Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: dFrbgNbwC7Qng2ea+1pJNkz2kqc25xqcJ17KtIA+8RQ=
Subject key identifier: 5F:FF:AA:C6:FD:27:A3:18:73:12:0F:B3:EB:37:66:11:D9:D7:84:F5
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 0199FDD9216D5CADC98E13E8BBB53F0FCA1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 0543
Signing time: Sun 19 Oct 2025 19:01:29 +0000
Manifest this update: Sun 19 Oct 2025 19:01:29 +0000
Manifest next update: Mon 20 Oct 2025 19:01:29 +0000
Files and hashes: 1: 1-fIgH2OXClYAprp6yMiBZPGPE38.roa (hash: e5we/EQajJb+AgvvOsSreMp1uArGZobtfniZoWH5T6w=)
2: TxtjctBE9y0PWF8zo_okS-qYTI4.roa (hash: Oj72cOZ1BofKypsS5MIjd0Ikt1MzypuBmqQGRqlKa34=)
3: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: 44ZBq3yPZ1BmV2BLVLrVGl1HZJOSSwLrDGruDbq0RaA=)
4: nvafS3Xex0niyMkHQH02Uhvk-x0.roa (hash: iu++9o654AyM9gCXyG66N1SbfpnxCSghaH87DI0d5l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:21:6d:5c:ad:c9:8e:13:e8:bb:b5:3f:0f:ca:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Oct 19 19:01:29 2025 GMT
Not After : Oct 20 19:01:29 2025 GMT
Subject: CN=5fffaac6fd27a31873120fb3eb376611d9d784f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:f7:6f:8f:51:02:82:45:93:28:1a:e7:d9:
7f:51:b7:91:37:49:ee:79:4d:a4:04:80:7d:79:8a:
85:4d:bc:ab:51:27:c1:39:87:5c:0e:25:f8:04:0d:
d7:f4:04:68:2e:b7:2f:1d:a2:e5:46:77:66:cd:2d:
26:57:07:12:4e:96:a6:d5:11:be:6d:6a:d8:ff:fb:
ba:55:3b:42:43:23:fe:68:66:b7:8a:bd:f1:e7:eb:
b2:45:04:79:cb:69:82:f5:55:88:75:9e:cd:b1:9c:
e8:e4:65:b7:ff:b5:62:dd:7f:d6:e4:49:c7:3d:0f:
56:9f:10:fd:73:9f:27:c0:74:26:fa:5c:ab:49:0d:
82:f2:d4:d2:87:dd:33:0d:e7:55:8b:b6:68:8d:8b:
4e:0f:c5:94:69:ed:2a:b7:0a:e7:9d:dc:45:59:78:
14:b0:55:1c:eb:e8:16:89:79:d0:93:f3:64:53:33:
7c:22:57:bf:3a:86:7a:7e:02:b2:b5:c7:b4:2b:75:
97:a5:f6:c3:6f:86:4e:70:e5:9f:57:5d:a0:da:4f:
93:b2:87:08:ce:85:91:50:a2:ef:aa:d6:ba:9b:0b:
26:52:ba:fa:60:6b:3b:fc:7c:be:7d:44:c9:0a:33:
97:f7:d5:0e:00:4a:e2:41:80:df:ac:19:b9:88:a3:
fc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FF:AA:C6:FD:27:A3:18:73:12:0F:B3:EB:37:66:11:D9:D7:84:F5
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:cc:4a:63:3b:75:86:ea:e4:c1:4c:e2:e3:ee:9d:ba:18:60:
09:aa:d9:79:5b:72:81:37:d2:17:ef:94:1c:70:40:b2:23:53:
ae:4b:60:57:31:ea:e6:3b:ae:57:ac:22:dd:17:5e:3c:2b:4b:
c3:29:17:27:5f:9d:42:b3:ac:01:47:47:6d:40:d7:c1:81:99:
77:f4:e1:b8:df:ff:8f:4c:05:82:52:91:db:b8:e4:14:f0:a8:
ff:aa:ec:32:ee:af:ff:e1:cd:8a:3f:ba:83:00:06:2e:14:9f:
f8:91:1e:2a:e4:9a:5b:7b:ba:cc:e4:92:48:f4:42:ba:93:12:
4c:eb:b5:4d:30:29:a1:94:95:00:91:ba:4a:29:a6:39:07:cc:
42:5e:0b:bb:ef:f9:9e:85:82:25:20:91:45:9c:c1:e3:16:c2:
cb:ab:63:bb:2d:a1:06:5a:0f:ed:89:ac:0b:72:e0:7f:f5:49:
db:33:cf:df:9a:7f:48:57:6d:db:db:59:b0:96:61:c4:36:0d:
b5:2b:e5:92:f7:ed:ca:ec:e6:ef:84:c7:5d:73:08:c2:dd:ef:
42:8a:f6:45:9b:bd:7e:b5:ad:da:a5:8a:66:42:40:48:ec:11:
af:05:f0:6b:c4:17:c7:79:dc:9d:bc:c8:04:d5:88:43:8a:09:
16:5f:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:27 2025 by rpki-client