Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: 0RFiZmWXPDcxzuWIQNxt1NzdEimhA0pw//vXrbP23jQ=
Subject key identifier: 8A:0B:BC:F7:78:58:6D:E2:0E:9F:4B:AA:4F:44:D9:F1:9A:A9:BA:36
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 0197B6D747C44184C4D985D27EDF9D962E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 010D
Signing time: Sat 28 Jun 2025 14:00:51 +0000
Manifest this update: Sat 28 Jun 2025 14:00:51 +0000
Manifest next update: Sun 29 Jun 2025 14:00:51 +0000
Files and hashes: 1: 5vi5HEIa24OLVlu1NLlqMeqNBBA.roa (hash: t4iwwwtMrdc2NWlcEkOyxsuPUKCMIObH0+SES3zZ1EI=)
2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: E2pdGJt2gpJrjpzyau1QKuBJj9nKSGFFZuz+A1MzzZc=)
3: y7o-lUvuIs5VxkfuF0VMDPEaKG8.roa (hash: nsJREZcrWUijQ6/mIyur3A5TZk93qQs68UFsbnGedCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:47:c4:41:84:c4:d9:85:d2:7e:df:9d:96:2e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Jun 28 14:00:51 2025 GMT
Not After : Jun 29 14:00:51 2025 GMT
Subject: CN=8a0bbcf778586de20e9f4baa4f44d9f19aa9ba36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:4a:df:cd:d8:3d:d5:5f:52:d3:09:47:72:
41:c0:13:d6:41:8a:f4:f5:cc:fb:c9:c8:de:bc:fd:
4b:88:73:48:d3:da:ac:eb:8b:04:30:af:8e:a5:72:
fd:5e:ab:cb:81:f9:57:f2:c7:45:47:48:0c:2d:8d:
67:bf:88:4f:91:42:f9:0a:74:1e:e5:f8:00:e5:49:
76:43:63:5e:d9:d0:a7:91:1d:75:8f:d1:40:d0:63:
d2:81:23:88:4f:c5:ad:38:9f:76:8c:42:20:5f:5f:
b6:58:b3:bb:91:e1:13:95:a4:f7:da:99:a0:5b:32:
0b:e1:88:8c:4a:80:6a:23:4a:3b:93:9e:e4:33:ab:
45:63:85:0f:5e:8d:cf:26:71:0b:73:e7:b2:13:c4:
db:ed:3e:b4:19:92:59:46:77:f8:e0:da:0d:3a:b2:
b4:10:e4:df:90:fe:a0:58:b9:73:d0:cd:16:3e:8c:
41:fc:ce:f2:9b:6d:6b:38:66:14:74:7d:47:2b:48:
7f:48:db:43:7b:cf:7e:0a:d1:35:11:8e:8d:5e:5e:
3a:5f:94:bc:f0:b1:c9:c5:c1:09:67:14:90:b0:88:
8e:f5:e1:74:52:2f:c4:f5:c4:a3:b7:c1:24:ca:62:
b7:9b:d5:c5:f8:19:ca:7c:26:0b:1b:ea:96:c2:ed:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0B:BC:F7:78:58:6D:E2:0E:9F:4B:AA:4F:44:D9:F1:9A:A9:BA:36
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ce:28:08:53:3d:c4:bf:89:be:05:a4:26:f0:53:5a:5f:e4:
7b:08:6c:76:70:ab:ee:0f:4f:5b:88:7c:96:62:f8:db:34:78:
f2:59:7b:6e:67:a4:13:58:d4:bc:2e:b5:5a:2b:aa:01:0f:9d:
a9:f9:0e:d9:c9:d1:f3:c1:20:bd:58:4e:44:fb:50:8c:3d:b4:
09:d4:a8:e5:92:44:eb:0c:a8:43:20:a3:fb:1c:1e:dc:96:75:
fa:02:e4:83:14:5d:bb:1e:59:68:b5:c8:f3:9a:7e:8a:0c:a3:
53:1e:3c:5e:10:fc:ad:22:43:cf:64:57:f9:7b:58:18:4c:32:
d8:6f:bb:dc:5b:bb:01:58:43:d7:6f:4c:6a:42:e7:89:0a:a0:
a8:62:92:45:18:50:a8:8c:a6:7f:e4:30:a5:c3:f6:0b:ff:07:
6b:45:49:8c:f9:53:07:6c:21:b7:ff:ee:7c:80:e0:5a:c0:b1:
b3:82:ec:c9:31:af:41:63:02:d8:a0:66:9a:a1:76:c5:68:be:
b7:55:4a:f3:8b:97:2c:17:42:b5:4c:6b:07:7c:76:0e:bb:5a:
00:03:d8:20:f1:a7:0b:84:26:92:26:98:e8:22:ee:26:a8:06:
ef:e5:6d:6b:50:e7:9b:ed:26:ad:d1:3f:62:cd:84:75:4d:60:
8d:4c:31:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:42 2025 by rpki-client