Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: uhoGac/JnDjXC1mGtNyOv5KtZGgw0vg5bybZbC901Hw=
Subject key identifier: C7:E5:71:00:C7:36:8A:33:AF:D3:CA:4C:D4:FF:88:ED:71:FE:A0:FD
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 019A5150827AD46D10FC936FEC5A1DBB9EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 05FF
Signing time: Wed 05 Nov 2025 00:00:21 +0000
Manifest this update: Wed 05 Nov 2025 00:00:21 +0000
Manifest next update: Thu 06 Nov 2025 00:00:21 +0000
Files and hashes: 1: 9Lg8t2QKFse3G-CZ2Zp542OLMtA.roa (hash: pzR3goZKI4C4CrcrTsbbX5Pt3NbXSkxC+j/aqvMv1vw=)
2: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (hash: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=)
3: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (hash: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=)
4: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: 8Vp7tpundWmPKspVz4wrikq0i0jySEeb0fzpsIn10r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:82:7a:d4:6d:10:fc:93:6f:ec:5a:1d:bb:9e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Nov 5 00:00:21 2025 GMT
Not After : Nov 6 00:00:21 2025 GMT
Subject: CN=c7e57100c7368a33afd3ca4cd4ff88ed71fea0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:17:72:68:07:d1:29:29:ac:86:79:ab:fc:3c:
07:73:95:a0:ba:d7:18:53:19:8d:31:6e:0d:81:de:
a9:42:44:07:3f:1a:53:ea:b8:98:24:bf:87:f5:d3:
fd:42:b4:e9:41:8d:22:9c:40:df:71:76:e0:72:b8:
c0:c5:1b:3b:c6:f0:be:57:7b:fe:b8:c1:f0:c3:cd:
6d:b4:47:1a:d6:46:ac:e7:8a:ba:a1:41:0f:96:b1:
a5:6c:81:94:37:b2:55:ba:c1:20:55:b1:84:59:75:
44:7e:78:a4:ee:6a:d3:bb:8a:10:ee:cc:f3:46:01:
ba:4f:89:f4:dd:a2:96:e9:f9:34:12:41:67:9e:9e:
31:6d:3b:06:38:2c:06:b2:0b:95:16:dd:90:e9:03:
c6:70:81:72:44:bd:e8:20:8c:04:97:ba:50:3d:5d:
14:e6:f0:5d:e6:c4:2a:e8:23:22:bd:de:71:46:dc:
8f:5c:0f:bb:60:cc:d5:cf:04:58:5c:80:12:52:65:
df:1c:ad:da:de:a1:0b:43:8c:68:2c:73:d6:05:a3:
33:5f:39:23:d0:93:45:86:c0:c8:20:d9:69:6e:88:
90:b5:c8:b0:f7:ef:6f:cf:d9:11:5a:07:cb:37:dd:
fb:d6:51:6b:80:6c:ff:8c:04:0c:f1:cd:1e:a9:fc:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E5:71:00:C7:36:8A:33:AF:D3:CA:4C:D4:FF:88:ED:71:FE:A0:FD
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:50:03:41:10:25:a8:9e:cf:43:73:85:28:09:c0:87:69:8d:
55:78:40:53:41:50:e6:2a:84:4e:36:0a:8f:cc:84:c5:89:8d:
90:ff:8f:31:f3:13:65:b6:81:23:9f:bc:3e:08:19:d2:70:09:
76:c5:11:e0:2b:24:7d:2a:30:a4:89:86:3c:08:ab:30:4e:7d:
a3:43:82:34:96:bf:62:1a:4d:d7:60:da:3f:ee:05:35:2d:f5:
39:1d:7c:4a:cf:21:54:75:25:ad:d2:69:38:39:25:52:2a:b7:
45:c6:9e:99:10:dc:08:48:bb:99:28:cc:64:90:d7:b7:f0:7d:
e4:91:bf:0d:e5:85:c7:26:30:00:62:24:40:c3:e3:21:e9:37:
c2:61:76:62:c2:5b:e9:b5:12:a3:34:4a:1b:79:a3:d9:64:51:
85:40:d1:34:6e:29:9c:68:20:ef:8c:a9:2e:87:d1:5d:87:61:
ac:49:3c:3a:58:cc:33:2c:4b:0b:ae:05:8f:3b:cf:ba:fa:80:
91:cf:b9:5b:4d:37:d1:67:8b:a4:c8:d8:cc:29:e8:01:d3:40:
0e:85:7b:86:e8:ef:f7:0f:7b:28:b4:09:a0:05:b8:b5:55:02:
db:44:05:f8:dd:08:96:4e:38:34:00:96:0a:be:c6:8c:76:78:
8f:53:95:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRUIJ61G0Q/JNv7Fodu57FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh
Mzk2OTgwHhcNMjUxMTA1MDAwMDIxWhcNMjUxMTA2MDAwMDIxWjAzMTEwLwYDVQQD
EyhjN2U1NzEwMGM3MzY4YTMzYWZkM2NhNGNkNGZmODhlZDcxZmVhMGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhdyaAfRKSmshnmr/DwHc5WgutcY
UxmNMW4Ngd6pQkQHPxpT6riYJL+H9dP9QrTpQY0inEDfcXbgcrjAxRs7xvC+V3v+
uMHww81ttEca1kas54q6oUEPlrGlbIGUN7JVusEgVbGEWXVEfnik7mrTu4oQ7szz
RgG6T4n03aKW6fk0EkFnnp4xbTsGOCwGsguVFt2Q6QPGcIFyRL3oIIwEl7pQPV0U
5vBd5sQq6CMivd5xRtyPXA+7YMzVzwRYXIASUmXfHK3a3qELQ4xoLHPWBaMzXzkj
0JNFhsDIINlpboiQtciw9+9vz9kRWgfLN9371lFrgGz/jAQM8c0eqfzO6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMflcQDHNoozr9PKTNT/iO1x/qD9MB8GA1UdIwQY
MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It
MTEzNzA3M2ZhOGY2LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2
LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANVADQRAl
qJ7PQ3OFKAnAh2mNVXhAU0FQ5iqETjYKj8yExYmNkP+PMfMTZbaBI5+8PggZ0nAJ
dsUR4CskfSowpImGPAirME59o0OCNJa/YhpN12DaP+4FNS31OR18Ss8hVHUlrdJp
ODklUiq3RcaemRDcCEi7mSjMZJDXt/B95JG/DeWFxyYwAGIkQMPjIek3wmF2YsJb
6bUSozRKG3mj2WRRhUDRNG4pnGgg74ypLofRXYdhrEk8OljMMyxLC64FjzvPuvqA
kc+5W0030WeLpMjYzCnoAdNADoV7hujv9w97KLQJoAW4tVUC20QF+N0Ilk44NACW
Cr7GjHZ4j1OVxw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:51:15 2025 by rpki-client