Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: G2Dk+v6zxDsFOhgUUoLFUmpWuRmr7QuRrqt5aMGlkb0=
Subject key identifier: 7C:34:30:32:29:CA:B4:13:AC:2A:96:7E:D3:1B:BB:08:34:DB:17:3C
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 019A1CBEB0C9EA2493CF015D9355FBD385CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 0553
Signing time: Sat 25 Oct 2025 19:00:50 +0000
Manifest this update: Sat 25 Oct 2025 19:00:50 +0000
Manifest next update: Sun 26 Oct 2025 19:00:50 +0000
Files and hashes: 1: 1-fIgH2OXClYAprp6yMiBZPGPE38.roa (hash: e5we/EQajJb+AgvvOsSreMp1uArGZobtfniZoWH5T6w=)
2: TxtjctBE9y0PWF8zo_okS-qYTI4.roa (hash: Oj72cOZ1BofKypsS5MIjd0Ikt1MzypuBmqQGRqlKa34=)
3: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: j0tkZgCo3RRg4XjftgPilB6GyYF004Sxo35zDGlzN5Y=)
4: nvafS3Xex0niyMkHQH02Uhvk-x0.roa (hash: iu++9o654AyM9gCXyG66N1SbfpnxCSghaH87DI0d5l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:b0:c9:ea:24:93:cf:01:5d:93:55:fb:d3:85:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Oct 25 19:00:50 2025 GMT
Not After : Oct 26 19:00:50 2025 GMT
Subject: CN=7c34303229cab413ac2a967ed31bbb0834db173c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:82:3b:57:27:96:75:22:f3:49:a5:03:51:
99:1b:e4:c3:60:f6:47:9e:55:a1:67:13:b1:c0:c4:
ff:b8:c5:8c:51:5d:cf:d5:56:40:40:50:d3:f9:ef:
cd:96:55:de:99:db:74:cf:49:7f:e7:5a:c4:8c:da:
c6:07:0d:0e:dd:6e:a7:e3:73:d2:d7:86:89:11:9c:
bc:e5:7d:4a:d3:09:e4:be:44:68:cc:f2:22:29:67:
f3:9d:b2:b4:55:a5:1f:42:3e:e0:7d:6c:4e:f5:cb:
e1:79:ec:11:34:83:33:11:12:18:04:29:5c:e6:41:
c1:66:63:76:ff:72:9e:95:aa:4a:cb:f9:7d:71:8a:
8f:1e:0e:6e:4f:12:de:bc:48:26:44:67:6a:7c:2e:
de:ef:57:0d:2a:8d:86:2a:24:e5:2a:ab:9c:d2:21:
24:c3:63:d1:f9:bb:7c:20:eb:71:54:21:b4:98:f1:
3b:20:12:10:b0:2f:cb:18:4a:80:1e:7b:bc:c8:cb:
00:ff:81:e7:2e:3b:8f:d7:c7:7e:5f:d6:73:75:c7:
eb:89:b7:bb:c3:3d:9d:1e:54:73:19:9f:54:63:f9:
30:dd:35:bb:2b:31:8a:76:48:67:89:8a:3e:e5:28:
22:4e:36:2e:a7:ae:d2:b6:66:f9:00:72:bd:71:71:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:34:30:32:29:CA:B4:13:AC:2A:96:7E:D3:1B:BB:08:34:DB:17:3C
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f4:3a:f1:91:7d:51:80:a8:93:4a:76:41:8a:8c:49:ce:f2:
47:5c:93:c5:9f:2b:80:42:7f:fc:2b:92:2e:79:ec:17:d2:35:
db:cc:5a:1d:dd:fa:b9:87:87:ea:2e:f7:30:d4:e8:89:3e:7a:
4d:03:62:b7:12:15:18:a8:43:15:9a:e1:28:b4:d6:48:6b:91:
16:50:e5:7f:98:89:59:8a:2e:0b:f5:5f:01:2d:18:91:a6:ca:
be:58:c0:98:e4:f8:97:a0:14:19:32:0d:4d:ee:12:73:54:07:
e7:3f:10:89:5a:1a:a6:c9:ed:fc:ad:08:37:4d:9b:e2:85:a4:
9e:a8:ea:26:d5:9c:4f:ab:6f:26:9d:bb:82:83:40:18:e4:0a:
0a:20:31:6c:4e:f5:f5:e1:e2:d5:11:ab:bc:09:56:5b:60:b9:
67:e8:46:1e:a8:33:95:a0:e0:88:e2:d0:4a:e4:bd:6c:5f:39:
1f:ac:7e:ae:75:29:44:85:e6:22:6b:d0:9e:15:46:1b:aa:eb:
89:14:6b:a9:3f:31:8b:95:1a:93:2a:42:e4:bc:e3:11:4a:8b:
0a:86:a2:9b:a8:5b:f8:ed:03:aa:f6:c0:cb:8a:ac:71:08:da:
05:ad:8d:a7:0d:a7:ee:ec:80:c7:db:c7:57:f6:36:c8:3b:24:
83:a7:da:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZocvrDJ6iSTzwFdk1X704XOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZDgzZmQ4ZGFiZmUxNGIxNzRjY2NkMzViMzViODA3MTMz
MzRiYTUwHhcNMjUxMDI1MTkwMDUwWhcNMjUxMDI2MTkwMDUwWjAzMTEwLwYDVQQD
Eyg3YzM0MzAzMjI5Y2FiNDEzYWMyYTk2N2VkMzFiYmIwODM0ZGIxNzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6qCO1cnlnUi80mlA1GZG+TDYPZH
nlWhZxOxwMT/uMWMUV3P1VZAQFDT+e/NllXemdt0z0l/51rEjNrGBw0O3W6n43PS
14aJEZy85X1K0wnkvkRozPIiKWfznbK0VaUfQj7gfWxO9cvheewRNIMzERIYBClc
5kHBZmN2/3KelapKy/l9cYqPHg5uTxLevEgmRGdqfC7e71cNKo2GKiTlKquc0iEk
w2PR+bt8IOtxVCG0mPE7IBIQsC/LGEqAHnu8yMsA/4HnLjuP18d+X9Zzdcfribe7
wz2dHlRzGZ9UY/kw3TW7KzGKdkhniYo+5SgiTjYup67Stmb5AHK9cXHGnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHw0MDIpyrQTrCqWftMbuwg02xc8MB8GA1UdIwQY
MBaAFHHYP9jav+FLF0zM01s1uAcTM0ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAt
MDY0ZDdhZGY0YmUzLzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAtMDY0ZDdhZGY0YmUz
LzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIPQ68ZF9
UYCok0p2QYqMSc7yR1yTxZ8rgEJ//CuSLnnsF9I128xaHd36uYeH6i73MNToiT56
TQNitxIVGKhDFZrhKLTWSGuRFlDlf5iJWYouC/VfAS0YkabKvljAmOT4l6AUGTIN
Te4Sc1QH5z8QiVoapsnt/K0IN02b4oWknqjqJtWcT6tvJp27goNAGOQKCiAxbE71
9eHi1RGrvAlWW2C5Z+hGHqgzlaDgiOLQSuS9bF85H6x+rnUpRIXmImvQnhVGG6rr
iRRrqT8xi5UakypC5LzjEUqLCoaim6hb+O0DqvbAy4qscQjaBa2Npw2n7uyAx9vH
V/Y2yDskg6fa6g==
-----END CERTIFICATE-----
Generated at Sun Oct 26 03:18:48 2025 by rpki-client