Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: c/4d/qlH1eN9u5yyDl44NNOWiD+LbSVTRabUuYPrTbU=
Subject key identifier: 25:57:1F:F3:28:FA:59:03:60:56:2A:7E:B4:9D:7A:B1:EE:C0:0D:09
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 0196B66BC4FD3050A7DEE88C9F86AF511FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 038E
Signing time: Fri 09 May 2025 19:00:38 +0000
Manifest this update: Fri 09 May 2025 19:00:38 +0000
Manifest next update: Sat 10 May 2025 19:00:38 +0000
Files and hashes: 1: XGvXolDseg1YugpBqFmsVC5vpbQ.roa (hash: 8a1LI50NpHMYU4J+v/T9i7ox43+U6tlzxIDHs0QOPT4=)
2: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: 49hqTSURLDZ74w4YkKRxKqF2jNRdIcWAie07TZILY48=)
3: eBlI5fYlwU-hqPNae0UC9cusTO4.roa (hash: 3AE3XHL3YDzuuqRVxicnDD9A9BkMYu4bqpc83LOUodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:6b:c4:fd:30:50:a7:de:e8:8c:9f:86:af:51:1f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: May 9 19:00:38 2025 GMT
Not After : May 10 19:00:38 2025 GMT
Subject: CN=25571ff328fa590360562a7eb49d7ab1eec00d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:72:14:70:1a:8a:a9:54:86:69:66:01:00:
0e:1c:07:9d:70:93:50:98:65:05:52:59:d4:dd:31:
39:72:3a:5e:a7:5c:14:37:4a:89:ab:cf:0f:91:ed:
b5:ca:bd:fb:16:41:80:fc:35:6f:41:5e:5e:88:95:
ca:31:be:15:c3:e4:23:3d:b6:37:67:d9:b8:c0:5a:
63:94:f0:6d:c9:6e:05:49:14:6f:e8:cb:b7:2c:ff:
31:9b:41:e2:09:d6:be:cc:47:3e:c1:ce:7d:ab:15:
bd:03:18:48:25:94:a8:65:5d:f9:b4:da:e3:a8:5e:
77:52:bc:33:5b:f0:58:98:8f:94:53:80:ec:e5:63:
69:f1:de:d6:4e:1f:3a:cc:09:35:29:92:c4:2f:f2:
db:a0:6b:bd:d0:24:c3:f8:1b:1b:48:34:f8:ef:b1:
3f:34:c0:fb:1a:32:0a:ee:7f:84:15:20:74:43:56:
cf:34:96:df:ac:89:54:11:7f:b9:30:83:bc:30:3c:
bb:5d:f2:f0:8f:ab:22:15:8e:34:87:41:45:91:37:
3d:d1:af:07:d8:28:e6:d9:cf:02:c7:8f:c4:61:01:
d5:21:a2:f8:d7:63:13:ac:ad:d9:0d:f2:a7:4a:4d:
56:74:3f:56:97:eb:45:96:e4:bd:f8:9f:54:70:7e:
47:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:57:1F:F3:28:FA:59:03:60:56:2A:7E:B4:9D:7A:B1:EE:C0:0D:09
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b0:24:ed:f6:09:b3:d9:db:ee:15:27:da:c4:9a:8b:17:4a:
52:d9:d7:73:48:ef:f1:95:7d:bd:ef:26:64:5e:5b:c2:1e:47:
30:6c:15:3e:03:71:35:71:3c:06:76:1a:dd:6c:bf:08:63:c2:
1c:91:88:0e:31:bf:2c:82:48:f3:e1:ee:e8:21:cc:0c:24:e7:
00:bd:16:bb:0b:4e:93:49:52:3b:5f:ca:9f:b0:fb:0b:7a:ba:
ef:b5:7f:88:3b:21:be:0f:3d:84:bd:7b:41:7b:12:89:b2:4e:
20:fc:35:bb:79:79:d0:b6:f5:0f:cb:28:1e:5b:b0:06:74:1a:
47:b5:af:47:64:c3:19:03:0f:d1:bc:c4:eb:47:dc:21:84:5d:
80:28:d2:9c:9c:18:3c:a6:dc:71:00:5c:3f:68:32:21:cc:1c:
04:18:23:f3:3f:8d:b3:8c:4c:8a:cf:fc:5c:1d:91:9d:1b:14:
ad:4c:ca:da:d0:3b:39:3b:96:32:cd:9b:94:f2:a5:60:0a:0f:
a6:65:63:29:92:b7:de:df:a1:10:ad:e6:b1:2d:5c:27:f8:40:
c7:39:42:4c:e4:f0:2e:30:6d:63:1a:5a:95:29:b9:b4:de:e6:
60:30:c1:81:78:7d:60:e4:32:37:a8:1f:53:26:6f:2e:5c:ac:
7c:7f:e2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:53:55 2025 by rpki-client