Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
File: cgs1_DZuhLRYDu6nmJEe1OGOOus.mft (raw, json)
Hash identifier: EyjrMOXt6BFfkIVFlfYFjaNqCReWxpPEAclvlZFXTqk=
Subject key identifier: 56:30:37:60:A9:28:A4:37:F0:09:B8:3C:57:14:50:45:45:3D:F9:AC
Authority key identifier: 72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
Certificate issuer: /CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Certificate serial: 019A522C1B5E15472628B125049A1E2472E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
Manifest number: 0720
Signing time: Wed 05 Nov 2025 04:00:13 +0000
Manifest this update: Wed 05 Nov 2025 04:00:13 +0000
Manifest next update: Thu 06 Nov 2025 04:00:13 +0000
Files and hashes: 1: cgs1_DZuhLRYDu6nmJEe1OGOOus.crl (hash: azrpg/udVtVszwT6POvbxf+G+fOiMIIT62zVIktb3Yw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:1b:5e:15:47:26:28:b1:25:04:9a:1e:24:72:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720b35fc366e84b4580eeea798911ed4e18e3aeb
Validity
Not Before: Nov 5 04:00:13 2025 GMT
Not After : Nov 6 04:00:13 2025 GMT
Subject: CN=56303760a928a437f009b83c57145045453df9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:aa:d4:4b:71:dd:51:90:e7:8d:ba:e7:bc:d6:
10:ea:6a:01:43:78:92:cb:9c:12:7b:5f:a9:b0:d1:
3e:e1:e3:54:d0:87:3c:0f:cd:76:bc:44:9e:94:17:
29:eb:80:1d:3a:a7:45:1c:78:ea:08:bf:8a:1c:b8:
cf:71:d7:fe:83:db:6c:25:8b:72:a1:20:be:05:f1:
82:52:06:df:79:d8:1d:c5:83:43:c4:af:78:6f:f8:
e9:7e:30:38:0f:a1:72:49:dc:20:f1:4a:3f:d2:77:
0d:e1:8c:d6:4d:5e:59:22:02:d4:50:07:22:7c:29:
4c:a7:2a:d3:d4:40:cd:ac:f7:c2:ad:4b:dc:83:ac:
ba:86:5c:99:2e:38:5e:fd:e7:01:6d:81:e1:55:ab:
3a:d1:32:b2:79:86:94:e7:23:d1:f4:1d:7a:b0:22:
38:a9:d3:19:83:7e:a6:8f:29:84:da:d3:30:bd:17:
2e:10:30:79:fc:b0:67:6b:c8:5d:61:e9:91:81:ad:
18:71:26:e6:e1:09:9b:8d:01:ad:d5:82:dd:42:e7:
09:14:ff:2c:cb:f1:9c:83:8e:b3:6f:24:26:5e:0e:
cc:da:fb:16:6e:88:54:08:83:65:30:a5:c7:0d:c9:
47:d0:08:8a:6f:8a:03:5f:01:48:c9:f6:32:6c:37:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:30:37:60:A9:28:A4:37:F0:09:B8:3C:57:14:50:45:45:3D:F9:AC
X509v3 Authority Key Identifier:
keyid:72:0B:35:FC:36:6E:84:B4:58:0E:EE:A7:98:91:1E:D4:E1:8E:3A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgs1_DZuhLRYDu6nmJEe1OGOOus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4baad5-2b6a-4b64-8f57-b70b95539df4/1/cgs1_DZuhLRYDu6nmJEe1OGOOus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2c:03:56:d3:73:81:bd:f8:76:15:b5:f5:d7:f3:84:36:d4:
80:d5:4f:3b:22:a7:58:c1:e7:d6:49:10:c5:14:86:dc:6e:b8:
25:56:3c:cb:8c:f5:18:c9:cf:bf:ee:71:cf:e3:ff:bd:c5:93:
60:28:f4:4f:c1:d6:ac:d5:4a:e0:99:6c:64:f3:5c:c0:f6:bd:
3d:4c:7b:9b:ca:ff:e2:fb:06:13:f3:dc:b0:d5:bf:b2:c7:ed:
cb:3d:a5:cc:a8:65:a2:3b:eb:9a:48:67:45:51:17:e3:f4:e0:
51:fc:eb:fa:5c:dd:6d:f0:59:c6:d3:e1:f3:e3:d3:23:97:54:
a3:ab:b7:86:23:da:02:cb:7b:61:b5:bf:ea:12:64:30:28:ce:
8a:82:d5:94:f5:3e:db:4e:5f:b5:33:ba:9b:c7:17:c3:4e:84:
d9:d1:b7:4b:02:f1:f8:51:3c:e8:07:6b:e9:23:d4:de:3f:25:
21:b6:b5:2c:3a:e9:a6:de:33:24:70:18:2b:74:21:4f:67:ae:
09:2b:a4:f3:87:95:ed:c8:60:74:e9:3f:0e:40:16:e0:a7:e7:
92:50:81:9e:12:e2:11:52:ac:9a:29:f8:45:ce:23:8c:7d:57:
a0:10:0a:70:b7:71:1e:c0:20:ac:56:de:41:3a:71:f6:64:98:
f1:43:ea:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLBteFUcmKLElBJoeJHLkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMGIzNWZjMzY2ZTg0YjQ1ODBlZWVhNzk4OTExZWQ0ZTE4
ZTNhZWIwHhcNMjUxMTA1MDQwMDEzWhcNMjUxMTA2MDQwMDEzWjAzMTEwLwYDVQQD
Eyg1NjMwMzc2MGE5MjhhNDM3ZjAwOWI4M2M1NzE0NTA0NTQ1M2RmOWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KrUS3HdUZDnjbrnvNYQ6moBQ3iS
y5wSe1+psNE+4eNU0Ic8D812vESelBcp64AdOqdFHHjqCL+KHLjPcdf+g9tsJYty
oSC+BfGCUgbfedgdxYNDxK94b/jpfjA4D6FySdwg8Uo/0ncN4YzWTV5ZIgLUUAci
fClMpyrT1EDNrPfCrUvcg6y6hlyZLjhe/ecBbYHhVas60TKyeYaU5yPR9B16sCI4
qdMZg36mjymE2tMwvRcuEDB5/LBna8hdYemRga0YcSbm4QmbjQGt1YLdQucJFP8s
y/Gcg46zbyQmXg7M2vsWbohUCINlMKXHDclH0AiKb4oDXwFIyfYybDcwIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYwN2CpKKQ38Am4PFcUUEVFPfmsMB8GA1UdIwQY
MBaAFHILNfw2boS0WA7up5iRHtThjjrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTct
YjcwYjk1NTM5ZGY0LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80YmFhZDUtMmI2YS00YjY0LThmNTctYjcwYjk1NTM5ZGY0
LzEvY2dzMV9EWnVoTFJZRHU2bm1KRWUxT0dPT3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiwDVtNz
gb34dhW19dfzhDbUgNVPOyKnWMHn1kkQxRSG3G64JVY8y4z1GMnPv+5xz+P/vcWT
YCj0T8HWrNVK4JlsZPNcwPa9PUx7m8r/4vsGE/PcsNW/ssftyz2lzKhlojvrmkhn
RVEX4/TgUfzr+lzdbfBZxtPh8+PTI5dUo6u3hiPaAst7YbW/6hJkMCjOioLVlPU+
205ftTO6m8cXw06E2dG3SwLx+FE86Adr6SPU3j8lIba1LDrppt4zJHAYK3QhT2eu
CSuk84eV7chgdOk/DkAW4KfnklCBnhLiEVKsmin4Rc4jjH1XoBAKcLdxHsAgrFbe
QTpx9mSY8UPqUA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:21:27 2025 by rpki-client