Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json)
Hash identifier: oI06rthFrEYmjd/SOf99PbenKwAC/2Ccm/qilBAWHcM=
Subject key identifier: 96:89:96:BD:E4:D8:F3:D7:C8:3B:95:74:D0:80:F8:AB:DC:8D:09:99
Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Certificate serial: 0197B7EA12B5857BB71C621510CE3C6104AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
Manifest number: 05C7
Signing time: Sat 28 Jun 2025 19:01:00 +0000
Manifest this update: Sat 28 Jun 2025 19:01:00 +0000
Manifest next update: Sun 29 Jun 2025 19:01:00 +0000
Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: jKyNs/Y1TNGEHBHOrwQ4SyTe7wCS02TozOIiACH3zFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:12:b5:85:7b:b7:1c:62:15:10:ce:3c:61:04:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Validity
Not Before: Jun 28 19:01:00 2025 GMT
Not After : Jun 29 19:01:00 2025 GMT
Subject: CN=968996bde4d8f3d7c83b9574d080f8abdc8d0999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:12:9b:14:90:6a:82:16:99:b5:e9:04:c3:
c3:55:62:55:39:a3:08:a3:ef:fa:cb:2d:de:04:ec:
b6:33:14:b3:c6:dc:39:15:70:ee:79:c7:fc:d4:b8:
f1:a4:49:66:ad:61:ac:29:66:6d:c8:86:50:b0:09:
74:cb:c3:a0:d3:32:89:87:df:19:49:15:cd:d1:0b:
e8:a4:64:2e:f0:bf:9b:d8:42:8c:d5:05:ae:62:e5:
d1:cb:dc:b4:50:98:24:41:0d:a6:c4:b3:e9:55:95:
05:31:79:37:9a:1f:ef:a7:d9:8a:9c:7b:cc:cd:e0:
b0:2b:f4:ec:08:5f:66:5b:c2:d8:2b:4c:c4:0a:bf:
2d:7c:e6:e8:a6:28:f1:f5:03:d8:65:68:f4:d0:17:
07:c5:a9:f5:b0:db:eb:4b:f4:01:42:46:99:e3:5e:
00:23:4b:08:9d:ee:ae:89:5d:1f:a1:2e:e1:47:68:
b5:06:6b:6c:59:fe:92:da:59:bb:cd:77:6a:4a:fa:
dc:c8:c0:33:42:19:47:ce:73:e1:93:a8:28:ce:1a:
ec:ae:95:0b:ed:cf:84:b5:14:f3:a6:36:17:fd:7b:
b1:df:9c:1f:02:95:e5:f9:12:af:32:15:b6:6f:09:
0d:e0:ae:ce:70:a1:ce:08:fe:2a:f2:91:b0:4d:c3:
6e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:89:96:BD:E4:D8:F3:D7:C8:3B:95:74:D0:80:F8:AB:DC:8D:09:99
X509v3 Authority Key Identifier:
keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:68:36:22:11:a9:19:ce:a3:18:d0:ec:0a:86:77:26:cd:ec:
99:08:78:8e:98:11:61:76:03:90:ee:dd:fc:93:7f:5e:af:7f:
cc:20:d5:1d:d8:1e:99:03:9b:d1:77:ec:69:9a:65:c9:95:b6:
12:89:b9:ed:69:d6:06:45:e5:d4:36:83:55:c1:69:02:60:05:
bc:09:67:e0:07:3c:eb:72:2f:8c:93:91:2c:79:f9:72:cd:b5:
66:d8:77:be:90:31:97:6d:a6:0f:d1:53:da:54:24:d8:38:39:
5a:3d:3c:52:2e:c1:86:5a:6b:5b:13:b2:26:40:c9:47:3b:f5:
d8:3b:d1:c6:b4:1a:7f:34:4c:bb:09:53:37:0a:f9:f0:45:12:
49:7f:e9:55:14:14:90:2a:0e:b7:ae:42:8e:c6:cf:5c:9d:02:
4e:72:59:71:1f:b6:d3:ad:34:29:fc:65:c4:26:40:e7:35:89:
c3:d4:cd:c2:c6:d3:a7:09:b0:62:01:62:b9:28:2e:21:08:27:
6e:11:27:83:dc:e9:84:57:ae:57:85:e7:c1:6b:a5:2d:5b:18:
70:82:2b:44:79:4b:91:07:2f:06:e4:32:49:87:6f:92:c2:16:
f5:97:46:47:ce:38:f8:c5:02:6a:7e:98:b4:69:b2:38:c7:cb:
9d:2b:f2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:02 2025 by rpki-client