Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: dKrKG4V7lHXnkKeQ0r7qFFbEdf68zGipACr03SBNAsA=
Subject key identifier: DF:BC:C5:10:BE:2F:F1:77:23:14:39:60:0A:61:D5:DC:A7:53:1C:73
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 01964C34AD152A24655A96844D9CF064400F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 0357
Signing time: Sat 19 Apr 2025 04:00:42 +0000
Manifest this update: Sat 19 Apr 2025 04:00:42 +0000
Manifest next update: Sun 20 Apr 2025 04:00:42 +0000
Files and hashes: 1: XGvXolDseg1YugpBqFmsVC5vpbQ.roa (hash: 8a1LI50NpHMYU4J+v/T9i7ox43+U6tlzxIDHs0QOPT4=)
2: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: JV8+ej8ZC83lKpn+snA7V6eIwkVBgmat2Dhg42Babdg=)
3: eBlI5fYlwU-hqPNae0UC9cusTO4.roa (hash: 3AE3XHL3YDzuuqRVxicnDD9A9BkMYu4bqpc83LOUodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:ad:15:2a:24:65:5a:96:84:4d:9c:f0:64:40:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Apr 19 04:00:42 2025 GMT
Not After : Apr 20 04:00:42 2025 GMT
Subject: CN=dfbcc510be2ff177231439600a61d5dca7531c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:90:f3:27:39:c3:8e:b1:4a:fc:fd:7c:dc:
81:5b:a6:1c:ca:d8:81:14:9a:fc:51:db:8f:39:20:
76:2d:01:a5:f0:88:49:8a:02:4c:12:20:c7:f8:f4:
29:38:9b:92:61:9d:71:e3:06:1a:99:49:2f:a2:25:
fa:7e:89:10:b3:7a:27:bb:68:9f:82:fb:0d:22:bb:
d5:a0:bb:7e:1c:54:b8:77:db:a1:c9:f2:62:34:82:
81:9a:78:c6:8f:a8:ca:c0:10:12:7c:32:9c:10:50:
a9:d8:4f:9d:43:3f:c4:53:25:56:ab:7e:0d:1d:ad:
3b:b8:0f:dd:84:69:44:59:3a:ed:66:88:38:fc:d7:
7f:33:5d:9a:f8:f1:94:98:44:e9:55:d8:bb:93:f8:
e9:b8:ac:41:fe:12:8c:94:42:1d:26:96:88:7a:fe:
40:74:28:96:3c:ca:ce:49:2a:86:b9:a0:85:b0:b1:
52:ad:9e:99:58:6b:f4:07:29:35:f3:56:1a:b8:2b:
d3:31:b4:e9:27:4e:e2:90:e0:df:8a:e5:af:b5:c7:
b5:ea:f0:df:41:3e:b4:05:90:25:46:0b:1c:48:88:
ca:a9:3e:5e:2d:05:af:8c:30:70:59:43:42:86:96:
71:99:84:da:4f:fe:23:26:a4:58:50:44:56:f2:e7:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BC:C5:10:BE:2F:F1:77:23:14:39:60:0A:61:D5:DC:A7:53:1C:73
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cf:53:fc:22:1b:3c:c9:84:7f:88:5a:f4:a2:fb:fe:ee:a4:
b0:68:dc:6f:7e:e9:e5:33:06:eb:2c:6c:53:bc:8b:bd:1a:fb:
f2:71:51:57:b0:50:b3:dd:3a:a6:20:c7:46:7e:b4:84:28:9e:
39:5b:44:66:0a:60:3b:41:be:21:6b:ab:cf:fc:80:d7:e1:e9:
75:da:5f:fd:29:70:49:0e:99:76:df:fa:12:d1:d5:76:db:dd:
a4:ba:66:93:7c:4b:8c:c2:53:91:c6:b1:d1:12:ec:93:b7:f4:
cb:80:4f:5a:3e:a7:d8:c6:1b:f7:d6:d4:9c:3f:8f:cb:98:24:
4e:31:42:3e:c2:b8:9b:25:0c:42:e8:ec:a3:05:88:28:1a:a7:
97:7c:34:2e:ed:e8:87:34:94:1b:06:d9:1c:51:ce:4c:de:0e:
b7:cd:f7:1c:5c:6e:ee:e0:75:33:91:c9:e4:ce:c5:08:e9:4a:
49:c2:cd:b2:31:01:fa:43:44:09:5a:c0:38:9a:b2:af:9e:74:
bd:ee:84:29:1b:0a:46:58:db:5e:32:46:f9:42:39:8c:fd:de:
18:bb:41:51:ab:5e:b9:6f:96:88:42:80:9e:fa:b4:85:59:06:
80:c2:cc:63:31:f0:1b:e3:dc:ff:93:ff:f7:c9:9e:f6:c8:0a:
2c:40:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:24 2025 by rpki-client