Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json)
Hash identifier: Rc5JtZnWDGOERo6FG1UkcduKrQj/vhWnHew3nSJfNpg=
Subject key identifier: CF:39:5C:AB:C1:74:00:4A:C6:BB:02:CB:F5:CE:00:90:C2:88:DE:0F
Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Certificate serial: 019749D62E1541D836D6E4005BEE4951533D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
Manifest number: 058E
Signing time: Sat 07 Jun 2025 10:01:02 +0000
Manifest this update: Sat 07 Jun 2025 10:01:02 +0000
Manifest next update: Sun 08 Jun 2025 10:01:02 +0000
Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: mgJzsNFOoRb8aE/TfT9c18lUr/xsxLsOVAUDSOqTV3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:2e:15:41:d8:36:d6:e4:00:5b:ee:49:51:53:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Validity
Not Before: Jun 7 10:01:02 2025 GMT
Not After : Jun 8 10:01:02 2025 GMT
Subject: CN=cf395cabc174004ac6bb02cbf5ce0090c288de0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:b1:51:5c:bd:20:bf:48:8d:84:2a:f8:7e:
17:8b:d8:4d:83:b7:f5:25:3e:00:65:d7:c6:ba:a2:
3d:ec:4a:c0:68:b5:88:c5:af:1f:18:35:9b:37:25:
9b:11:3f:d9:01:23:4a:a0:79:b2:f5:5f:c2:a2:ef:
d8:bb:89:4d:68:47:46:f6:36:0b:44:71:8d:c7:fa:
0e:5f:3e:15:f6:cd:d4:1a:b1:ce:b7:3c:42:a7:d1:
91:a5:fc:a0:22:5b:96:56:d8:67:20:48:e9:c0:1f:
2c:12:b3:07:3f:c7:fc:b1:c8:08:61:8c:1a:f2:20:
b5:c0:cb:db:ca:e3:05:66:46:48:58:04:09:b1:94:
b6:5b:60:b9:54:ed:6e:e5:01:8e:41:08:03:cd:a5:
74:3f:3c:6d:13:ba:b2:32:d5:92:17:59:32:09:23:
45:a8:e0:b7:88:ec:0e:c5:68:0b:8a:59:f7:9d:8d:
e5:2a:27:48:05:08:6f:d0:6c:9f:c5:c9:e0:e1:ff:
8c:20:26:7b:74:b2:d3:ff:54:87:4c:f3:86:a7:f4:
53:1d:87:d3:f5:2e:ae:63:fc:52:d2:2d:e6:83:45:
f5:de:48:b2:76:20:e8:c0:b7:e5:6e:1e:86:2f:77:
65:af:37:f1:be:09:ae:23:49:f7:59:2c:fb:6a:ee:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:39:5C:AB:C1:74:00:4A:C6:BB:02:CB:F5:CE:00:90:C2:88:DE:0F
X509v3 Authority Key Identifier:
keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f9:b5:2a:9d:f7:87:b0:e4:e9:18:63:2c:4b:d1:b5:88:3e:
03:59:3d:92:8f:01:81:52:8b:5f:3a:58:81:e3:14:8e:5e:a2:
18:44:28:e1:72:b8:f6:f3:d5:ec:13:ed:2e:62:26:0b:67:11:
4b:b4:15:65:4d:a3:ad:32:f7:d0:9e:99:7f:5a:e1:f7:5d:70:
4a:ba:e2:62:00:4f:12:bb:ca:8f:c1:56:5c:a2:41:42:8e:e7:
14:d3:81:0b:02:14:97:b1:7b:37:e8:af:a2:2f:0b:04:67:0d:
43:ee:a6:ed:3b:4f:f2:88:50:40:57:8d:dc:ae:77:80:cd:da:
01:12:30:ae:b8:45:01:1f:f1:25:6e:98:58:dd:84:bf:1d:66:
83:ae:9e:76:be:46:c9:38:ef:6e:85:9f:f3:39:bf:8c:d2:fb:
24:c9:8f:e7:22:b4:41:2a:b7:42:d0:3e:3c:e4:7a:19:a2:a3:
be:d4:98:15:07:a2:90:43:80:da:12:19:97:e0:cc:40:10:f1:
d0:d5:88:48:41:3e:45:a9:bb:c9:77:ab:61:ac:8f:0e:58:22:
dd:9e:50:3a:d5:52:41:eb:a4:91:25:71:16:71:10:65:c6:8e:
b4:5e:17:04:fa:49:4d:52:1d:74:f8:b1:3c:c4:a5:6c:dd:db:
01:46:b2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:10 2025 by rpki-client