Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
File: criGdSR84YZaNT9M71sqwoijlpg.mft (raw, json)
Hash identifier: RFIFq/yvCcxaWMTJISnCjwul/+iuTrrx1WJ9IQZ6nz4=
Subject key identifier: 65:92:7B:17:8D:CA:72:12:6B:AF:1A:A6:2C:5E:6A:45:CB:39:14:B2
Authority key identifier: 72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
Certificate issuer: /CN=72b88675247ce1865a353f4cef5b2ac288a39698
Certificate serial: 0196748BA91ED7F14874DA446F13E05BAD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
Manifest number: 03FF
Signing time: Sun 27 Apr 2025 00:00:31 +0000
Manifest this update: Sun 27 Apr 2025 00:00:31 +0000
Manifest next update: Mon 28 Apr 2025 00:00:31 +0000
Files and hashes: 1: 9Lg8t2QKFse3G-CZ2Zp542OLMtA.roa (hash: pzR3goZKI4C4CrcrTsbbX5Pt3NbXSkxC+j/aqvMv1vw=)
2: Tdm9ws-dkBROs9-yKySxcdk4Glo.roa (hash: wltKEf2Rf9JW3GaIHdHeRcLJ2xgd5oHLTYlIpPXt9Fk=)
3: X9MvPbKbQJUEybm9iAYpSQ7v-0s.roa (hash: 71+6pvaVgubnoimXHapiHVX8PmDdJZkmh44ntj9Ryfg=)
4: criGdSR84YZaNT9M71sqwoijlpg.crl (hash: Ve9aAinjKbam2AAQHFw76cilg/2/xOLuKlcFXr2xxHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:a9:1e:d7:f1:48:74:da:44:6f:13:e0:5b:ad:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b88675247ce1865a353f4cef5b2ac288a39698
Validity
Not Before: Apr 27 00:00:31 2025 GMT
Not After : Apr 28 00:00:31 2025 GMT
Subject: CN=65927b178dca72126baf1aa62c5e6a45cb3914b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b6:22:b0:c0:e2:aa:d7:09:13:44:54:b6:fb:
27:ae:0a:d6:7e:6e:11:ca:0a:22:a1:80:60:ea:f4:
00:53:d4:f8:00:07:22:55:4b:a8:62:5d:69:5e:f9:
c6:02:aa:54:d2:17:0c:e1:da:3b:0b:bf:ef:30:42:
48:32:d8:9f:16:25:16:56:67:60:a0:86:e9:bd:6e:
5b:d9:d9:37:29:ad:56:f1:e4:fa:7e:3e:f3:82:74:
12:26:1d:87:9f:b9:82:22:36:69:59:d3:17:82:76:
ee:35:9f:b7:43:0c:74:9b:6e:3a:92:b6:12:6e:ee:
ea:51:6b:f4:df:ea:4f:a4:40:33:6a:f0:71:59:44:
b0:43:0e:ba:11:79:8c:a1:3a:85:d3:93:3f:0a:ce:
01:bd:51:d1:4e:55:38:81:a5:b9:1c:bf:cd:30:62:
9d:d6:46:6f:a2:49:da:25:3f:f8:03:e8:98:b2:54:
7e:d1:c9:ca:95:e6:3b:d1:b5:76:57:04:c3:40:f5:
69:c2:1b:e0:44:9a:31:6d:51:9c:07:5f:fc:d7:31:
a2:c5:76:8e:71:25:80:a4:76:1c:9f:1e:e4:d9:57:
cf:be:6a:7a:cc:ac:98:68:e6:e2:e2:87:ea:97:bb:
e4:39:47:2e:7d:d8:1d:ba:c1:86:5f:e9:1f:ab:b6:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:92:7B:17:8D:CA:72:12:6B:AF:1A:A6:2C:5E:6A:45:CB:39:14:B2
X509v3 Authority Key Identifier:
keyid:72:B8:86:75:24:7C:E1:86:5A:35:3F:4C:EF:5B:2A:C2:88:A3:96:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/criGdSR84YZaNT9M71sqwoijlpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/14dd6e-6773-47ff-8e3b-1137073fa8f6/1/criGdSR84YZaNT9M71sqwoijlpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:78:1f:65:93:a0:28:7f:6a:b0:9d:46:42:1d:92:5c:df:d3:
5c:97:c7:c1:35:e1:b5:b9:9d:d0:31:36:c5:19:a5:8f:40:85:
ef:16:4b:d7:83:89:3e:e3:15:91:00:58:4e:5b:9f:9d:48:ce:
15:96:b6:71:72:a2:aa:45:5e:75:58:55:22:b5:fa:00:cc:5f:
68:74:13:56:eb:4b:c9:81:58:b3:5b:80:62:4c:9c:cc:db:16:
2a:cf:2f:04:13:7b:76:af:03:cf:67:e3:c6:9f:4e:3d:3c:2c:
22:f1:31:b0:8f:96:f9:ac:33:80:16:7f:79:f0:1f:12:35:b3:
19:ac:ff:a5:30:41:fa:1a:05:8e:65:8a:ab:fd:54:e8:84:ac:
99:b2:88:2d:21:55:74:48:be:77:b9:60:17:15:ab:48:7d:46:
69:5e:c7:ea:e5:7e:f7:7a:64:56:26:61:a3:45:bf:fb:e1:89:
27:c6:eb:aa:92:24:75:6b:51:9e:d3:15:d5:7a:92:9d:54:9b:
93:8a:51:5e:c1:bf:9b:1f:cc:79:af:b0:7f:ec:49:a6:91:f2:
9c:7a:8a:b4:1d:35:68:a0:79:00:b6:5a:e2:6f:1a:bf:1a:6e:
ba:6b:e5:be:a0:25:fd:59:3d:82:52:bc:07:58:7f:ae:e1:75:
ab:00:34:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i6ke1/FIdNpEbxPgW61nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYjg4Njc1MjQ3Y2UxODY1YTM1M2Y0Y2VmNWIyYWMyODhh
Mzk2OTgwHhcNMjUwNDI3MDAwMDMxWhcNMjUwNDI4MDAwMDMxWjAzMTEwLwYDVQQD
Eyg2NTkyN2IxNzhkY2E3MjEyNmJhZjFhYTYyYzVlNmE0NWNiMzkxNGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rYisMDiqtcJE0RUtvsnrgrWfm4R
ygoioYBg6vQAU9T4AAciVUuoYl1pXvnGAqpU0hcM4do7C7/vMEJIMtifFiUWVmdg
oIbpvW5b2dk3Ka1W8eT6fj7zgnQSJh2Hn7mCIjZpWdMXgnbuNZ+3Qwx0m246krYS
bu7qUWv03+pPpEAzavBxWUSwQw66EXmMoTqF05M/Cs4BvVHRTlU4gaW5HL/NMGKd
1kZvoknaJT/4A+iYslR+0cnKleY70bV2VwTDQPVpwhvgRJoxbVGcB1/81zGixXaO
cSWApHYcnx7k2VfPvmp6zKyYaObi4ofql7vkOUcufdgdusGGX+kfq7a+hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWSexeNynISa68apixeakXLORSyMB8GA1UdIwQY
MBaAFHK4hnUkfOGGWjU/TO9bKsKIo5aYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2It
MTEzNzA3M2ZhOGY2LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xNGRkNmUtNjc3My00N2ZmLThlM2ItMTEzNzA3M2ZhOGY2
LzEvY3JpR2RTUjg0WVphTlQ5TTcxc3F3b2lqbHBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHgfZZOg
KH9qsJ1GQh2SXN/TXJfHwTXhtbmd0DE2xRmlj0CF7xZL14OJPuMVkQBYTlufnUjO
FZa2cXKiqkVedVhVIrX6AMxfaHQTVutLyYFYs1uAYkyczNsWKs8vBBN7dq8Dz2fj
xp9OPTwsIvExsI+W+awzgBZ/efAfEjWzGaz/pTBB+hoFjmWKq/1U6ISsmbKILSFV
dEi+d7lgFxWrSH1GaV7H6uV+93pkViZho0W/++GJJ8brqpIkdWtRntMV1XqSnVSb
k4pRXsG/mx/Mea+wf+xJppHynHqKtB01aKB5ALZa4m8avxpuumvlvqAl/Vk9glK8
B1h/ruF1qwA0MA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:01:06 2025 by rpki-client