Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: pC2i0KRuBYnWc0pm67Q4iiiAQnDUBMBKjgH/ke+l6WI=
Subject key identifier: 75:32:07:E1:C1:66:DC:7B:59:AC:E8:44:15:35:FD:0A:3E:73:CF:22
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 01992B8FBFF4875823C97646C77C5E523AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 04D6
Signing time: Mon 08 Sep 2025 23:01:04 +0000
Manifest this update: Mon 08 Sep 2025 23:01:04 +0000
Manifest next update: Tue 09 Sep 2025 23:01:04 +0000
Files and hashes: 1: 1-fIgH2OXClYAprp6yMiBZPGPE38.roa (hash: e5we/EQajJb+AgvvOsSreMp1uArGZobtfniZoWH5T6w=)
2: TxtjctBE9y0PWF8zo_okS-qYTI4.roa (hash: Oj72cOZ1BofKypsS5MIjd0Ikt1MzypuBmqQGRqlKa34=)
3: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: JbqjIgqn6ClfCn+vkeU3d5tgbBjv8w8o5HWykt0TRJE=)
4: nvafS3Xex0niyMkHQH02Uhvk-x0.roa (hash: iu++9o654AyM9gCXyG66N1SbfpnxCSghaH87DI0d5l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:8f:bf:f4:87:58:23:c9:76:46:c7:7c:5e:52:3a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Sep 8 23:01:04 2025 GMT
Not After : Sep 9 23:01:04 2025 GMT
Subject: CN=753207e1c166dc7b59ace8441535fd0a3e73cf22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:90:0d:74:ec:68:0b:16:5b:75:bb:e6:01:
60:8d:3b:9a:49:4c:cf:1f:e0:ab:ca:1f:51:b2:50:
a5:fc:15:aa:0e:e7:7f:cf:91:ff:da:e5:e2:15:67:
c1:5d:58:04:ac:97:24:b0:ce:fa:f8:23:f8:57:eb:
87:bb:c3:80:2e:90:32:b1:8b:50:f2:cc:09:71:05:
c7:c4:36:eb:57:0e:e6:86:59:6f:b5:df:5b:a8:73:
89:42:92:3f:fa:88:a0:22:e3:8a:ab:c2:d6:ce:e1:
8f:61:d5:d3:a6:dc:42:6b:8b:3f:3e:0c:63:fa:6a:
f0:0f:7a:ef:28:8c:d8:5b:b4:16:6e:70:21:16:23:
74:75:8f:e0:91:6b:90:21:e1:19:81:d3:3e:0a:4a:
47:fe:65:e4:d3:1b:a6:7c:49:c5:35:08:3c:bf:06:
0d:f3:de:38:4f:3d:60:4a:81:06:29:01:00:f8:2e:
00:82:65:17:e6:8f:fe:f2:31:ee:0b:c0:26:90:dd:
7d:16:0e:b8:ba:60:ae:cf:72:cb:85:13:0e:d2:79:
0f:60:10:08:17:7d:6d:bb:a7:42:34:70:fd:f2:3f:
3d:91:ee:7d:08:c7:f7:03:38:52:7f:09:56:9f:a1:
fe:41:33:66:7d:be:48:1c:e5:7b:6d:c5:d4:2a:91:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:32:07:E1:C1:66:DC:7B:59:AC:E8:44:15:35:FD:0A:3E:73:CF:22
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:16:41:b3:20:68:d6:7c:98:f3:6a:bd:d7:e0:81:58:2f:fb:
cf:0a:36:72:8a:ba:b5:71:52:40:93:08:ff:9f:08:e6:1e:b5:
68:e4:62:42:6d:d3:2c:5f:c0:a4:c3:36:60:2b:b7:be:93:db:
bf:bf:56:d4:c3:ea:88:2a:c8:8a:6f:15:97:5f:94:fe:1b:1f:
7a:9d:ef:6f:2d:d0:bc:15:e8:42:fd:7e:96:8f:77:e1:89:ed:
e5:4c:a4:45:0e:69:1b:3c:db:5c:d6:8b:46:2b:48:7a:d1:e0:
85:9f:6a:2a:55:34:6c:ab:e5:40:3d:64:01:43:e1:37:0c:51:
c1:27:29:c7:4a:99:b7:60:82:15:17:a7:53:d8:8b:60:b2:6f:
48:6c:4e:ee:8b:f4:05:3e:be:f5:d9:06:2a:23:d5:d8:2c:a3:
e0:32:b4:cf:00:5b:cc:4f:09:b3:56:59:b2:fa:d3:f6:35:78:
42:1c:e4:c7:91:b5:9c:db:4d:ca:1d:b3:1f:cc:bd:f1:07:bd:
54:6a:bf:f9:5d:bd:08:03:17:83:8b:a9:8e:08:5e:01:b6:0b:
ce:6c:2c:4d:ae:93:45:50:df:f6:7f:0a:b9:39:46:25:eb:1b:
64:4b:81:5f:9e:fe:77:a7:72:2e:b5:7b:4c:d0:8e:d5:57:b1:
83:22:f1:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkrj7/0h1gjyXZGx3xeUjrnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZDgzZmQ4ZGFiZmUxNGIxNzRjY2NkMzViMzViODA3MTMz
MzRiYTUwHhcNMjUwOTA4MjMwMTA0WhcNMjUwOTA5MjMwMTA0WjAzMTEwLwYDVQQD
Eyg3NTMyMDdlMWMxNjZkYzdiNTlhY2U4NDQxNTM1ZmQwYTNlNzNjZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliOQDXTsaAsWW3W75gFgjTuaSUzP
H+Cryh9RslCl/BWqDud/z5H/2uXiFWfBXVgErJcksM76+CP4V+uHu8OALpAysYtQ
8swJcQXHxDbrVw7mhllvtd9bqHOJQpI/+oigIuOKq8LWzuGPYdXTptxCa4s/Pgxj
+mrwD3rvKIzYW7QWbnAhFiN0dY/gkWuQIeEZgdM+CkpH/mXk0xumfEnFNQg8vwYN
8944Tz1gSoEGKQEA+C4AgmUX5o/+8jHuC8AmkN19Fg64umCuz3LLhRMO0nkPYBAI
F31tu6dCNHD98j89ke59CMf3AzhSfwlWn6H+QTNmfb5IHOV7bcXUKpFNKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUyB+HBZtx7WazoRBU1/Qo+c88iMB8GA1UdIwQY
MBaAFHHYP9jav+FLF0zM01s1uAcTM0ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAt
MDY0ZDdhZGY0YmUzLzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAtMDY0ZDdhZGY0YmUz
LzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRZBsyBo
1nyY82q91+CBWC/7zwo2coq6tXFSQJMI/58I5h61aORiQm3TLF/ApMM2YCu3vpPb
v79W1MPqiCrIim8Vl1+U/hsfep3vby3QvBXoQv1+lo934Ynt5UykRQ5pGzzbXNaL
RitIetHghZ9qKlU0bKvlQD1kAUPhNwxRwScpx0qZt2CCFRenU9iLYLJvSGxO7ov0
BT6+9dkGKiPV2Cyj4DK0zwBbzE8Js1ZZsvrT9jV4Qhzkx5G1nNtNyh2zH8y98Qe9
VGq/+V29CAMXg4upjgheAbYLzmwsTa6TRVDf9n8KuTlGJesbZEuBX57+d6dyLrV7
TNCO1VexgyLxfA==
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:46:19 2025 by rpki-client