Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: yYO8pjsosP4PXNbfWXPpGVfy56dAYp2pyKlxjwY7hxY=
Subject key identifier: 9E:2D:4B:E8:E1:A3:77:34:FE:61:B5:F2:38:A5:BE:1B:24:0A:05:28
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 01977978559ECA346874BBDD71403CA93999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 03F3
Signing time: Mon 16 Jun 2025 16:00:18 +0000
Manifest this update: Mon 16 Jun 2025 16:00:18 +0000
Manifest next update: Tue 17 Jun 2025 16:00:18 +0000
Files and hashes: 1: XGvXolDseg1YugpBqFmsVC5vpbQ.roa (hash: 8a1LI50NpHMYU4J+v/T9i7ox43+U6tlzxIDHs0QOPT4=)
2: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: Yr+u11a/B4ja/hChcR2Rqka+zspN63P90+/QMES69gM=)
3: eBlI5fYlwU-hqPNae0UC9cusTO4.roa (hash: 3AE3XHL3YDzuuqRVxicnDD9A9BkMYu4bqpc83LOUodY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:55:9e:ca:34:68:74:bb:dd:71:40:3c:a9:39:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Jun 16 16:00:18 2025 GMT
Not After : Jun 17 16:00:18 2025 GMT
Subject: CN=9e2d4be8e1a37734fe61b5f238a5be1b240a0528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:33:6b:49:9f:5c:24:1d:69:19:43:5e:b0:64:
82:19:61:b9:c1:df:b6:27:79:1e:72:27:f1:5d:e8:
e3:c6:1c:bd:d0:ba:74:1d:53:f1:ed:70:d9:ce:e2:
28:9d:38:77:7c:e0:5f:77:6e:aa:0d:35:a1:33:11:
fd:62:ca:f1:e2:71:40:a2:2f:5e:09:de:9d:7a:1f:
23:4b:16:73:72:30:c2:7f:5b:66:23:03:1a:ac:b5:
45:21:60:e9:f5:cd:ab:d6:2e:34:eb:16:fb:0f:f2:
0d:0d:a4:90:ce:87:3f:6b:12:e8:bf:40:0a:3f:02:
b5:f9:2f:15:d3:71:22:89:63:1d:d6:ae:fa:b4:ab:
83:a9:17:e2:cb:cb:18:02:73:e0:33:50:90:1a:6a:
d0:98:24:e0:4d:81:35:b8:0c:19:cd:cb:00:cc:f7:
67:73:32:38:7d:6a:ea:a6:63:b7:ad:3d:af:67:cb:
57:e4:69:1d:2f:e6:04:dc:4e:2c:c1:7d:8b:dd:4d:
0d:14:14:ec:3e:a5:ab:ac:90:5c:86:1e:0c:f6:16:
3b:fc:06:02:71:5e:53:7c:73:06:29:3e:b8:e3:23:
c6:cb:c2:d2:b7:d9:5b:93:d0:44:c1:f9:7e:5f:32:
28:57:03:7b:fb:0a:40:af:24:37:8b:39:a7:7a:6b:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2D:4B:E8:E1:A3:77:34:FE:61:B5:F2:38:A5:BE:1B:24:0A:05:28
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c6:2c:09:43:56:1e:b0:2d:16:46:14:12:84:21:22:55:77:
56:20:4c:d2:1f:4d:33:e7:6e:ca:e4:ac:5e:54:bb:39:d0:a8:
06:d2:4b:8a:6b:78:72:77:02:99:c5:a9:ff:52:3f:42:8d:18:
4e:08:73:1e:49:57:4a:72:08:ff:c3:36:7c:6e:ea:89:be:e5:
dc:42:59:e8:65:3d:24:25:d5:61:c0:d1:c8:f1:f4:e2:94:f2:
24:c8:e0:f2:17:8f:8c:e2:e5:81:1a:f6:85:fd:aa:b2:a2:11:
0c:8d:5f:22:6e:d9:cd:f6:26:f7:ea:f2:c7:44:0a:4e:d2:08:
8d:dc:4d:ec:7d:60:93:50:fc:f5:8d:c8:04:f8:54:e5:e6:64:
1d:3f:e9:e5:df:8c:b3:92:88:cc:b4:b8:78:47:61:8b:78:9c:
d1:69:10:5d:52:2e:21:d0:66:e2:8e:9a:d1:b7:da:78:9d:b1:
e1:47:cb:c6:33:c9:62:fa:79:27:5a:a0:ac:ae:6f:a8:14:f9:
ae:63:d4:6a:d8:ea:4f:0d:8e:b2:94:16:77:f3:8b:d5:4f:8d:
49:b4:18:48:72:17:f5:01:12:db:db:2a:2f:f3:fe:6d:b7:c0:
80:2f:45:1e:91:ec:8c:ab:55:94:81:a2:a0:1c:0a:17:f1:d0:
22:fc:0f:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5eFWeyjRodLvdcUA8qTmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZDgzZmQ4ZGFiZmUxNGIxNzRjY2NkMzViMzViODA3MTMz
MzRiYTUwHhcNMjUwNjE2MTYwMDE4WhcNMjUwNjE3MTYwMDE4WjAzMTEwLwYDVQQD
Eyg5ZTJkNGJlOGUxYTM3NzM0ZmU2MWI1ZjIzOGE1YmUxYjI0MGEwNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TNrSZ9cJB1pGUNesGSCGWG5wd+2
J3kecifxXejjxhy90Lp0HVPx7XDZzuIonTh3fOBfd26qDTWhMxH9Ysrx4nFAoi9e
Cd6deh8jSxZzcjDCf1tmIwMarLVFIWDp9c2r1i406xb7D/INDaSQzoc/axLov0AK
PwK1+S8V03EiiWMd1q76tKuDqRfiy8sYAnPgM1CQGmrQmCTgTYE1uAwZzcsAzPdn
czI4fWrqpmO3rT2vZ8tX5GkdL+YE3E4swX2L3U0NFBTsPqWrrJBchh4M9hY7/AYC
cV5TfHMGKT644yPGy8LSt9lbk9BEwfl+XzIoVwN7+wpAryQ3izmnemubUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4tS+jho3c0/mG18jilvhskCgUoMB8GA1UdIwQY
MBaAFHHYP9jav+FLF0zM01s1uAcTM0ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAt
MDY0ZDdhZGY0YmUzLzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAtMDY0ZDdhZGY0YmUz
LzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVMYsCUNW
HrAtFkYUEoQhIlV3ViBM0h9NM+duyuSsXlS7OdCoBtJLimt4cncCmcWp/1I/Qo0Y
TghzHklXSnII/8M2fG7qib7l3EJZ6GU9JCXVYcDRyPH04pTyJMjg8hePjOLlgRr2
hf2qsqIRDI1fIm7ZzfYm9+ryx0QKTtIIjdxN7H1gk1D89Y3IBPhU5eZkHT/p5d+M
s5KIzLS4eEdhi3ic0WkQXVIuIdBm4o6a0bfaeJ2x4UfLxjPJYvp5J1qgrK5vqBT5
rmPUatjqTw2OspQWd/OL1U+NSbQYSHIX9QES29sqL/P+bbfAgC9FHpHsjKtVlIGi
oBwKF/HQIvwPmg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:50:52 2025 by rpki-client