Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json)
Hash identifier: Vr33MffCKWqbjMs3NB0B1tiIyv0Su+41/ypqKaBFYjQ=
Subject key identifier: 00:79:30:BF:9C:A0:E7:1D:1B:36:EA:2F:E0:D7:81:C0:CB:CC:E9:E1
Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Certificate serial: 0196AF56E284189AB677031077EEFB08F3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
Manifest number: 053E
Signing time: Thu 08 May 2025 10:00:28 +0000
Manifest this update: Thu 08 May 2025 10:00:28 +0000
Manifest next update: Fri 09 May 2025 10:00:28 +0000
Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: nfYK5vZqaQlrO+xsprvCuzfg6eMfEMNsiJ401X8tDLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:56:e2:84:18:9a:b6:77:03:10:77:ee:fb:08:f3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Validity
Not Before: May 8 10:00:28 2025 GMT
Not After : May 9 10:00:28 2025 GMT
Subject: CN=007930bf9ca0e71d1b36ea2fe0d781c0cbcce9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:f2:65:b0:3d:2c:6d:98:89:ce:25:01:31:
0b:ec:0c:c0:e2:0f:52:78:f9:77:54:47:f9:a8:19:
f5:34:5d:0a:9b:e5:1b:f1:ae:38:cc:99:73:f7:a2:
9e:b2:c4:d8:72:ef:25:e1:d9:43:5f:d7:25:e0:9d:
cc:85:28:7e:9d:66:3e:ca:49:40:06:72:77:e8:6e:
f5:e9:dc:92:12:fe:9b:8a:e4:40:d8:ac:ea:98:df:
44:a7:4a:1d:16:a0:72:c6:c4:71:4a:e1:1c:12:d4:
b6:c4:2e:27:12:c4:79:48:24:4f:f8:df:f0:25:b8:
24:8c:9b:0b:6e:dd:d9:d3:00:9c:da:db:77:f6:cd:
77:b7:e2:48:ec:74:d2:d0:84:3b:e4:29:4a:8a:2b:
46:60:b4:87:f3:66:e3:28:e6:e8:77:0e:bd:72:5a:
5c:6e:fd:bd:42:9f:a4:d1:53:82:65:fc:48:48:4d:
00:c9:b0:58:84:d4:48:ce:d7:cc:28:08:75:9b:94:
dc:55:88:43:73:0b:69:2d:2c:d1:d1:87:fc:5e:c0:
dc:f7:b4:1d:8d:ad:bb:47:68:74:3b:de:90:7e:de:
fb:da:e8:46:17:45:7f:cc:5f:c0:7f:9f:3e:24:2e:
0f:c9:19:42:cd:e4:84:79:40:4c:45:65:c1:79:19:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:79:30:BF:9C:A0:E7:1D:1B:36:EA:2F:E0:D7:81:C0:CB:CC:E9:E1
X509v3 Authority Key Identifier:
keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a3:65:c1:93:cb:57:79:a8:be:bf:47:a2:55:db:59:11:40:
6f:5a:26:38:c1:d8:6a:6d:92:7c:0b:58:2f:96:5e:3b:8d:89:
b9:c7:09:e5:e1:70:f3:11:15:a6:53:d5:8a:cb:cb:a6:a7:b2:
c2:71:d2:19:42:e1:79:57:8b:58:fd:72:24:a3:f9:cc:e6:4a:
85:b9:88:ff:79:77:e0:04:45:37:e9:7f:d8:6b:90:ad:59:74:
65:61:38:9a:6b:bd:08:28:f8:4a:69:4c:a8:a7:c2:84:3f:8c:
b3:a4:6b:19:4e:6d:35:10:19:eb:36:c2:ed:92:eb:26:8a:4e:
e0:aa:de:97:28:b3:6d:d7:63:1c:34:f9:ee:fb:1e:75:fe:bd:
e3:df:c7:25:2c:3b:72:76:78:8c:fe:f2:8e:31:60:59:24:1a:
62:66:94:3d:12:53:b2:e4:77:c0:18:a4:9f:c7:b3:8b:79:e0:
6f:91:bf:dd:84:b3:41:b6:70:91:20:6a:df:9c:fe:8e:df:0a:
0e:39:94:22:36:31:aa:44:9f:16:45:e7:f5:7b:36:a1:bf:c1:
87:dd:d8:53:12:9e:90:b4:43:1f:be:b4:57:07:ab:1b:4d:50:
3d:e1:21:fe:f5:48:6f:9e:90:ac:36:8f:a8:47:dd:82:a5:0c:
51:66:5e:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZavVuKEGJq2dwMQd+77CPPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMGIzNWZjMzY2ZTg0YjQ1ODBlZWVhNzk4OTExZWQ0ZTE4
ZTNhZWIwHhcNMjUwNTA4MTAwMDI4WhcNMjUwNTA5MTAwMDI4WjAzMTEwLwYDVQQD
EygwMDc5MzBiZjljYTBlNzFkMWIzNmVhMmZlMGQ3ODFjMGNiY2NlOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmvyZbA9LG2Yic4lATEL7AzA4g9S
ePl3VEf5qBn1NF0Km+Ub8a44zJlz96KessTYcu8l4dlDX9cl4J3MhSh+nWY+yklA
BnJ36G716dySEv6biuRA2KzqmN9Ep0odFqByxsRxSuEcEtS2xC4nEsR5SCRP+N/w
JbgkjJsLbt3Z0wCc2tt39s13t+JI7HTS0IQ75ClKiitGYLSH82bjKObodw69clpc
bv29Qp+k0VOCZfxISE0AybBYhNRIztfMKAh1m5TcVYhDcwtpLSzR0Yf8XsDc97Qd
ja27R2h0O96Qft772uhGF0V/zF/Af58+JC4PyRlCzeSEeUBMRWXBeRlEMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAB5ML+coOcdGzbqL+DXgcDLzOnhMB8GA1UdIwQY
MBaAFHILNfw2boS0WA7up5iRHtThjjrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTct
YjcwYjk1NTM5ZGY0LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTctYjcwYjk1NTM5ZGY0
LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6NlwZPL
V3movr9HolXbWRFAb1omOMHYam2SfAtYL5ZeO42JuccJ5eFw8xEVplPVisvLpqey
wnHSGULheVeLWP1yJKP5zOZKhbmI/3l34ARFN+l/2GuQrVl0ZWE4mmu9CCj4SmlM
qKfChD+Ms6RrGU5tNRAZ6zbC7ZLrJopO4KrelyizbddjHDT57vsedf6949/HJSw7
cnZ4jP7yjjFgWSQaYmaUPRJTsuR3wBikn8ezi3ngb5G/3YSzQbZwkSBq35z+jt8K
DjmUIjYxqkSfFkXn9Xs2ob/Bh93YUxKekLRDH760VwerG01QPeEh/vVIb56QrDaP
qEfdgqUMUWZeFA==
-----END CERTIFICATE-----
Generated at Thu May 8 13:10:42 2025 by rpki-client