Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: tj1ZKKHQL9oRUF/eDOMcDEZOdOi3DcKLanUshH5vaJ4=
Subject key identifier: F3:7A:B0:30:4F:AC:96:5F:CC:4B:94:60:67:3B:2C:89:62:CF:71:3D
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 0199FB462CE49A3B1A3ED999C4CB8B65AE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 023A
Signing time: Sun 19 Oct 2025 07:01:44 +0000
Manifest this update: Sun 19 Oct 2025 07:01:44 +0000
Manifest next update: Mon 20 Oct 2025 07:01:44 +0000
Files and hashes: 1: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: bfMdmI9fkTM0AF9Csbq0WxbVg8A64N6dFzNqJZT4Grc=)
2: GS5jwDpW5F6JeMWZm8DrRjluOmo.roa (hash: 3mTmFIv5ldZKVDBU/J8PsP8fY0NB4K7z+AUPdiPaiec=)
3: y7o-lUvuIs5VxkfuF0VMDPEaKG8.roa (hash: nsJREZcrWUijQ6/mIyur3A5TZk93qQs68UFsbnGedCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:2c:e4:9a:3b:1a:3e:d9:99:c4:cb:8b:65:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Oct 19 07:01:44 2025 GMT
Not After : Oct 20 07:01:44 2025 GMT
Subject: CN=f37ab0304fac965fcc4b9460673b2c8962cf713d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0f:e2:1b:9a:86:93:4e:7e:8d:82:d9:ee:be:
a3:c0:80:e3:8a:21:d4:a5:84:18:2b:6a:4c:78:68:
13:77:06:f1:80:1f:a1:bb:dd:58:b7:c8:64:c6:ea:
1e:e5:02:cc:83:5c:ca:d8:f2:b8:11:4e:db:40:2e:
12:46:a8:e0:f6:66:09:5c:78:cb:cf:4a:91:5c:d0:
61:26:2a:eb:f9:08:33:79:9c:53:4a:46:c2:93:c7:
ac:4a:7b:1b:93:64:4a:e1:ee:8e:bd:2a:7e:d1:f4:
72:17:b7:dc:39:12:ef:ad:a6:85:4d:f5:c3:7f:4d:
15:0e:f6:f1:7a:a7:e2:0e:0b:a8:34:7e:b2:f5:b8:
4d:36:fc:f3:f8:ad:03:a7:95:c4:17:ee:5c:fa:49:
10:a4:a5:11:2a:89:7e:dd:e7:4d:d9:bb:0c:84:fa:
4d:b2:77:50:2e:3c:23:23:5a:39:58:20:b4:62:fb:
d1:bc:1a:f2:21:75:23:46:72:ab:db:63:84:31:75:
f3:19:5c:17:3a:44:ae:05:45:13:4d:55:50:87:5b:
28:3f:0d:3f:09:8b:c2:77:7e:81:7d:36:29:9a:79:
3d:34:cc:d0:21:3a:29:51:ce:7f:29:f3:84:6a:fb:
7a:c7:07:39:27:e8:16:1c:73:b5:b8:95:ff:fa:99:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7A:B0:30:4F:AC:96:5F:CC:4B:94:60:67:3B:2C:89:62:CF:71:3D
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:02:79:fc:df:59:0a:74:1e:65:62:f5:23:72:3d:66:41:60:
b5:d9:26:ec:64:59:dd:65:dd:54:2a:66:50:0d:20:49:fe:25:
5d:6a:ff:a8:b6:c1:c3:76:fe:51:a3:af:b3:29:35:51:30:06:
c5:0f:df:d3:9a:03:26:57:fe:d5:97:02:e5:d8:09:0f:c8:48:
ff:ef:d6:17:32:88:d3:c5:1c:a3:1f:20:7c:e5:f9:57:81:fc:
fd:e5:b7:2d:6c:9f:80:fc:54:b5:93:1c:7c:d0:a3:5b:35:15:
a0:e7:54:19:66:11:6b:4e:d0:d4:3b:c3:f8:d8:0e:de:43:ec:
ee:83:5b:71:12:41:53:d1:52:05:75:d1:91:c2:56:c1:11:28:
e1:a0:11:77:15:70:14:fa:07:b7:d1:f6:9b:e6:90:e3:34:c6:
65:90:3d:9a:38:4e:56:0c:1c:32:a7:d6:13:e3:3d:d0:e1:13:
42:b7:bb:3a:8a:aa:f6:6c:0c:4a:9e:c2:46:ff:f8:6f:e6:71:
98:db:43:03:3f:4d:65:66:90:f4:08:74:90:24:f0:9c:7f:85:
b6:c3:1d:90:21:de:af:22:ef:58:a2:2a:a2:a9:1b:67:a5:5e:
99:4d:76:0e:ad:54:67:f7:d6:07:55:af:67:4d:2f:68:78:76:
f7:d1:77:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:37 2025 by rpki-client