Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json)
Hash identifier: fvREb/dDl+ftzeXhDGVWI9006pnpvNWyAFQDMf7nQRE=
Subject key identifier: C8:8E:7B:85:B8:66:65:C4:CB:F0:CB:40:6B:E2:DA:DA:5A:82:0F:C7
Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Certificate serial: 01984AAEE9F5D01FB84F903FECA1B23B312D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
Manifest number: 0613
Signing time: Sun 27 Jul 2025 07:00:33 +0000
Manifest this update: Sun 27 Jul 2025 07:00:33 +0000
Manifest next update: Mon 28 Jul 2025 07:00:33 +0000
Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: TWU9BiapIvJjm41v0TxSfw1mseIFVk892XbfuRAa+S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e9:f5:d0:1f:b8:4f:90:3f:ec:a1:b2:3b:31:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Validity
Not Before: Jul 27 07:00:33 2025 GMT
Not After : Jul 28 07:00:33 2025 GMT
Subject: CN=c88e7b85b86665c4cbf0cb406be2dada5a820fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:3b:86:2b:2c:4b:2a:f5:6a:ba:7f:2f:37:
c6:30:78:9e:d8:2e:75:b9:6f:bf:7e:06:60:b7:ea:
33:81:3d:42:9a:37:78:82:5a:dc:1a:8e:6c:8a:98:
a6:c0:2d:84:f2:bd:cc:15:9b:3a:b9:13:b3:35:9e:
7c:27:19:10:26:16:cf:da:68:f4:82:f7:2f:fd:4d:
81:75:65:00:1d:34:41:f8:ed:e0:9e:94:ee:47:9c:
e7:92:92:8b:34:3d:4c:27:d5:0a:2f:18:58:e0:e6:
c6:2b:9b:84:8d:63:ab:ca:aa:d3:a9:bc:99:2d:62:
05:9e:ce:de:57:ec:42:63:31:dc:cb:61:53:fb:1a:
b7:97:91:64:09:76:18:65:18:c8:09:fe:50:85:0f:
5a:37:10:13:0b:d9:57:b8:7f:e7:ff:fc:fd:9e:d6:
e6:4d:28:6c:72:75:01:1b:7e:e2:77:c8:7b:ed:0f:
f5:1a:57:0e:b3:60:a9:3c:3d:7b:fd:d8:4e:78:06:
73:a2:c6:80:19:56:85:5a:6b:a8:11:2d:6d:f9:91:
83:52:df:40:f2:86:e4:2f:93:05:9a:bf:42:c6:30:
8a:76:f5:41:17:29:9a:a8:36:ce:92:d7:52:64:a5:
bc:e4:e7:cb:a3:b4:83:c1:3c:a7:7b:25:cb:b1:b3:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8E:7B:85:B8:66:65:C4:CB:F0:CB:40:6B:E2:DA:DA:5A:82:0F:C7
X509v3 Authority Key Identifier:
keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e0:5a:21:47:db:a0:ed:cf:28:9a:ed:fb:c4:e6:26:87:7f:
a0:3f:46:ba:30:89:2b:f0:82:f4:b9:06:eb:29:d9:ce:01:ac:
0e:1f:bb:c6:a7:58:d6:01:3f:cb:ea:67:3c:62:39:8e:a8:2d:
d2:98:9f:f8:ca:13:ca:6a:66:07:e9:f5:3b:ad:4e:b5:89:d5:
46:92:c1:d2:a6:53:e3:01:ea:63:47:91:fd:c1:68:2c:37:e6:
a2:12:34:69:3a:47:5b:02:f6:0b:ab:aa:0c:d9:b2:51:8b:86:
66:e5:be:d2:1c:66:7b:85:46:2f:70:e7:0f:b9:fe:a6:a2:c1:
a1:9e:d5:65:d7:76:c4:56:0d:72:fc:1f:50:16:21:66:f0:ab:
f8:49:48:ad:88:f6:16:5d:a9:b8:f3:6d:0b:89:3b:0d:1a:db:
50:e1:e0:18:18:f9:91:ad:8a:25:40:20:2f:44:61:ea:56:dd:
de:10:58:ff:89:5a:f4:d3:2e:90:09:c8:53:92:20:ba:3e:b1:
72:74:d6:b3:fd:92:84:44:03:13:4a:20:26:62:07:d9:15:e0:
73:0f:6c:39:9a:10:79:b7:b4:de:f2:f7:07:85:58:4e:fe:41:
cd:06:11:ad:54:42:ca:f4:eb:ec:c6:ca:0b:e1:5e:33:23:77:
17:59:15:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKrun10B+4T5A/7KGyOzEtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMGIzNWZjMzY2ZTg0YjQ1ODBlZWVhNzk4OTExZWQ0ZTE4
ZTNhZWIwHhcNMjUwNzI3MDcwMDMzWhcNMjUwNzI4MDcwMDMzWjAzMTEwLwYDVQQD
EyhjODhlN2I4NWI4NjY2NWM0Y2JmMGNiNDA2YmUyZGFkYTVhODIwZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplc7hissSyr1arp/LzfGMHie2C51
uW+/fgZgt+ozgT1Cmjd4glrcGo5sipimwC2E8r3MFZs6uROzNZ58JxkQJhbP2mj0
gvcv/U2BdWUAHTRB+O3gnpTuR5znkpKLND1MJ9UKLxhY4ObGK5uEjWOryqrTqbyZ
LWIFns7eV+xCYzHcy2FT+xq3l5FkCXYYZRjICf5QhQ9aNxATC9lXuH/n//z9ntbm
TShscnUBG37id8h77Q/1GlcOs2CpPD17/dhOeAZzosaAGVaFWmuoES1t+ZGDUt9A
8obkL5MFmr9CxjCKdvVBFymaqDbOktdSZKW85OfLo7SDwTyneyXLsbPZ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiOe4W4ZmXEy/DLQGvi2tpagg/HMB8GA1UdIwQY
MBaAFHILNfw2boS0WA7up5iRHtThjjrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTct
YjcwYjk1NTM5ZGY0LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTctYjcwYjk1NTM5ZGY0
LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMOBaIUfb
oO3PKJrt+8TmJod/oD9GujCJK/CC9LkG6ynZzgGsDh+7xqdY1gE/y+pnPGI5jqgt
0pif+MoTympmB+n1O61OtYnVRpLB0qZT4wHqY0eR/cFoLDfmohI0aTpHWwL2C6uq
DNmyUYuGZuW+0hxme4VGL3DnD7n+pqLBoZ7VZdd2xFYNcvwfUBYhZvCr+ElIrYj2
Fl2puPNtC4k7DRrbUOHgGBj5ka2KJUAgL0Rh6lbd3hBY/4la9NMukAnIU5Iguj6x
cnTWs/2ShEQDE0ogJmIH2RXgcw9sOZoQebe03vL3B4VYTv5BzQYRrVRCyvTr7MbK
C+FeMyN3F1kVjw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:57:42 2025 by rpki-client