Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
File: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft (raw, json)
Hash identifier: 2DwCmr8QR+YhmAsa/c7GzkpvzSE4B8g/IjDUEk53aaM=
Subject key identifier: 02:B3:A1:2C:D1:86:9A:9B:77:BA:3B:D8:A7:BD:71:2B:05:CE:51:19
Authority key identifier: 71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
Certificate issuer: /CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Certificate serial: 0198838C7406091BC0B65627518B8FE4FB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
Manifest number: 047F
Signing time: Thu 07 Aug 2025 08:01:16 +0000
Manifest this update: Thu 07 Aug 2025 08:01:16 +0000
Manifest next update: Fri 08 Aug 2025 08:01:16 +0000
Files and hashes: 1: 1-fIgH2OXClYAprp6yMiBZPGPE38.roa (hash: e5we/EQajJb+AgvvOsSreMp1uArGZobtfniZoWH5T6w=)
2: TxtjctBE9y0PWF8zo_okS-qYTI4.roa (hash: Oj72cOZ1BofKypsS5MIjd0Ikt1MzypuBmqQGRqlKa34=)
3: cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl (hash: v8B61gzEnGpUHOEx04hVR/GgB3GSxQEIuv1FVg1I2Xs=)
4: nvafS3Xex0niyMkHQH02Uhvk-x0.roa (hash: iu++9o654AyM9gCXyG66N1SbfpnxCSghaH87DI0d5l8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:74:06:09:1b:c0:b6:56:27:51:8b:8f:e4:fb:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d83fd8dabfe14b174cccd35b35b80713334ba5
Validity
Not Before: Aug 7 08:01:16 2025 GMT
Not After : Aug 8 08:01:16 2025 GMT
Subject: CN=02b3a12cd1869a9b77ba3bd8a7bd712b05ce5119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:8a:3c:15:70:1d:0a:19:e4:79:f7:b0:e3:
e0:f8:07:f8:d2:5b:75:54:dc:a5:95:bf:9b:59:b6:
7f:14:f2:73:dd:04:48:3a:c8:ee:27:46:0b:46:7b:
85:61:cf:f8:67:56:9d:d4:cc:11:80:78:27:17:4b:
ed:f5:64:cd:16:ab:21:46:9c:da:90:ce:87:95:48:
17:75:af:02:df:6a:39:ec:e9:74:5a:e9:25:3c:0f:
df:34:ca:98:12:d3:47:8b:7b:53:ac:f3:5e:c0:30:
b3:57:68:9c:14:a3:7c:f9:56:f7:1d:aa:a3:6d:5f:
90:3b:03:bb:a7:4c:01:65:d2:c7:2d:b0:ce:c2:e5:
6e:3d:56:15:3d:8a:12:95:7f:07:5a:55:3e:83:6a:
8e:bd:52:7b:30:0a:ae:c6:df:13:6c:d8:31:19:22:
bf:e7:b5:ae:14:9e:7e:2e:5a:67:64:8a:0c:f4:90:
f6:75:4f:01:9d:06:3c:6c:ef:49:5e:2b:68:93:e3:
fe:66:76:cd:12:67:0b:80:02:05:d5:9a:49:4d:3a:
b5:94:92:4b:96:4c:71:27:a6:2f:47:14:9b:3d:02:
4d:d3:4c:19:8f:33:b3:bc:ce:1f:98:11:82:97:65:
20:a3:36:72:0b:50:ca:02:bc:91:8f:67:5e:bb:ef:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B3:A1:2C:D1:86:9A:9B:77:BA:3B:D8:A7:BD:71:2B:05:CE:51:19
X509v3 Authority Key Identifier:
keyid:71:D8:3F:D8:DA:BF:E1:4B:17:4C:CC:D3:5B:35:B8:07:13:33:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d7ecf-4b62-4367-9b50-064d7adf4be3/1/cdg_2Nq_4UsXTMzTWzW4BxMzS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:96:3a:17:74:16:53:8b:b3:35:0b:3a:78:c0:4b:87:85:fd:
16:32:b6:3f:c1:8f:76:43:95:16:0a:5a:26:05:c2:e2:0c:b3:
90:95:c8:4d:07:4f:f4:36:72:e6:f7:7b:cb:89:d7:b2:95:64:
88:76:86:2c:4f:88:60:b1:48:ee:cc:dd:2e:18:51:36:2c:ff:
7e:cd:4a:95:3d:99:a1:bc:47:4f:01:a2:27:8a:35:c6:d7:30:
14:08:ad:0a:84:bd:e6:50:0a:e3:1a:74:6b:13:35:98:d3:4c:
f6:7b:0c:de:61:fe:c7:ca:b0:90:30:97:2c:c2:bc:12:bd:a2:
2f:38:02:9e:ee:8a:e6:ca:96:e7:db:be:42:eb:4f:ff:85:e6:
c3:f3:eb:34:ba:45:39:66:6e:84:9a:42:6a:f1:ab:ed:8a:40:
6e:b2:3a:8b:cb:dc:ca:99:b5:76:db:10:e2:61:b5:78:e7:74:
2f:a3:a8:bb:fd:ba:af:bc:eb:5b:5f:f6:6b:57:77:df:77:1b:
ac:be:cd:1f:f0:c1:54:e8:b3:88:87:c1:59:42:ff:c8:d7:68:
2b:8b:b6:9e:15:3c:93:df:97:63:f5:f9:cb:5f:ad:59:ab:23:
98:f1:ca:8f:6d:6e:9c:eb:ac:ee:b5:56:6d:bf:e3:70:78:61:
ba:46:07:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiDjHQGCRvAtlYnUYuP5PtTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZDgzZmQ4ZGFiZmUxNGIxNzRjY2NkMzViMzViODA3MTMz
MzRiYTUwHhcNMjUwODA3MDgwMTE2WhcNMjUwODA4MDgwMTE2WjAzMTEwLwYDVQQD
EygwMmIzYTEyY2QxODY5YTliNzdiYTNiZDhhN2JkNzEyYjA1Y2U1MTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRWKPBVwHQoZ5Hn3sOPg+Af40lt1
VNyllb+bWbZ/FPJz3QRIOsjuJ0YLRnuFYc/4Z1ad1MwRgHgnF0vt9WTNFqshRpza
kM6HlUgXda8C32o57Ol0WuklPA/fNMqYEtNHi3tTrPNewDCzV2icFKN8+Vb3Haqj
bV+QOwO7p0wBZdLHLbDOwuVuPVYVPYoSlX8HWlU+g2qOvVJ7MAquxt8TbNgxGSK/
57WuFJ5+LlpnZIoM9JD2dU8BnQY8bO9JXitok+P+ZnbNEmcLgAIF1ZpJTTq1lJJL
lkxxJ6YvRxSbPQJN00wZjzOzvM4fmBGCl2UgozZyC1DKAryRj2deu++gXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKzoSzRhpqbd7o72Ke9cSsFzlEZMB8GA1UdIwQY
MBaAFHHYP9jav+FLF0zM01s1uAcTM0ulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAt
MDY0ZDdhZGY0YmUzLzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDdlY2YtNGI2Mi00MzY3LTliNTAtMDY0ZDdhZGY0YmUz
LzEvY2RnXzJOcV80VXNYVE16VFd6VzRCeE16UzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZY6F3QW
U4uzNQs6eMBLh4X9FjK2P8GPdkOVFgpaJgXC4gyzkJXITQdP9DZy5vd7y4nXspVk
iHaGLE+IYLFI7szdLhhRNiz/fs1KlT2ZobxHTwGiJ4o1xtcwFAitCoS95lAK4xp0
axM1mNNM9nsM3mH+x8qwkDCXLMK8Er2iLzgCnu6K5sqW59u+QutP/4Xmw/PrNLpF
OWZuhJpCavGr7YpAbrI6i8vcypm1dtsQ4mG1eOd0L6Oou/26r7zrW1/2a1d333cb
rL7NH/DBVOiziIfBWUL/yNdoK4u2nhU8k9+XY/X5y1+tWasjmPHKj21unOus7rVW
bb/jcHhhukYHNw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 13:09:22 2025 by rpki-client