Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: xIfstbYUvzj10cMSklZjT9eWsgkG+eqdPBJ6kfhhWH0=
Subject key identifier: CA:FF:5C:1A:87:92:D8:C0:D6:89:9A:1F:FB:8A:DD:57:87:D2:5A:40
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 0198941219E636E7B71BEEF2FC0B66F8C35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 0180
Signing time: Sun 10 Aug 2025 13:01:10 +0000
Manifest this update: Sun 10 Aug 2025 13:01:10 +0000
Manifest next update: Mon 11 Aug 2025 13:01:10 +0000
Files and hashes: 1: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: C91zdnL+pUJ0HhrWLJ2FmpR+C4TddioPAzEUxSQNrls=)
2: GS5jwDpW5F6JeMWZm8DrRjluOmo.roa (hash: 3mTmFIv5ldZKVDBU/J8PsP8fY0NB4K7z+AUPdiPaiec=)
3: y7o-lUvuIs5VxkfuF0VMDPEaKG8.roa (hash: nsJREZcrWUijQ6/mIyur3A5TZk93qQs68UFsbnGedCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:12:19:e6:36:e7:b7:1b:ee:f2:fc:0b:66:f8:c3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Aug 10 13:01:10 2025 GMT
Not After : Aug 11 13:01:10 2025 GMT
Subject: CN=caff5c1a8792d8c0d6899a1ffb8add5787d25a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:3c:ff:60:89:d8:57:a2:24:8e:76:e8:5c:
75:60:71:53:65:9b:00:f0:57:19:01:9a:d6:33:01:
a5:cf:84:e8:98:f3:26:89:38:e3:15:41:5f:12:7a:
aa:43:3c:cc:d6:20:02:af:bf:fe:e5:58:83:a8:e4:
4f:50:b4:d3:c3:0c:5c:42:08:af:5d:d0:43:fb:07:
9b:17:6a:43:b9:31:a1:dd:3a:73:3e:91:60:1a:2d:
bd:ab:82:4d:ac:a4:28:8f:79:1b:ea:3e:8d:26:c2:
0c:7e:b7:8c:db:b6:92:fd:37:a3:04:8d:f8:7b:32:
87:b3:76:0e:5a:b6:f4:ea:06:cf:22:fe:72:ab:dd:
15:4d:ac:36:85:4b:f8:23:cf:13:d6:59:71:71:f8:
15:d6:84:d7:43:fa:a9:4e:05:55:01:af:7b:10:72:
10:07:39:65:f6:30:56:f7:da:38:24:c7:56:ff:f0:
52:ce:17:18:7f:71:4d:d9:e6:63:a8:d1:d1:e1:21:
31:cc:29:10:32:5f:c3:7e:b5:42:68:4a:df:31:36:
3b:16:9d:d3:5f:b6:88:4c:fe:ea:d3:27:16:77:d7:
cf:4c:28:5f:c5:47:49:8f:c5:e8:75:9c:4a:07:15:
f1:c8:23:12:1c:8c:00:9c:9f:4f:da:57:ba:c9:17:
96:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FF:5C:1A:87:92:D8:C0:D6:89:9A:1F:FB:8A:DD:57:87:D2:5A:40
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:7a:ca:02:f8:3f:d0:76:8a:fe:b8:26:56:46:77:a2:19:1c:
73:40:60:32:fd:b9:8e:be:eb:6d:4d:f5:34:0e:20:bf:e3:e8:
ef:86:b2:13:2c:d2:a5:bb:eb:58:ea:bb:14:14:6f:10:86:9e:
aa:c9:90:c8:a7:f3:13:9e:6d:66:3a:dc:d4:7c:a9:ed:5d:dd:
b9:bd:fa:91:23:b5:7d:8a:9b:93:ab:ac:69:42:a1:aa:df:12:
89:44:ec:48:b0:b9:d1:91:4c:d0:4b:06:36:46:dc:a5:13:de:
85:30:51:cd:4d:17:b2:3a:1c:b1:79:ae:77:f0:f8:1d:15:ff:
4d:95:93:06:fe:a4:a7:e8:d8:27:27:e7:f8:76:ed:4b:66:e0:
60:c9:79:61:93:5c:e7:df:93:cd:c7:1a:2c:2f:fb:c6:02:a0:
c0:f3:1f:e2:1a:06:09:a5:10:c4:da:f4:aa:a2:91:b7:3f:41:
8a:5e:96:e2:a9:2a:ee:1c:ac:f5:b6:4e:d5:d7:c9:cb:b9:e0:
db:bc:31:f6:bb:ab:38:6b:36:68:06:5a:e9:9f:c1:b5:11:9c:
60:2f:a6:97:13:f9:c3:b2:5a:20:b4:99:9b:ca:00:af:3a:42:
95:97:f3:6b:38:d9:73:1f:17:04:5b:cf:1f:20:8d:a9:c2:d9:
d1:c3:ba:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:12:08 2025 by rpki-client