Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: vXdUmqz7fYijQyQb2YMTcdrqmuveghrjJzDkFbeCFlw=
Subject key identifier: E0:1B:5C:60:16:A3:0A:93:F7:24:F3:C1:4C:9F:E9:48:FF:E6:18:3D
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 0198345E6B466F522816044E5B0001321FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 0456
Signing time: Tue 22 Jul 2025 23:00:59 +0000
Manifest this update: Tue 22 Jul 2025 23:00:59 +0000
Manifest next update: Wed 23 Jul 2025 23:00:59 +0000
Files and hashes: 1: 1-fIgH2OXClYAprp6yMiBZPGPE38.roa (hash: e5we/EQajJb+AgvvOsSreMp1uArGZobtfniZoWH5T6w=)
2: TxtjctBE9y0PWF8zo_okS-qYTI4.roa (hash: Oj72cOZ1BofKypsS5MIjd0Ikt1MzypuBmqQGRqlKa34=)
3: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: oG6y+AUfL9PLgA4okj7SvBOt/gA4/EmsSRnyxLYVYNg=)
4: nvafS3Xex0niyMkHQH02Uhvk-x0.roa (hash: iu++9o654AyM9gCXyG66N1SbfpnxCSghaH87DI0d5l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:34:5e:6b:46:6f:52:28:16:04:4e:5b:00:01:32:1f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Jul 22 23:00:59 2025 GMT
Not After : Jul 23 23:00:59 2025 GMT
Subject: CN=e01b5c6016a30a93f724f3c14c9fe948ffe6183d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1d:63:38:a7:e5:6b:a2:f2:10:2a:28:a3:2e:
5f:48:25:b3:a4:57:55:bb:6a:e6:a6:ee:72:57:c6:
3d:f5:92:c2:89:d3:46:4b:f6:a4:8a:65:85:29:18:
73:df:02:1b:30:1f:c2:51:40:8d:b1:ad:70:a5:03:
fd:57:0e:8e:04:c5:c3:6d:26:3a:1b:84:30:7b:1d:
c9:ce:f6:8a:97:eb:b9:b5:95:06:cd:44:4a:c9:fe:
d0:7e:96:7e:bf:05:ab:7f:2a:43:2e:a9:1e:3a:80:
d0:79:6b:b5:9b:0b:b4:35:b3:81:8b:1d:45:bb:1f:
2d:d7:0f:52:76:47:2d:62:f6:2c:c2:f2:fa:8c:d1:
6f:de:dd:5f:7b:f7:16:e5:43:d4:72:04:2c:ef:d1:
5b:e6:16:ad:16:14:96:1e:a6:cb:ff:29:9c:87:87:
41:54:ff:06:73:6e:64:c5:0a:ef:f8:54:65:00:35:
4a:e4:6a:82:45:0c:f0:75:86:f0:70:c0:3f:ed:53:
c6:38:55:b4:5d:cc:98:ba:87:2b:d1:1b:15:68:7b:
56:cd:54:54:91:d0:28:56:4c:94:bd:c2:c0:ac:e6:
28:1d:18:11:b9:37:b3:b7:6d:ef:2f:e5:42:63:00:
4c:9b:c3:84:c2:c8:8b:54:29:15:1c:fb:6a:6c:60:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1B:5C:60:16:A3:0A:93:F7:24:F3:C1:4C:9F:E9:48:FF:E6:18:3D
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:a3:9a:dd:91:9b:b4:3c:fc:46:cf:d4:68:13:41:39:57:4b:
2c:88:a5:c4:76:79:85:5d:4d:fe:a9:a8:7e:8e:de:03:e1:a5:
9d:e9:ef:8a:15:5e:27:8a:15:9f:09:f8:a1:d1:ba:c6:69:c8:
8f:c3:f2:64:d3:70:76:aa:1f:6b:25:80:14:be:4e:e8:23:13:
a2:94:94:81:1f:3e:59:89:b9:f8:cb:6b:0c:81:a5:25:c0:33:
60:83:f5:75:1e:e9:6f:df:dc:87:3d:15:28:52:e7:16:de:84:
47:5f:fa:8a:45:b8:4e:59:af:e5:54:3e:8d:fb:79:0a:f4:c6:
55:45:2d:7e:17:fc:fc:df:3e:5c:09:84:02:21:a2:ec:73:f9:
c2:26:26:4a:45:a9:4c:a4:4c:c6:2d:a4:57:80:35:29:32:c9:
17:0a:b8:a1:9c:2f:2c:da:77:71:22:2b:62:61:68:64:4f:eb:
9b:21:ce:bf:fd:aa:47:1d:5d:e0:b4:fb:b4:e2:6d:12:e7:c1:
78:da:e0:cb:dd:a3:b2:3a:57:e1:e7:f2:03:64:d5:78:f8:77:
bd:08:68:2e:8e:a2:be:f7:17:2d:93:69:f7:f5:95:e1:92:e3:
db:be:20:ef:25:07:8e:e6:af:14:fa:75:7c:5f:57:1a:e8:c5:
02:53:fb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 08:07:30 2025 by rpki-client