Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: jjToImhgpIpIGi6enIZ1nYmWdnzIo/GHhKyyqmEtnRg=
Subject key identifier: 17:B7:FD:14:0C:29:81:AD:D6:B9:05:D8:38:D4:7C:42:D0:63:DB:CF
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 01962CAADC6DD2D8675F3B715A2E41EBD933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 03D9
Signing time: Sun 13 Apr 2025 01:01:57 +0000
Manifest this update: Sun 13 Apr 2025 01:01:57 +0000
Manifest next update: Mon 14 Apr 2025 01:01:57 +0000
Files and hashes: 1: Pz7NU6STR9TIDQ04UMXmoKPVjro.roa (hash: Tmbo0CXGhGsx59/rnH0CK8F7805oDqYjgNQgtncuY5w=)
2: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (hash: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=)
3: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (hash: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=)
4: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: 83CT2mkoE3EGuFHDSAM0RdvKb3pBI0qVMOXbsG4PiE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2c:aa:dc:6d:d2:d8:67:5f:3b:71:5a:2e:41:eb:d9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Apr 13 01:01:57 2025 GMT
Not After : Apr 14 01:01:57 2025 GMT
Subject: CN=17b7fd140c2981add6b905d838d47c42d063dbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:16:19:b2:69:34:12:95:03:54:03:9c:37:
c0:34:5e:34:6f:2f:7c:21:aa:2a:ae:82:23:5e:77:
25:7c:80:f7:7c:08:17:3d:e4:b2:6e:3c:ee:65:95:
e9:e0:8c:7c:ac:8d:06:dc:f1:97:b5:d4:3c:2b:48:
c2:ce:5f:ef:88:b4:4e:79:70:53:36:e9:44:69:4c:
d3:be:38:11:0c:4f:55:fd:a8:2f:45:ce:9f:23:74:
14:7d:17:28:29:60:d8:09:08:07:1d:e0:b6:86:00:
90:eb:b8:93:0b:3b:14:0b:96:06:a9:c2:23:02:41:
40:18:00:3b:e1:da:d5:23:78:f9:6b:44:2e:b5:dc:
0a:18:d2:0e:5f:a8:40:85:6b:85:1c:b1:9a:be:9b:
6e:e9:57:24:23:4f:b6:88:02:b2:b1:72:fb:58:60:
8b:b0:be:07:1a:c5:4b:0a:75:8e:1d:c2:ac:61:76:
3c:95:41:48:39:da:e8:63:c0:fc:ce:9c:01:24:5c:
2b:76:cd:c5:0b:61:e6:2e:2d:0d:fa:0a:3b:ea:46:
75:45:42:9c:2d:63:83:5a:63:81:05:92:27:02:fd:
74:70:99:7c:de:fb:81:05:80:0c:62:1c:ab:a0:ec:
5e:19:d3:88:b0:eb:8b:66:c9:6f:6d:a4:12:34:c1:
6a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B7:FD:14:0C:29:81:AD:D6:B9:05:D8:38:D4:7C:42:D0:63:DB:CF
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fb:cc:b1:4c:38:a4:e4:e7:3f:46:77:eb:a0:77:d8:84:d8:
da:13:34:a1:7b:b2:a5:f3:80:73:b1:25:77:f3:e6:1a:38:3c:
4e:ef:ad:65:d0:57:cc:43:89:93:a2:eb:a1:34:cc:0f:ef:ae:
69:3c:ac:22:16:cd:cf:4d:94:ab:80:65:df:86:dd:b9:1a:ff:
a0:5f:6f:07:bd:08:1a:40:35:e1:89:b3:59:e6:33:65:c8:93:
0b:58:cf:34:ab:e3:2a:5e:51:9b:bd:a6:47:4c:07:00:5d:4b:
97:f9:0b:65:87:c5:fa:5f:fa:16:8f:d8:fc:85:44:52:e8:8f:
66:43:c9:61:2f:1c:76:b1:30:4f:a4:3e:ae:74:c0:a6:de:46:
02:2f:5f:b1:e5:27:34:91:9d:40:aa:2d:6b:52:5d:60:ec:bc:
41:ac:c3:99:80:c9:12:35:12:84:86:9e:09:2d:15:f7:56:3e:
43:0b:70:83:f4:20:65:7e:3f:7f:d5:71:bf:c1:34:26:a3:9e:
8e:d7:76:3d:cf:be:07:48:c9:90:09:7d:85:16:74:51:54:c2:
b2:99:a6:9e:33:61:ad:99:97:bc:fe:8a:14:9a:14:31:32:3e:
2a:2d:af:b5:4a:c4:ee:e0:06:52:a6:d2:3e:c1:76:8d:1d:1b:
fc:99:5f:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYsqtxt0thnXztxWi5B69kzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh
Mzk2OTgwHhcNMjUwNDEzMDEwMTU3WhcNMjUwNDE0MDEwMTU3WjAzMTEwLwYDVQQD
EygxN2I3ZmQxNDBjMjk4MWFkZDZiOTA1ZDgzOGQ0N2M0MmQwNjNkYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k4WGbJpNBKVA1QDnDfANF40by98
IaoqroIjXnclfID3fAgXPeSybjzuZZXp4Ix8rI0G3PGXtdQ8K0jCzl/viLROeXBT
NulEaUzTvjgRDE9V/agvRc6fI3QUfRcoKWDYCQgHHeC2hgCQ67iTCzsUC5YGqcIj
AkFAGAA74drVI3j5a0QutdwKGNIOX6hAhWuFHLGavptu6VckI0+2iAKysXL7WGCL
sL4HGsVLCnWOHcKsYXY8lUFIOdroY8D8zpwBJFwrds3FC2HmLi0N+go76kZ1RUKc
LWODWmOBBZInAv10cJl83vuBBYAMYhyroOxeGdOIsOuLZslvbaQSNMFqBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBe3/RQMKYGt1rkF2DjUfELQY9vPMB8GA1UdIwQY
MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It
MTEzNzA3M2ZhOGY2LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2
LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvvMsUw4
pOTnP0Z366B32ITY2hM0oXuypfOAc7Eld/PmGjg8Tu+tZdBXzEOJk6LroTTMD++u
aTysIhbNz02Uq4Bl34bduRr/oF9vB70IGkA14YmzWeYzZciTC1jPNKvjKl5Rm72m
R0wHAF1Ll/kLZYfF+l/6Fo/Y/IVEUuiPZkPJYS8cdrEwT6Q+rnTApt5GAi9fseUn
NJGdQKota1JdYOy8QazDmYDJEjUShIaeCS0V91Y+Qwtwg/QgZX4/f9Vxv8E0JqOe
jtd2Pc++B0jJkAl9hRZ0UVTCspmmnjNhrZmXvP6KFJoUMTI+Ki2vtUrE7uAGUqbS
PsF2jR0b/JlfPQ==
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:11:49 2025 by rpki-client