Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: Fve6fsiKJlduYQ/gCK4gnBvqFTxk2jLcmzxmtHYKNJU=
Subject key identifier: C2:36:12:E8:F5:9B:96:9B:D8:2F:4F:6C:8B:E5:41:F6:68:B2:E4:A1
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 0197771C686CC2B380F47472D8FFE888D85D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: EC
Signing time: Mon 16 Jun 2025 05:00:39 +0000
Manifest this update: Mon 16 Jun 2025 05:00:39 +0000
Manifest next update: Tue 17 Jun 2025 05:00:39 +0000
Files and hashes: 1: 5vi5HEIa24OLVlu1NLlqMeqNBBA.roa (hash: t4iwwwtMrdc2NWlcEkOyxsuPUKCMIObH0+SES3zZ1EI=)
2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: zgZ+6N6EaPnq7jJljmDA9SelHwSQgJ+HQ5jphKBDB2U=)
3: y7o-lUvuIs5VxkfuF0VMDPEaKG8.roa (hash: nsJREZcrWUijQ6/mIyur3A5TZk93qQs68UFsbnGedCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:1c:68:6c:c2:b3:80:f4:74:72:d8:ff:e8:88:d8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Jun 16 05:00:39 2025 GMT
Not After : Jun 17 05:00:39 2025 GMT
Subject: CN=c23612e8f59b969bd82f4f6c8be541f668b2e4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:d3:63:06:d6:78:15:80:b9:29:e1:c1:a3:
3d:38:79:cd:78:bf:90:98:9d:a5:ef:fa:b9:f2:c3:
75:23:70:9c:33:5a:80:ef:81:d7:58:8e:50:38:1d:
74:16:cf:f0:81:d6:09:56:3b:5a:8c:5e:66:51:e5:
0b:1d:f8:c2:e4:8f:e5:9b:6b:ba:0e:0e:af:1d:e0:
0e:0b:be:0d:79:df:53:bf:fa:3b:a5:ca:d3:f2:3a:
87:a5:d4:d5:4c:a1:d6:20:44:c5:f6:22:57:b8:ec:
29:da:78:c7:54:4d:ab:7e:50:c1:74:bc:6e:16:b4:
6e:b7:c6:12:aa:e8:e2:16:9c:3d:8c:90:5d:1a:88:
af:99:1f:15:aa:84:85:0a:4f:8e:7e:27:2a:ad:a7:
b4:bf:dd:52:26:84:3f:d3:8e:c1:6f:83:7c:12:e1:
84:84:31:61:bf:e6:55:d7:81:b8:f7:cf:3b:b9:77:
1a:cb:02:7b:7a:e4:97:bb:dc:2f:35:30:83:03:c8:
48:1a:18:76:fd:10:46:a2:6e:91:54:94:e6:71:c7:
52:9f:67:b9:72:68:0c:88:d3:9e:99:8e:80:a0:7e:
ee:70:62:47:1d:e4:e8:2b:a6:a9:8e:f6:8f:5e:24:
a9:9d:28:6f:ec:35:32:2d:7d:cd:44:8d:76:51:67:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:36:12:E8:F5:9B:96:9B:D8:2F:4F:6C:8B:E5:41:F6:68:B2:E4:A1
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:fd:b2:e5:de:89:07:d0:b5:20:0f:c2:06:62:c5:e6:19:3d:
f6:ca:4b:6c:36:f9:8a:a6:60:f7:55:d5:35:5b:f9:00:98:06:
0c:81:02:cb:d6:2b:07:e1:7e:0f:5f:46:58:fe:23:1a:91:dc:
38:db:ba:89:1a:0c:4d:4e:f4:04:5c:fd:05:e3:96:d0:c0:d9:
ca:b4:92:5d:a5:c3:78:12:66:88:de:08:22:d9:d3:13:56:47:
5d:7d:ae:a5:b3:8c:e5:bc:3e:c6:0f:0e:c0:a7:1e:b8:19:1a:
39:df:24:9e:51:ea:bf:d6:5d:19:1b:76:22:4e:5d:b6:f1:a7:
57:cd:bc:7f:90:53:b5:fa:70:73:af:34:58:3a:b1:11:1c:22:
55:25:b8:b0:d4:8a:99:84:df:83:23:01:3b:9e:28:94:7b:dc:
f0:a5:29:d1:7d:f3:f5:28:51:a0:e9:5c:6c:26:ce:42:5b:2e:
93:9a:e9:4e:42:6a:31:b2:93:3c:0b:1d:6c:e5:a0:bd:9b:01:
a3:d2:70:43:9f:24:a3:a2:2e:4d:d4:33:67:e5:bb:a5:77:ab:
d6:1a:a2:95:3a:c5:cd:fb:63:f4:65:d1:99:44:15:3d:cd:76:
5b:d6:7f:43:e0:0c:42:0d:11:25:96:e4:09:10:88:07:ba:cd:
1a:fa:fa:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:15:32 2025 by rpki-client