Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: 7/M87AiC8TwLP/GMWcEFDoqQ6j6g++Qt/QE1fBtO1oQ=
Subject key identifier: C3:71:E5:C4:82:4D:8E:A7:91:CE:CA:D1:1A:2E:63:84:D2:F4:81:5D
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 019855691F4FD5DC97CDEB4CEBB968838644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 04F8
Signing time: Tue 29 Jul 2025 09:00:09 +0000
Manifest this update: Tue 29 Jul 2025 09:00:09 +0000
Manifest next update: Wed 30 Jul 2025 09:00:09 +0000
Files and hashes: 1: 9Lg8t2QKFse3G-CZ2Zp542OLMtA.roa (hash: pzR3goZKI4C4CrcrTsbbX5Pt3NbXSkxC+j/aqvMv1vw=)
2: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (hash: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=)
3: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (hash: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=)
4: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: UXkeF+xWDyyrmQtsHHxvyGHoyHSBm+rbjZkNoWp3WN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 09:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:1f:4f:d5:dc:97:cd:eb:4c:eb:b9:68:83:86:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Jul 29 09:00:09 2025 GMT
Not After : Jul 30 09:00:09 2025 GMT
Subject: CN=c371e5c4824d8ea791cecad11a2e6384d2f4815d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:bd:a5:1e:49:96:01:e6:be:5b:d2:86:18:
f2:18:26:22:f0:69:6c:df:e5:8e:b5:28:d2:cb:8b:
8f:68:da:0c:d1:7d:34:12:45:8a:26:6f:52:c9:8f:
ac:f7:e2:22:b7:3e:c1:fa:5c:cd:58:03:97:19:a1:
01:09:a6:ae:11:b6:87:1f:2c:57:ec:13:55:f1:f1:
70:a7:d5:dc:14:a3:c5:a3:55:85:bc:d8:4d:30:f1:
d0:5e:ce:6e:fc:51:f2:12:2f:4e:67:36:8e:67:e2:
ad:b6:60:47:b9:c9:05:6f:12:0d:7c:77:59:6e:36:
a7:65:08:2b:9b:3b:9e:b1:21:ac:cb:6b:72:83:0a:
71:70:19:ab:7a:4b:58:7f:84:27:4f:ae:03:af:e4:
93:ee:d8:a5:52:e2:71:19:94:c1:7b:1d:32:59:bb:
42:1a:14:a3:45:53:1c:b3:db:1c:0e:b8:e0:c1:07:
e2:0e:00:19:c2:20:b3:55:5c:63:14:f3:b5:88:0e:
e8:27:65:18:5a:c2:41:7b:d9:e7:18:b4:ef:0b:22:
d0:0d:40:60:3a:3d:b4:c5:c8:9b:ae:bf:27:03:f0:
ed:ce:6a:70:29:18:dc:7b:1d:18:a2:8e:29:ed:6a:
64:e2:46:cb:8a:c2:77:e1:93:1b:28:c3:d0:e9:55:
ea:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:71:E5:C4:82:4D:8E:A7:91:CE:CA:D1:1A:2E:63:84:D2:F4:81:5D
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a5:12:13:d9:97:0d:b3:04:b7:ed:e4:c9:20:34:d9:7b:f7:
93:55:c9:e0:83:6f:d0:5b:10:8a:35:2c:60:71:c9:18:2e:52:
c6:b4:c8:e2:0e:f7:24:ae:9a:0b:c7:33:cb:6f:35:a6:a4:c9:
fa:93:53:16:31:fe:eb:ed:5d:c1:91:64:6f:b0:c1:3f:07:fa:
1d:86:47:42:71:fa:00:16:43:1c:b9:e7:6e:e9:dd:6f:2f:f9:
af:e2:02:5b:ac:fa:4c:13:d5:53:de:47:a3:70:20:b2:c6:7a:
17:76:ae:74:47:fd:b4:2b:f0:e8:2a:08:33:9f:d7:4f:53:6f:
b4:5c:a6:d8:b1:62:dc:bd:3b:42:30:b0:37:32:ab:ab:7d:9e:
fe:ed:bf:1b:17:5a:f7:55:d2:e5:56:9d:53:84:3b:2a:67:46:
82:49:7c:fd:b6:c9:f2:ed:af:92:cc:a3:18:54:7c:64:a7:c8:
13:77:d4:76:78:d5:49:93:8e:bd:05:7b:43:c6:8f:8f:16:2f:
60:e1:31:c8:06:eb:6c:dc:a5:75:d0:2c:40:48:40:69:9b:06:
37:ca:45:00:02:2b:c0:c5:64:f9:4c:d9:e3:bb:f9:f7:ca:65:
59:10:c1:f9:87:40:3b:8e:74:53:6b:29:0f:a2:2b:68:fd:69:
72:3e:ee:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:00:26 2025 by rpki-client