Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: pLSxos22K1Fp7G3Tz5OSzakpDCmOdCtBPv+6pGK0GMw=
Subject key identifier: CD:4A:92:75:30:D2:C7:45:49:AB:0F:2D:94:2C:8A:E6:2E:E8:DD:3D
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 0197B93408CF175859776D0609E7854C9A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 0414
Signing time: Sun 29 Jun 2025 01:01:24 +0000
Manifest this update: Sun 29 Jun 2025 01:01:24 +0000
Manifest next update: Mon 30 Jun 2025 01:01:24 +0000
Files and hashes: 1: XGvXolDseg1YugpBqFmsVC5vpbQ.roa (hash: 8a1LI50NpHMYU4J+v/T9i7ox43+U6tlzxIDHs0QOPT4=)
2: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: e/i2peyApjDKlcPGuZPLL6Ahrhch0Z6bxZKWjZTqjvE=)
3: eBlI5fYlwU-hqPNae0UC9cusTO4.roa (hash: 3AE3XHL3YDzuuqRVxicnDD9A9BkMYu4bqpc83LOUodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:08:cf:17:58:59:77:6d:06:09:e7:85:4c:9a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Jun 29 01:01:24 2025 GMT
Not After : Jun 30 01:01:24 2025 GMT
Subject: CN=cd4a927530d2c74549ab0f2d942c8ae62ee8dd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1f:74:47:91:a3:2a:9f:71:39:ca:22:5d:8c:
4c:80:9a:20:ba:90:41:cb:f4:80:72:c7:23:7e:cd:
dd:5e:07:6c:02:ca:a4:38:3c:14:06:22:08:46:a3:
65:ab:9a:bd:67:5f:e8:7d:e9:d4:39:54:c3:d0:c9:
f1:25:1e:37:e7:65:18:ea:fc:19:e7:67:84:c5:2e:
c4:e5:aa:90:6c:fc:9f:de:c4:a5:bf:a2:e0:bd:7f:
d9:de:c7:a5:22:ec:05:84:d4:7a:6c:cd:6a:ff:93:
80:1a:d4:c3:ec:dd:6f:11:59:67:0f:ad:1c:09:80:
9d:8b:ed:47:1c:f6:ca:a1:1a:15:6a:0a:e3:e4:2f:
80:e3:0b:95:1f:30:ae:ea:c3:31:82:6c:96:d4:7b:
9c:d6:7c:8e:44:70:5c:d0:ca:a0:33:ea:a6:d3:7c:
ca:22:4b:43:c6:df:28:cc:aa:6c:03:f7:19:3f:d4:
81:c8:73:ef:45:65:04:12:60:87:c0:be:fe:e7:9c:
9a:23:33:0f:ec:08:9f:70:cb:24:c0:6a:de:ee:53:
18:99:77:59:7e:59:ef:50:a4:02:8d:6b:b2:69:95:
7a:77:66:70:e1:8f:08:7d:14:c5:7c:ff:f8:58:3c:
10:83:d0:c6:81:f5:68:86:ae:ef:b9:b8:e0:36:e7:
cd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4A:92:75:30:D2:C7:45:49:AB:0F:2D:94:2C:8A:E6:2E:E8:DD:3D
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:3e:ce:2e:14:b3:81:b9:dc:ac:e7:85:7b:a7:20:14:d9:44:
0c:09:01:3d:8c:ab:1c:be:92:f3:91:06:64:1f:d3:18:60:2d:
4b:41:20:1e:31:d1:ea:58:6e:85:02:cc:48:c2:b6:f9:e6:98:
90:ee:2e:ec:86:bd:e1:1c:76:4d:5c:ba:8c:9f:ec:ac:e3:dd:
ac:b8:2d:03:d0:82:c2:63:18:1b:b7:3d:27:ab:8a:27:af:8f:
1d:66:45:44:97:a7:0e:17:3e:9b:23:3a:0e:5b:a0:0b:ca:5b:
9a:b3:cf:80:4f:60:eb:4a:6d:2a:d3:21:1a:48:17:81:0e:63:
58:5d:e5:7e:1f:25:2c:5b:17:93:aa:ee:76:ea:3f:4a:f2:dc:
54:88:fa:2a:e3:7c:01:98:d7:d0:4d:4b:68:7d:46:3c:ec:ac:
ab:3f:eb:40:0a:0c:15:78:bf:b8:24:81:5a:5f:12:09:b1:8f:
6d:4a:9a:70:8b:be:58:59:3b:5e:cd:d5:5d:6b:7b:3c:e6:35:
b0:0f:91:20:54:b4:bf:ca:aa:5b:82:2a:bc:5e:04:bb:df:7e:
bb:bc:95:60:44:23:cc:f3:56:6f:fc:dc:d3:76:60:76:34:b8:
e0:cd:57:28:e1:be:a5:9c:29:7b:5a:5c:4e:44:28:e1:c4:c7:
9b:51:00:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:35:58 2025 by rpki-client