Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: qU6hLB0fIBeHQhBZlNxFGaAq3DJh6+K0yVYJQ1S/KDU=
Subject key identifier: 39:74:14:35:CA:5E:BF:4E:A8:B4:BD:CB:BB:FD:3F:15:6D:C3:3B:30
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 019747425708B460EDC6DDC0E3E07611C161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 03D9
Signing time: Fri 06 Jun 2025 22:00:19 +0000
Manifest this update: Fri 06 Jun 2025 22:00:19 +0000
Manifest next update: Sat 07 Jun 2025 22:00:19 +0000
Files and hashes: 1: XGvXolDseg1YugpBqFmsVC5vpbQ.roa (hash: 8a1LI50NpHMYU4J+v/T9i7ox43+U6tlzxIDHs0QOPT4=)
2: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: 0Kb2TVAm6rYAtZsa5BBiW+ZFpTCmHyzRQFDscW2VK8U=)
3: eBlI5fYlwU-hqPNae0UC9cusTO4.roa (hash: 3AE3XHL3YDzuuqRVxicnDD9A9BkMYu4bqpc83LOUodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:57:08:b4:60:ed:c6:dd:c0:e3:e0:76:11:c1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Jun 6 22:00:19 2025 GMT
Not After : Jun 7 22:00:19 2025 GMT
Subject: CN=39741435ca5ebf4ea8b4bdcbbbfd3f156dc33b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c7:92:73:f2:64:a4:94:74:be:8b:aa:18:b7:
00:65:00:3c:fd:b1:01:9b:3f:fa:9d:4a:3e:71:bf:
c0:45:4e:6a:32:6b:92:b1:b1:ed:b9:d4:3a:93:51:
08:a7:fc:e3:c8:81:5b:af:fb:7b:f9:93:13:49:05:
97:23:aa:b9:32:51:0d:bf:55:0c:2b:a8:7c:62:fd:
4d:6c:3b:ba:e5:6c:ff:47:5d:69:cc:70:6a:80:17:
e6:cb:b0:54:e1:7f:61:ad:91:1a:1c:c3:55:43:12:
0c:3e:4c:e7:f3:33:6c:de:18:d3:36:75:48:06:18:
c7:76:8e:4f:60:d4:22:0d:56:95:72:f3:73:ff:4d:
3a:25:d5:81:73:2e:d2:9c:bd:1b:56:71:f6:a5:43:
49:99:f0:d8:c0:f9:8f:48:64:cd:d6:7a:60:e2:d4:
dc:db:c5:22:b5:35:2d:f0:de:95:68:96:ea:39:d6:
15:8d:b8:e0:6e:3f:53:f3:61:56:ec:39:5c:23:01:
71:bc:13:7e:d6:51:7a:dc:61:51:d7:81:14:d3:45:
ef:99:3a:d3:2f:d3:85:c7:64:7c:e2:42:89:67:11:
2a:47:9d:48:d6:6d:14:5b:bf:60:6a:3f:25:2d:06:
07:68:b1:b3:ee:e3:5b:e4:ec:52:c0:f6:4d:45:32:
84:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:74:14:35:CA:5E:BF:4E:A8:B4:BD:CB:BB:FD:3F:15:6D:C3:3B:30
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b3:5f:72:4b:e6:6d:d3:36:5a:ea:2f:8f:c3:eb:53:c9:05:
ad:0e:10:a9:9c:c5:26:e2:ac:fc:bd:40:7e:b2:dd:c1:07:08:
18:42:eb:20:fb:15:f5:e0:fb:73:72:e0:97:8a:c4:57:18:93:
01:32:9b:47:61:7e:8c:83:2b:f1:a5:e3:5c:be:65:0e:73:4a:
34:90:ad:e9:44:8b:8c:35:b9:62:9c:1d:45:c9:bd:ff:71:6e:
fc:5d:c4:31:f8:f7:8c:5b:ae:b2:f9:0c:29:78:ee:87:b3:6f:
95:88:56:0a:4d:48:75:2a:ad:85:a2:ea:7b:c5:0b:6e:65:01:
b3:f2:22:07:19:8c:78:5f:cb:7c:10:79:53:e1:19:56:90:f3:
84:ba:a8:91:84:97:4d:7c:ea:83:d0:3d:e2:7f:1b:8a:17:7b:
35:a7:07:03:a8:bc:49:38:53:35:3e:48:8b:d2:aa:69:c6:ab:
19:ae:01:18:f0:c8:d5:02:48:a1:a3:f0:c0:fd:37:45:fd:9a:
78:16:62:ca:d6:24:38:00:f8:1b:b4:98:4b:ee:61:03:29:80:
13:4c:7b:b9:79:06:12:c6:5d:09:1c:c9:5e:00:de:ab:2b:a2:
57:6f:b0:71:6b:2a:5b:03:41:93:1c:b9:02:38:02:d0:bb:04:
85:a9:a9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:08:16 2025 by rpki-client