Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: Ued059CNOxDdkfyE6f9OP7mWPprb6ZCcJQ4mOc+1fOM=
Subject key identifier: B5:F2:44:A0:C3:EB:BE:BE:00:41:F2:A9:81:81:FC:7C:18:A4:DD:7A
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 019A503E1DDB738E6BA56FE7D5F5AB23A7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 0266
Signing time: Tue 04 Nov 2025 19:00:39 +0000
Manifest this update: Tue 04 Nov 2025 19:00:39 +0000
Manifest next update: Wed 05 Nov 2025 19:00:39 +0000
Files and hashes: 1: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: VD+BZfErW++aRpNSKhyYdyndUDj5xV1KDy85O/nUGB4=)
2: GS5jwDpW5F6JeMWZm8DrRjluOmo.roa (hash: 3mTmFIv5ldZKVDBU/J8PsP8fY0NB4K7z+AUPdiPaiec=)
3: y7o-lUvuIs5VxkfuF0VMDPEaKG8.roa (hash: nsJREZcrWUijQ6/mIyur3A5TZk93qQs68UFsbnGedCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:1d:db:73:8e:6b:a5:6f:e7:d5:f5:ab:23:a7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Nov 4 19:00:39 2025 GMT
Not After : Nov 5 19:00:39 2025 GMT
Subject: CN=b5f244a0c3ebbebe0041f2a98181fc7c18a4dd7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8b:88:1b:50:c0:a7:91:c6:89:c3:7d:86:80:
6b:df:f7:1c:2d:bb:d2:ba:1f:f8:4a:d7:0b:02:49:
93:5b:f2:60:2d:f9:79:05:89:e2:74:e1:f2:b3:ab:
80:be:ca:5b:f2:b4:cd:ea:95:ba:be:04:91:45:36:
71:a9:59:0f:99:77:66:0c:2b:e2:3a:32:e7:b5:35:
4b:9e:b0:b5:4a:08:c3:4f:3a:1b:f4:85:24:33:bd:
a2:f7:f6:e8:f7:1a:58:a7:fd:d4:7d:00:36:b7:1a:
4e:6e:f8:e8:8c:15:f5:1d:63:6e:eb:52:14:7e:b9:
c6:60:eb:b3:fe:a3:5f:3d:24:75:f0:c8:9b:81:4e:
8d:68:82:4f:a2:76:31:d9:95:9a:7f:9c:6b:af:30:
69:79:a2:8b:02:a2:c5:8f:03:0c:7d:52:c8:eb:06:
14:a7:03:b0:e8:81:af:45:eb:4e:fb:17:86:e0:04:
41:79:b4:80:94:88:23:f7:51:24:8c:1d:02:75:43:
ee:7a:06:91:72:a1:00:39:5a:9c:78:fa:49:b1:9a:
c4:a0:f2:1d:53:1b:2f:38:3b:af:fe:7b:27:12:1e:
ba:c2:02:de:83:17:91:de:db:c9:2a:e3:eb:cc:68:
14:fc:23:35:7e:98:82:08:b8:17:98:79:62:a7:d3:
51:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F2:44:A0:C3:EB:BE:BE:00:41:F2:A9:81:81:FC:7C:18:A4:DD:7A
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3b:04:64:4a:90:8b:7d:8c:7d:2c:bf:c8:1c:c2:0d:5f:d1:
16:9f:d6:02:79:b2:81:aa:56:5f:01:c0:b9:f0:d7:6d:23:49:
90:c0:bb:20:56:91:e4:e4:2d:a7:9c:74:03:30:20:64:f0:63:
53:05:35:36:7c:14:6a:cc:07:d0:e1:1f:6f:b9:7c:cc:c6:3c:
d7:fd:03:64:e0:fa:b7:cf:b1:b2:7f:3d:e6:d9:fc:56:24:1d:
aa:e6:c0:9e:50:b7:70:c5:ac:2a:b8:22:38:ad:a2:24:72:2c:
da:1e:71:75:48:0a:12:51:f9:2a:9d:6b:50:9b:6d:ad:6f:1b:
31:a7:ba:f5:e1:ff:e1:d8:6b:b8:3c:e7:ab:cf:26:71:eb:38:
ed:68:30:40:f5:95:28:32:71:07:df:59:58:6d:c8:94:e1:72:
27:3e:79:18:75:eb:9d:26:a7:76:f3:aa:98:8a:0c:b7:b3:c4:
3a:01:6e:da:4f:ae:8d:8f:d7:05:85:7d:b8:e9:60:81:01:cb:
94:bc:af:78:8c:67:95:dd:2e:bd:7d:32:82:10:ee:4c:b4:78:
f8:a4:9e:ec:94:7a:12:2b:53:7a:c2:9f:33:41:a2:8a:bf:df:
04:29:e2:60:f2:67:e6:58:13:10:56:9b:1e:6b:7b:7e:77:f9:
5e:29:78:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:41:30 2025 by rpki-client