Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: t950XRFFdxh0eVCx63Oy5oi9F/0dSfFZt1QNfem1acE=
Subject key identifier: 21:3F:B9:CC:70:0A:B0:80:CD:D8:B0:16:43:AD:8A:29:93:35:15:49
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 019A72259C428E756BD2A29C2EA76C23266D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 0610
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: 9Lg8t2QKFse3G-CZ2Zp542OLMtA.roa (hash: pzR3goZKI4C4CrcrTsbbX5Pt3NbXSkxC+j/aqvMv1vw=)
2: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (hash: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=)
3: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (hash: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=)
4: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: jICLj40zHlEQZiGt4zY3P59WguI2dYvxqBxk+o4JORE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9c:42:8e:75:6b:d2:a2:9c:2e:a7:6c:23:26:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=213fb9cc700ab080cdd8b01643ad8a2993351549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:ac:77:f2:17:a6:5d:bb:45:e1:fe:17:5d:
f0:cf:75:2d:42:27:20:ef:0e:18:ae:3e:7b:f4:6b:
22:4a:35:fd:4c:a6:7a:43:27:2a:01:bd:f1:49:d9:
5a:ef:c4:a4:86:ac:81:fb:8c:28:e6:d6:bc:d0:03:
8d:96:71:d1:ae:1f:f1:9a:ce:d9:6c:d6:14:fb:15:
84:84:7f:df:4b:b6:d2:6f:27:8d:e7:cb:b6:3f:49:
5e:0d:0e:de:34:b9:1c:9b:7c:65:ee:f2:8b:61:bb:
4b:59:7c:ff:ac:d7:d6:07:06:18:c1:eb:40:08:c5:
96:62:2c:44:71:2f:90:1d:a7:1f:18:a1:72:7b:a5:
16:73:5e:aa:33:76:59:c9:42:91:f0:87:04:06:cc:
35:c5:35:ff:2a:ab:a6:5c:2d:06:09:6d:5b:9e:46:
d8:cf:96:6a:c7:9c:d0:d6:9a:01:b2:5c:d2:ff:c5:
e1:8c:22:a5:28:45:cb:4f:74:d2:4f:52:e0:73:ca:
d2:d9:80:0b:d3:24:f5:e7:9c:6c:3b:30:66:cd:41:
51:17:d7:06:f8:95:34:85:1d:df:4c:34:ba:2e:cb:
84:ec:24:98:3c:96:30:05:84:51:70:f7:9e:6f:b1:
c4:72:3d:a1:62:3c:06:71:a2:e6:b5:83:d1:1a:88:
b0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3F:B9:CC:70:0A:B0:80:CD:D8:B0:16:43:AD:8A:29:93:35:15:49
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:df:68:8e:a6:a3:56:ac:fc:27:30:6d:32:55:01:4a:38:cb:
cb:4b:70:f3:9d:ca:3e:98:1e:b3:b7:a0:db:ab:d1:01:be:93:
af:b6:64:48:7d:d8:2d:23:00:4f:21:02:ad:e1:32:f6:c6:c7:
04:4e:8f:d5:08:c6:2f:86:f8:b2:f4:d2:62:24:e6:32:1c:0e:
83:f6:05:f0:c8:ea:45:6a:28:1d:d4:16:4d:f3:8e:82:45:66:
3c:89:bf:a4:ce:34:1c:89:da:42:e6:7b:c3:06:18:27:dc:af:
6a:f8:c2:50:5d:67:e1:ce:ed:dc:3f:28:df:54:0a:08:62:a2:
c3:8b:5a:f5:6b:ad:7c:c4:d6:0d:13:a4:12:24:b9:a0:6b:25:
ad:1e:79:a5:81:2d:e2:c2:cd:77:b8:d3:5b:ea:74:2a:80:e3:
e2:9a:1e:2a:6a:94:5f:b6:38:90:0c:79:9f:4d:47:cb:bb:cd:
a8:b3:e7:03:06:6e:5f:3c:ea:77:ec:fd:56:41:37:c3:f9:1f:
69:79:ef:1b:46:c9:18:6f:93:80:8e:30:bc:6c:6f:80:0b:59:
44:34:c9:3b:95:2e:bc:e1:fc:93:22:62:73:7e:ef:f6:3b:d9:
a0:e4:bd:bf:60:29:f3:80:5b:ff:78:fb:95:9c:e7:a0:0a:6c:
f5:41:1d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:35 2025 by rpki-client