Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: cdy3cqnOLFE9uLLjhaLVaCTDEtvm0toVcVUHz8Gizy8=
Subject key identifier: 3B:3F:F8:7E:BE:69:73:EF:C5:E4:EA:51:93:27:FC:ED:48:16:F7:98
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 0199507773F7E1E886C9FE2DC2E391678FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 057A
Signing time: Tue 16 Sep 2025 03:00:29 +0000
Manifest this update: Tue 16 Sep 2025 03:00:29 +0000
Manifest next update: Wed 17 Sep 2025 03:00:29 +0000
Files and hashes: 1: 9Lg8t2QKFse3G-CZ2Zp542OLMtA.roa (hash: pzR3goZKI4C4CrcrTsbbX5Pt3NbXSkxC+j/aqvMv1vw=)
2: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (hash: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=)
3: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (hash: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=)
4: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: 0coHdwNU/WuyauM5xrvRelLUPMM1NFsY5MgZaAFbtMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Sep 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:50:77:73:f7:e1:e8:86:c9:fe:2d:c2:e3:91:67:8f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Sep 16 03:00:29 2025 GMT
Not After : Sep 17 03:00:29 2025 GMT
Subject: CN=3b3ff87ebe6973efc5e4ea519327fced4816f798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e6:a6:12:c5:e3:88:20:84:83:df:ea:3b:a3:
51:20:eb:75:86:51:48:d8:cd:b8:2e:2e:5b:aa:0c:
59:a8:3d:fd:af:51:48:fe:36:65:63:68:59:87:6b:
2d:76:6f:70:5d:c6:28:90:2d:5d:82:e1:f0:2e:bd:
ea:53:a4:d2:7f:8e:31:f6:3a:31:0f:09:31:88:13:
64:19:1d:f4:30:c3:2c:9a:99:e1:9b:d7:67:d9:1d:
85:cd:a7:30:98:72:79:db:97:28:62:8b:f2:7a:b1:
1f:ea:07:d3:8c:0b:01:89:f3:20:b8:88:b4:b4:72:
a4:05:75:f7:42:cf:0d:99:5f:43:49:4a:64:77:b2:
8d:58:f3:7c:f2:6d:6d:29:e8:22:6d:d9:c6:72:1a:
2a:41:47:89:d3:0d:06:82:5d:f6:a8:f2:c8:f7:5f:
82:3e:8b:1e:33:3d:ab:80:16:69:a0:9e:6c:d3:9f:
c0:dc:2c:56:79:aa:08:c0:e7:b6:c8:60:d7:8d:25:
f3:34:3d:e4:d5:95:d5:71:cb:17:35:f2:7e:c1:a6:
b1:a5:48:22:e2:61:31:52:e0:06:13:1f:a3:29:75:
ba:80:c6:1f:0b:7e:69:58:ea:49:a1:c2:1c:87:4e:
98:e6:c8:86:88:3b:fd:9f:43:2e:9f:80:9c:5b:b6:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3F:F8:7E:BE:69:73:EF:C5:E4:EA:51:93:27:FC:ED:48:16:F7:98
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8d:6d:49:40:bc:7c:03:89:e5:87:d8:84:61:33:78:f0:93:
8d:e6:39:bc:ec:18:11:cb:63:6c:9f:13:a0:34:e4:eb:df:af:
0b:0d:02:d9:e0:8a:c5:77:69:b1:16:08:f8:0f:18:ab:ba:fb:
29:71:73:98:cb:01:36:f8:9f:05:ac:5a:1c:de:60:29:3a:64:
f9:ca:20:57:a1:0e:37:94:c3:8e:4d:7c:15:f4:1b:48:05:6f:
c1:63:8b:16:af:b7:8b:93:a9:69:a2:4e:8d:47:5e:da:3c:2b:
2f:95:dc:4d:2f:43:41:14:12:08:2f:ca:b4:98:17:7c:45:ad:
d8:47:be:d6:45:e3:ff:c2:66:28:98:e7:9a:d3:9b:5b:ca:3e:
41:b2:9d:5f:23:93:94:90:25:1d:de:e2:42:05:af:2c:6f:00:
91:77:ac:75:b9:f1:d9:e8:d4:d3:3d:1e:c5:37:b3:8c:1b:51:
c5:49:4b:35:c2:a1:60:f0:1a:cc:0c:aa:56:fc:06:ee:75:e0:
cb:38:71:88:2d:e1:49:e1:51:fa:66:cc:8a:e6:11:4e:8a:c8:
5b:88:71:9d:4f:33:f3:6e:eb:75:ea:84:fa:04:3c:b2:a1:48:
90:c3:44:fd:29:31:75:73:ef:41:f9:0b:8a:e6:4c:19:22:6c:
de:fb:3a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 07:11:14 2025 by rpki-client