Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json)
Hash identifier: ktO4jvwqCDr3QL4iOPfHJ2x96ZcMKkj+kdDveOTUwz0=
Subject key identifier: F0:01:62:63:67:6F:7B:67:BE:EE:03:D4:96:B1:5C:6C:92:3C:ED:0F
Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Certificate serial: 019A7112BFA4EAD4F8832D6632FE1D0E0259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
Manifest number: 0730
Signing time: Tue 11 Nov 2025 04:00:45 +0000
Manifest this update: Tue 11 Nov 2025 04:00:45 +0000
Manifest next update: Wed 12 Nov 2025 04:00:45 +0000
Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: 41J16/6vS+4tXCoYdkfHwPO3oygw5UGr9EETRhVNhLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:bf:a4:ea:d4:f8:83:2d:66:32:fe:1d:0e:02:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Validity
Not Before: Nov 11 04:00:45 2025 GMT
Not After : Nov 12 04:00:45 2025 GMT
Subject: CN=f0016263676f7b67beee03d496b15c6c923ced0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:f2:b8:3b:ac:1f:de:80:c9:68:1a:8e:75:
18:61:48:97:17:ec:4f:29:c1:dc:d2:f9:b4:ee:39:
96:8f:9e:5a:d0:9c:e0:0b:f5:55:d8:c0:68:c1:4b:
ac:e7:08:01:9e:e7:71:bb:80:6f:d7:ba:02:28:e0:
a8:0e:10:d6:dd:ae:f3:88:9f:5e:6a:95:89:91:c6:
b2:37:2f:45:7d:67:b0:3f:f2:ca:4c:40:66:d1:91:
59:3e:62:7e:7d:a2:55:91:51:d9:e4:07:4d:58:b5:
4e:5b:13:a9:2c:6d:52:b1:17:fb:d5:44:89:ce:fb:
ec:c6:79:7f:ca:56:22:32:c2:36:c8:20:ea:ac:ec:
72:36:fc:4e:37:23:51:63:95:70:43:bd:3b:f4:a2:
b4:01:9e:be:b8:e6:7e:38:6d:8d:cc:99:95:40:fd:
b5:59:71:8b:19:66:ec:a5:1e:26:1b:96:5a:15:75:
3d:24:29:53:9a:be:d4:7f:c4:d6:6d:c3:e7:bf:74:
77:8c:ed:d8:42:63:bf:ff:a1:96:11:fc:f6:cc:6c:
9c:2c:99:c8:15:7e:3a:4e:b1:71:03:0d:68:c2:a6:
f5:ef:5f:56:4f:1e:92:16:89:fd:01:75:da:55:4e:
8f:30:f7:93:bf:01:dd:6b:f9:82:71:94:e2:84:3e:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:01:62:63:67:6F:7B:67:BE:EE:03:D4:96:B1:5C:6C:92:3C:ED:0F
X509v3 Authority Key Identifier:
keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1a:3e:ab:25:dd:34:9e:15:75:b5:be:21:e7:fb:51:a7:70:
c3:2b:dc:a8:43:e4:f6:a8:a2:43:a3:98:d9:8b:45:3c:4c:04:
9a:78:33:86:cc:4e:85:6d:8c:26:38:25:0e:af:76:6f:dc:d4:
d8:60:21:bd:da:bf:c1:2d:d6:43:c0:02:9a:b0:55:1a:d8:fd:
91:51:c5:e9:8f:79:21:ab:b5:11:06:7f:53:ed:2c:90:5c:fe:
43:b4:71:0f:f6:16:e2:f9:ef:4d:1e:87:01:67:7e:cf:8b:60:
4c:29:d2:3d:3b:0b:3b:a2:b5:a4:f5:e2:71:36:e3:ec:98:ad:
bf:cf:e3:39:9a:8b:4b:b4:cc:63:29:7f:91:11:fa:29:2f:5b:
05:07:23:2d:d4:b8:a2:47:14:52:a5:96:59:73:f1:3e:1a:8a:
b2:39:ba:47:d4:b6:81:96:9b:37:8f:75:b6:b8:3c:ad:93:f1:
65:57:64:3c:e4:e7:35:44:29:ee:2b:91:3c:99:74:03:71:87:
25:50:8c:8d:62:92:f4:7e:58:54:33:50:3c:b6:6f:5c:21:6f:
cd:2b:ca:93:04:80:6b:6a:d4:34:c5:d1:2e:7b:d3:de:c0:88:
10:61:ac:b2:88:4f:52:6c:81:42:16:66:0b:ca:e1:c7:20:6e:
42:3e:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:19 2025 by rpki-client