Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json)
Hash identifier: vwQX4k4IBCEhm+5O6iZZy7yeABvkCJojVFhe+V+EDxg=
Subject key identifier: 55:C3:CD:7E:FF:32:C8:E1:80:7B:B0:DB:EA:C5:18:CB:AA:BC:BD:E5
Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Certificate serial: 0198D5BBFAC09419A1C43B7BD9D17E080F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
Manifest number: 065B
Signing time: Sat 23 Aug 2025 07:02:03 +0000
Manifest this update: Sat 23 Aug 2025 07:02:03 +0000
Manifest next update: Sun 24 Aug 2025 07:02:03 +0000
Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: kLyAnuZChMUiGjGZzrP+FmzyqGZVmCqzksTbSN5KL6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:fa:c0:94:19:a1:c4:3b:7b:d9:d1:7e:08:0f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Validity
Not Before: Aug 23 07:02:03 2025 GMT
Not After : Aug 24 07:02:03 2025 GMT
Subject: CN=55c3cd7eff32c8e1807bb0dbeac518cbaabcbde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:0d:d1:e0:99:14:c5:f5:ce:41:df:57:95:
68:d4:b1:50:7f:7f:a2:aa:1c:54:f9:b0:c9:2d:c9:
39:90:77:02:d5:63:92:10:64:67:11:4b:92:ce:5b:
1a:58:1f:a8:4c:73:1c:8e:c4:0c:9d:97:57:99:56:
3a:1f:71:19:6f:01:3e:81:90:84:30:fb:36:00:cf:
c8:a7:c0:c6:27:6b:fb:dc:b8:e0:10:de:e2:13:12:
c3:b8:3f:eb:36:7f:eb:65:74:9d:89:40:ce:d4:a0:
95:b4:3d:f9:25:85:81:d9:5f:c7:4c:d6:ac:53:ca:
67:6b:94:55:e6:2b:c0:03:f4:87:1f:5e:c0:35:ca:
0b:04:d4:b3:59:df:0a:95:6b:80:ca:3b:5d:67:f3:
e7:7c:b5:ed:7e:d4:d0:a0:6a:81:18:83:ad:5e:67:
2c:a9:4c:fa:0e:07:bd:b3:3a:9c:75:64:b4:15:00:
eb:47:a8:2d:20:17:63:4d:f5:c6:53:ce:0f:01:70:
fa:a6:93:b7:31:9c:64:9f:06:05:a9:3f:40:76:55:
bf:4c:2a:50:b6:8e:bd:54:cc:91:0e:ec:dd:2f:52:
0d:69:75:f3:d2:2a:9c:96:9c:34:3a:92:a5:90:fc:
42:02:f0:f3:16:eb:a7:a5:ab:3a:c5:a1:0e:a9:cb:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C3:CD:7E:FF:32:C8:E1:80:7B:B0:DB:EA:C5:18:CB:AA:BC:BD:E5
X509v3 Authority Key Identifier:
keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1b:10:fa:a3:62:b4:af:7d:27:79:54:d8:50:af:bf:2d:57:
38:83:60:22:51:9e:d0:d2:e5:b1:ad:f4:30:c5:d6:b8:38:b9:
37:a4:1d:85:50:f9:b7:55:4f:a3:e0:04:8e:73:91:98:34:61:
f5:00:6f:b4:ce:3f:c1:01:c7:5b:6b:a1:ad:4d:39:6d:59:94:
5d:e8:5f:f5:1d:50:ec:d1:32:df:f4:a7:85:4a:fb:0d:d0:68:
76:41:49:62:a3:10:45:b5:b8:b5:48:14:c8:01:6c:e0:20:0f:
dd:cc:a0:f1:a8:bd:c1:28:5e:12:e2:52:96:33:66:30:74:b4:
4a:01:4d:51:57:73:37:ff:da:84:39:20:04:51:b7:88:eb:41:
7e:11:51:64:75:dd:c3:a1:2e:ff:ae:f7:2a:89:6c:e6:04:6e:
5f:7e:97:a4:e2:41:04:2e:24:48:27:b2:b4:f7:22:8f:b4:8f:
f1:ce:13:1f:ae:90:28:34:c2:41:e0:0b:ea:c2:cd:b5:e4:02:
09:b0:6f:0f:b0:a6:d2:67:68:0e:3a:ad:29:cd:7c:be:df:11:
36:32:66:a3:1d:37:f6:e1:f0:0f:c2:c9:3b:d5:06:b5:63:b9:
45:ca:56:be:63:68:3f:f9:79:1d:ce:0c:40:d2:50:7c:64:a0:
bb:b8:c8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:33 2025 by rpki-client