Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: Ngdaa+BXYz+bM4cg1yuANJSTCiA/hoUA2wyuvFzxCD0=
Subject key identifier: 7B:B4:8F:12:4F:97:04:61:B1:C4:AC:5F:15:C6:B5:EB:63:C3:B9:29
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 0198D4A7877059211AD91963712D0031E0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 04A9
Signing time: Sat 23 Aug 2025 02:00:05 +0000
Manifest this update: Sat 23 Aug 2025 02:00:05 +0000
Manifest next update: Sun 24 Aug 2025 02:00:05 +0000
Files and hashes: 1: 1-fIgH2OXClYAprp6yMiBZPGPE38.roa (hash: e5we/EQajJb+AgvvOsSreMp1uArGZobtfniZoWH5T6w=)
2: TxtjctBE9y0PWF8zo_okS-qYTI4.roa (hash: Oj72cOZ1BofKypsS5MIjd0Ikt1MzypuBmqQGRqlKa34=)
3: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: VSe5nZlUaSV4LACm/7WM8Jo86+Ttbb37m3tsNGlGoz8=)
4: nvafS3Xex0niyMkHQH02Uhvk-x0.roa (hash: iu++9o654AyM9gCXyG66N1SbfpnxCSghaH87DI0d5l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:87:70:59:21:1a:d9:19:63:71:2d:00:31:e0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Aug 23 02:00:05 2025 GMT
Not After : Aug 24 02:00:05 2025 GMT
Subject: CN=7bb48f124f970461b1c4ac5f15c6b5eb63c3b929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:1f:22:82:5d:00:9a:3b:f3:3f:5a:35:49:
d2:43:cf:a7:c1:c1:52:27:75:32:cb:da:ae:73:a6:
9c:df:ab:eb:a0:5c:92:42:e6:4d:da:40:66:6c:b7:
37:5e:d0:7e:1b:37:8a:54:fd:f2:f5:3c:06:57:cf:
a2:ae:f8:6a:ae:c0:43:0b:f9:62:78:59:e4:4e:25:
ed:a6:d7:3c:9f:43:1e:3e:34:0f:87:35:f9:d7:03:
6e:34:93:87:c0:b3:d0:3d:9b:9e:36:f8:81:df:6c:
1e:fe:bd:f0:70:f7:7b:9e:61:be:da:ca:3b:e6:fe:
8d:d9:86:b1:e3:b7:4f:6b:1e:d7:09:21:dd:99:72:
39:9c:ab:ba:a6:dc:c8:78:93:9c:eb:02:fc:3c:60:
30:19:3c:f8:24:02:4c:4e:68:79:62:98:7a:54:0c:
df:e0:07:38:6b:87:34:df:90:ed:59:da:35:9f:26:
a3:e1:10:28:70:0a:d0:4a:8a:81:88:9c:33:d0:1b:
b3:2a:01:3a:97:6b:5e:e9:6b:e9:4a:52:16:b6:95:
46:60:da:bd:6e:6f:cb:4e:f4:d3:b6:49:ed:2c:0f:
9c:57:37:b3:6e:7b:3a:8d:a5:05:03:01:b7:6d:3e:
10:6e:72:48:e0:45:72:e3:83:d7:e6:6f:ff:43:5e:
8b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B4:8F:12:4F:97:04:61:B1:C4:AC:5F:15:C6:B5:EB:63:C3:B9:29
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:52:c3:80:08:aa:4d:b5:ed:92:cf:6d:8f:5a:7b:b9:53:b1:
22:81:1d:c4:cf:6b:ef:23:2e:13:8a:5f:d3:89:da:cd:0a:e6:
c1:e8:ce:4b:9f:13:61:b5:f4:ef:8a:3b:f8:ea:0c:7a:1a:e9:
0b:f5:d6:bc:02:21:7b:ab:11:48:9b:77:48:9b:70:23:42:17:
d9:d0:8c:c8:93:91:30:d5:e4:87:93:a6:33:66:90:76:0a:21:
1f:03:55:16:94:fa:16:43:64:64:15:fd:08:a8:d7:86:f5:ac:
61:ab:d7:4c:ae:10:84:25:56:66:d2:c8:1e:1d:af:67:03:3f:
c6:55:5d:75:d5:d3:23:13:f3:4d:7d:58:c6:3c:31:ed:bb:0e:
e1:8c:f9:c3:8c:d9:47:87:e3:fb:e4:c5:6a:42:01:a5:43:65:
4b:5a:bc:71:f7:f3:b8:b4:bb:3a:f8:e2:14:5c:ae:1b:20:52:
e2:a1:d1:89:63:36:91:4c:25:51:a8:d4:0d:db:2e:01:e9:74:
f2:db:b9:fb:e5:fb:1b:05:53:4f:26:0b:26:7b:02:17:e7:f5:
a2:08:7f:c1:a2:3a:e0:91:e9:0a:c6:e4:5d:5a:80:93:12:79:
49:39:95:6b:fa:12:97:6c:6d:61:a8:f1:3a:40:9a:19:46:d1:
35:41:a2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:56 2025 by rpki-client