Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: l1bybSRie+ExYZdPDlmzOJ/RpqgjELq/G1UaSnttErI=
Subject key identifier: C7:E3:41:04:E1:A4:BC:67:0E:4E:83:E8:0F:46:93:36:61:F4:B3:E8
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 0196BBC8FD2A5796F4075A894755718A7327
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 8B
Signing time: Sat 10 May 2025 20:00:33 +0000
Manifest this update: Sat 10 May 2025 20:00:33 +0000
Manifest next update: Sun 11 May 2025 20:00:33 +0000
Files and hashes: 1: 5vi5HEIa24OLVlu1NLlqMeqNBBA.roa (hash: t4iwwwtMrdc2NWlcEkOyxsuPUKCMIObH0+SES3zZ1EI=)
2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: BJiSvcqBHdSMpSeqUEp0oI6Cp9u72LlEHu4nh0+3/mw=)
3: y7o-lUvuIs5VxkfuF0VMDPEaKG8.roa (hash: nsJREZcrWUijQ6/mIyur3A5TZk93qQs68UFsbnGedCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 20:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:c8:fd:2a:57:96:f4:07:5a:89:47:55:71:8a:73:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: May 10 20:00:33 2025 GMT
Not After : May 11 20:00:33 2025 GMT
Subject: CN=c7e34104e1a4bc670e4e83e80f46933661f4b3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:34:04:aa:0a:3f:1d:cc:bc:aa:2a:23:23:f7:
6a:a4:64:e9:80:d3:6d:e9:1a:28:46:62:86:87:6f:
4c:b9:f9:62:c4:b1:ee:85:e9:e8:6f:42:d7:cb:19:
fe:b9:c6:f7:cd:a4:48:7f:14:aa:62:2a:01:37:91:
33:d0:2c:9a:72:02:2b:4d:e7:da:67:06:47:2d:a3:
51:43:5a:34:31:fc:aa:38:e9:db:81:8e:95:b9:96:
31:71:3d:90:d0:80:17:fd:f9:c4:6d:ed:16:c1:f5:
1e:bc:93:2a:34:76:f5:58:e3:d3:6e:9e:b0:e8:55:
c3:3e:7b:f5:9f:8c:0d:0f:75:8e:e5:52:08:61:d0:
c8:f8:50:80:1d:b5:c9:85:a6:8c:7e:5a:d4:43:4b:
62:d2:59:62:46:93:c6:8c:6c:9f:af:ad:da:15:e8:
f2:eb:ec:37:5a:7c:37:0f:3f:be:61:37:b3:06:a8:
86:75:d7:bb:e8:bc:bc:09:40:35:86:bb:f9:d6:cc:
68:95:97:d5:aa:ec:4c:1b:ab:47:57:70:34:60:a3:
fd:69:9e:59:65:3c:de:ee:f3:36:1d:64:99:1b:4b:
d9:e7:2f:b6:c3:b2:36:1f:0d:f3:fa:b3:86:1f:68:
63:0f:bf:fe:a0:2f:00:52:a0:c1:e3:12:17:ad:d7:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E3:41:04:E1:A4:BC:67:0E:4E:83:E8:0F:46:93:36:61:F4:B3:E8
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:68:6f:dc:55:7e:f8:ed:9d:32:1c:13:8b:18:e8:a0:64:42:
a8:7d:0b:ed:76:90:38:76:f7:37:3a:d1:91:3f:e1:9b:46:ce:
ee:5a:d7:fe:e4:9a:40:7d:04:62:91:61:98:8c:cf:88:cd:fd:
56:90:42:7b:ea:9d:b9:40:b8:7f:d7:7c:d3:7c:80:6f:c7:27:
dc:aa:f0:12:5b:4d:92:96:28:21:a6:c3:f5:c3:cc:f8:f0:05:
8d:85:ff:91:16:90:a5:5a:47:b6:b4:77:c0:fa:74:e3:54:33:
19:4c:9e:cb:92:a5:b2:e9:32:41:c9:d4:f7:0c:11:9c:ea:3f:
ab:73:57:4b:ad:d8:94:4a:85:02:5e:92:96:8f:c9:89:ce:35:
39:1f:a5:54:31:5f:ed:8d:fe:c3:66:e8:14:07:f3:a8:29:89:
41:de:78:2f:c0:e4:24:16:8c:e2:35:77:cb:4b:f0:78:b6:87:
99:60:9a:d9:87:02:c3:62:64:2c:f0:08:f9:25:31:9f:fc:11:
18:4c:84:d5:f0:81:75:32:42:6b:d3:37:88:ca:23:d4:15:b1:
ec:9c:f7:2f:12:ea:89:12:a7:df:81:65:77:b4:6d:ec:e4:14:
d6:29:59:1b:1a:1f:49:72:07:5e:40:87:1a:75:5e:a1:90:b8:
e0:24:19:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 05:24:49 2025 by rpki-client