Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: Z0kkMi13VPu1rXNzcg0B4UQ3d+1E8m6UsnKjSEZEHUA=
Subject key identifier: D2:6E:05:36:CE:D5:CE:19:3A:18:10:2D:4B:1F:EA:A5:72:C1:77:52
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 019687A446A547280C964D145576D8ACF5C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 70
Signing time: Wed 30 Apr 2025 17:00:12 +0000
Manifest this update: Wed 30 Apr 2025 17:00:12 +0000
Manifest next update: Thu 01 May 2025 17:00:12 +0000
Files and hashes: 1: 5vi5HEIa24OLVlu1NLlqMeqNBBA.roa (hash: t4iwwwtMrdc2NWlcEkOyxsuPUKCMIObH0+SES3zZ1EI=)
2: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: lDqmqtYqbTnFWU/1xGNrW0RKYcbuZPxRjqmZZolwaOg=)
3: y7o-lUvuIs5VxkfuF0VMDPEaKG8.roa (hash: nsJREZcrWUijQ6/mIyur3A5TZk93qQs68UFsbnGedCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:a4:46:a5:47:28:0c:96:4d:14:55:76:d8:ac:f5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Apr 30 17:00:12 2025 GMT
Not After : May 1 17:00:12 2025 GMT
Subject: CN=d26e0536ced5ce193a18102d4b1feaa572c17752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:b3:57:7c:05:42:c3:86:28:3e:c7:13:0a:
60:27:59:2e:39:2c:50:47:4d:a7:ed:e5:77:0c:3f:
00:a6:fb:a7:f3:59:d2:56:8e:3a:97:64:a7:c6:76:
87:de:bb:a3:15:91:dd:46:3d:7c:30:86:ad:48:47:
9d:be:7c:e0:34:37:46:a5:28:a0:b5:ae:a1:ad:0a:
2c:29:53:a7:ef:42:d5:8e:93:30:70:45:bf:30:f6:
cb:b0:c7:1c:99:6d:7e:32:1e:7b:77:35:25:0a:8b:
c1:f5:43:fc:aa:f0:e3:cd:c7:b2:6b:b7:a3:ce:08:
c8:af:89:b7:a8:60:b4:39:1c:4d:fb:d2:c1:c0:3b:
52:27:fe:c7:68:03:2d:f8:ff:9b:8a:32:d3:26:fe:
25:aa:ed:3a:6b:2b:b1:06:45:75:d6:20:e9:b9:4b:
c7:07:dd:6c:48:31:3f:fd:8d:ec:45:e0:ad:c7:68:
08:6d:bf:59:c7:5b:de:61:8c:48:21:24:5a:c6:c7:
85:8d:6d:4a:ad:f9:ca:da:88:b1:0b:a3:e4:41:9a:
2e:7f:d3:f7:c4:fd:84:db:41:03:1e:7e:16:d2:eb:
7a:c4:50:ab:25:f4:62:91:cb:99:30:47:4f:40:bc:
a0:a2:2b:02:7a:5f:b2:85:05:6c:1e:61:cd:54:a3:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6E:05:36:CE:D5:CE:19:3A:18:10:2D:4B:1F:EA:A5:72:C1:77:52
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:eb:ec:78:86:c5:fe:a5:2c:33:d4:71:84:2e:b9:d4:cf:1b:
71:00:6a:b4:27:02:92:c5:24:59:9c:07:29:6a:05:18:25:a7:
cd:db:d1:0b:d6:6e:0d:16:cf:89:8c:73:b7:bd:21:e1:e6:f0:
fe:81:71:76:24:1e:fa:4b:5e:73:c5:d4:7c:e5:3a:32:c6:fc:
bc:6a:01:d8:79:ce:f8:2e:fc:fb:ea:fa:75:1b:be:f0:dc:57:
e9:e8:4c:4b:42:cb:ba:1d:90:6c:00:9f:fb:70:6e:c2:e6:93:
a6:1c:a5:b7:bb:a9:5b:0d:1a:f1:3c:10:ce:cc:13:41:79:b2:
29:b5:a7:da:01:41:a2:e6:0a:ad:96:a4:87:68:fe:ce:e8:a7:
4f:36:2f:82:91:2f:fa:61:5b:b7:04:88:93:aa:84:d2:bb:9f:
15:4e:b9:8a:d5:ee:f8:af:ba:7a:51:92:91:14:52:5c:cc:8f:
49:e7:6b:0e:3c:c2:a7:7e:27:63:95:e1:ea:53:ec:ac:46:9d:
84:70:6d:51:9e:68:84:84:f5:75:df:b6:8d:82:20:8d:c7:5a:
99:6a:aa:ea:24:c9:dd:ae:3b:7b:20:79:cc:bc:b0:84:fb:5b:
4f:9b:9f:2c:04:55:ff:44:a4:d0:27:35:fd:64:96:c6:d8:c3:
2f:55:5b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:51:02 2025 by rpki-client