Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: NRKIfOfs3DeI+rj+a5RnthJsoGLyHhcDWFHa+TfybFA=
Subject key identifier: F4:0E:ED:C6:25:DC:50:DC:AE:22:39:70:98:41:5E:0F:2D:C2:42:39
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 0196789F273E47042DCE909EC3E88D887F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 036E
Signing time: Sun 27 Apr 2025 19:00:18 +0000
Manifest this update: Sun 27 Apr 2025 19:00:18 +0000
Manifest next update: Mon 28 Apr 2025 19:00:18 +0000
Files and hashes: 1: XGvXolDseg1YugpBqFmsVC5vpbQ.roa (hash: 8a1LI50NpHMYU4J+v/T9i7ox43+U6tlzxIDHs0QOPT4=)
2: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: lNC2yHDWKQsLI3P4ryy0nwsbqIpk0BtZpfL1sCFAtEg=)
3: eBlI5fYlwU-hqPNae0UC9cusTO4.roa (hash: 3AE3XHL3YDzuuqRVxicnDD9A9BkMYu4bqpc83LOUodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:27:3e:47:04:2d:ce:90:9e:c3:e8:8d:88:7f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Apr 27 19:00:18 2025 GMT
Not After : Apr 28 19:00:18 2025 GMT
Subject: CN=f40eedc625dc50dcae22397098415e0f2dc24239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:2b:9e:23:23:04:b0:92:70:f0:d7:c0:18:
ad:02:7b:1d:5e:4d:e5:eb:37:cf:e6:ff:3d:6e:1c:
23:65:53:f6:0f:47:01:81:2d:ee:55:04:2b:95:9d:
c3:dd:42:cb:05:25:4d:27:ef:16:fa:a1:a7:ff:a6:
61:4d:4f:77:72:b9:23:ee:17:b6:bb:6e:49:db:01:
ae:c1:90:80:20:30:3f:f5:f3:7e:97:7d:66:6f:b4:
34:6e:54:ea:c9:5f:ad:8a:d3:44:2d:96:a6:f9:a3:
1a:0b:34:2f:0a:62:33:83:b4:c3:d4:a5:6b:44:ce:
01:19:98:ec:6f:bb:dc:dd:9c:b1:c9:35:7c:84:95:
95:39:be:4b:73:21:3c:7f:ff:5b:0a:10:f8:fd:76:
a7:fd:de:cb:e0:80:ec:6a:11:65:82:92:82:ab:dc:
75:a1:af:4f:db:90:da:90:0c:c6:94:4a:16:3e:26:
5c:10:db:8d:26:5b:2a:88:41:37:a8:1c:db:ad:3a:
f4:d6:5b:1c:41:bd:83:fc:49:ad:04:6d:03:ff:3e:
89:46:bd:4d:e2:d3:c0:75:0b:69:eb:53:84:1b:ba:
7d:9d:3e:fb:44:d5:55:26:d9:72:a7:73:f7:d6:9a:
f9:59:d2:58:05:45:ae:5e:4f:26:36:41:72:60:ff:
b1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0E:ED:C6:25:DC:50:DC:AE:22:39:70:98:41:5E:0F:2D:C2:42:39
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:cb:34:ec:e3:36:d7:be:ef:67:51:70:8c:98:ba:16:b5:24:
28:9f:60:6b:a2:e4:2c:5d:4f:33:98:81:76:39:cf:3e:5d:10:
8c:02:95:a4:ec:05:b7:41:72:10:1d:1d:ae:4e:6f:94:25:93:
17:7f:a2:28:cf:76:2b:a5:95:30:1b:ac:26:7d:27:2a:08:0a:
15:94:49:8b:b4:3f:24:f8:5f:31:51:48:f4:dd:1e:9a:a3:0f:
7e:7b:58:fa:70:13:1f:cb:c9:56:e4:69:49:28:d4:f0:44:2f:
b2:fe:1f:56:b7:6b:6a:f0:25:32:87:fd:69:25:5e:16:e1:96:
da:7d:13:23:99:49:d0:f8:66:ea:83:2e:46:75:e3:d9:e0:66:
eb:49:18:8c:0a:31:47:c9:12:21:78:2d:5d:80:0e:d9:ea:59:
af:e8:cc:c2:23:c7:b5:3c:cd:ac:d7:06:0e:fb:9f:62:39:a1:
c2:3a:f0:e9:08:02:58:be:aa:ed:c3:64:9e:96:d3:bb:ad:be:
ae:de:5c:d5:c4:0d:ac:22:50:1b:dd:4f:94:87:55:1c:81:2b:
4e:e5:b0:e6:c8:e2:56:c7:87:a8:c4:53:d2:0a:dd:37:52:50:
a4:ca:d0:4e:32:9e:d3:dc:6b:0f:30:f5:85:e3:23:d9:1f:ad:
72:84:f8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:24:41 2025 by rpki-client