:69:4a:3a:c4:ca:a7:1c:ea:8a:6e:e4:
5c:83:f2:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBy3wO8NwX/2nmy8ir9mhDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh
Mzk2OTgwHhcNMjUwNTEyMDAwMTAwWhcNMjUwNTEzMDAwMTAwWjAzMTEwLwYDVQQD
EyhlMGM3OGQ4YTEyNWQ2ZDhkMDRmYjZhYjI0NmI1MWM5NTExNjVlYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph2aTGa4XDwO0qJTmlEgE1bxDmDn
y0U0qtn/rASPgSYnTyU65QzIb4y1AjKRkWaojdvRQt6fDgjB/IrU2jwlCREp6gtS
fwJLMCvd+4fFS4dV0YXisxC5u6zAubTwbhD5VdCnCYTCheNoFe0lJnWKqoba0Kmz
K8bb9bnaZEajcXENUpGLjSmiSs96baMz70Q6mg4DzKpQMNoS0Egqn3zdXb1Yovbj
bjSVx/L0aYdb8M9qelQOIkfZR1v0Bd6wK/TOimbW3ZoO/sCMxvnOs4TG45eIztvX
9ebv9r0KvltQD7lP83Zm42lgSCSIfS4OfJ/6kd/qaAP9TNi6+UTGF7VMhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODHjYoSXW2NBPtqska1HJURZeutMB8GA1UdIwQY
MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It
MTEzNzA3M2ZhOGY2LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2
LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbdS6vfk
fThHW3Wg1Sh7qtaIIS5GUloADS2SX6fT8dmRVkZx6+k25BCAbzOx3xuMXh+h5oWv
G0dYbuCvO0quAEnWFrm80FGO+fS+heG9SpGhkE+gLPODK3ivp62kz5NIV4UQNrvx
NIg04gXS2I8coweyracOodUugCXa21KAeCbKJrdqRMZO76fAZNDqsc7HsAKl076q
Gbb8/DEz1BgImhcCGAB3XULdJHQQ4VzdMi9ek9kB3+Y88NT2biARuB8oaSA6ZeOB
1HuaftOHAlkXODwJe+T9B3OkWNdmfXw3yYlj5NqsQ3lCvtQiCfkj7fFofmlKOsTK
pxzqim7kXIPyzw==
-----END CERTIFICATE-----
Generated at Mon May 12 03:50:03 2025 by rpki-client