Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
File: CDV_W-4YX8YRVwhtWYVIU2myrNI.mft (raw, json)
Hash identifier: R8s7Zgr/tZsbGU7LjpovBxLwkUTZIPenbbc8oeBcqy4=
Subject key identifier: 44:BE:DF:08:40:BF:B3:B3:AE:4C:F2:88:C8:E7:C7:42:2A:E2:16:E0
Authority key identifier: 08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
Certificate issuer: /CN=08357f5bee185fc61157086d5985485369b2acd2
Certificate serial: 019A21E53D81E917247639852D1E095AB36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
Manifest number: 024E
Signing time: Sun 26 Oct 2025 19:01:02 +0000
Manifest this update: Sun 26 Oct 2025 19:01:02 +0000
Manifest next update: Mon 27 Oct 2025 19:01:02 +0000
Files and hashes: 1: CDV_W-4YX8YRVwhtWYVIU2myrNI.crl (hash: BZfE056bjyVq/QMgyPSEEcz1uAE/npWKi8VkYarF2Q4=)
2: GS5jwDpW5F6JeMWZm8DrRjluOmo.roa (hash: 3mTmFIv5ldZKVDBU/J8PsP8fY0NB4K7z+AUPdiPaiec=)
3: y7o-lUvuIs5VxkfuF0VMDPEaKG8.roa (hash: nsJREZcrWUijQ6/mIyur3A5TZk93qQs68UFsbnGedCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e5:3d:81:e9:17:24:76:39:85:2d:1e:09:5a:b3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08357f5bee185fc61157086d5985485369b2acd2
Validity
Not Before: Oct 26 19:01:02 2025 GMT
Not After : Oct 27 19:01:02 2025 GMT
Subject: CN=44bedf0840bfb3b3ae4cf288c8e7c7422ae216e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3d:2d:a1:c8:30:bf:eb:d9:00:d9:1a:60:9d:
eb:74:92:71:5b:1f:39:ad:7e:e7:65:3b:8b:aa:16:
90:30:f8:ce:31:14:fb:64:4b:88:2e:28:fd:c4:53:
8c:e7:ab:78:54:34:be:3b:4d:e1:36:5f:14:13:e5:
0b:fd:1e:a3:ce:a9:8a:81:53:44:02:42:cb:21:f0:
2a:1d:b8:90:55:19:aa:db:40:80:c4:de:64:10:78:
b2:fe:4d:07:a0:65:b9:22:9e:97:82:76:22:1d:b4:
f0:39:b6:a1:67:4c:24:3e:c8:0c:e4:de:4a:37:e0:
41:39:6c:14:f3:18:43:01:41:7c:c9:c0:e0:59:a5:
85:47:93:c8:47:23:d8:2a:41:98:f9:95:67:1d:02:
93:b3:38:90:28:e7:f2:b3:d1:99:5f:11:48:e7:34:
68:e9:e2:cb:66:fe:67:aa:9b:66:f6:01:7f:a0:6f:
ce:7e:64:53:3b:9d:12:81:10:a3:2a:24:70:27:6b:
05:f8:49:83:c6:8d:96:fd:8e:e1:2d:94:5d:16:03:
b3:d7:8b:cc:ca:95:91:f0:93:3e:0b:ae:04:39:09:
5f:01:d7:37:5b:97:38:55:a3:ee:58:a2:c2:cc:92:
06:92:70:50:60:6d:38:58:b7:f7:0b:a3:f8:24:28:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BE:DF:08:40:BF:B3:B3:AE:4C:F2:88:C8:E7:C7:42:2A:E2:16:E0
X509v3 Authority Key Identifier:
keyid:08:35:7F:5B:EE:18:5F:C6:11:57:08:6D:59:85:48:53:69:B2:AC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDV_W-4YX8YRVwhtWYVIU2myrNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dcff3a-8d3d-47ce-a0e4-2f49efc5ccb0/1/CDV_W-4YX8YRVwhtWYVIU2myrNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:18:37:02:3c:07:28:6a:dd:85:d0:69:70:26:1d:ca:8d:6f:
a2:f8:14:58:b7:19:d9:41:84:f8:e4:17:64:b1:bb:f7:9e:b6:
02:86:ce:fa:8a:e9:91:7a:23:1d:00:67:b0:0b:2e:2e:7a:1f:
91:d0:f1:ab:e4:ba:d9:35:07:9e:ef:c6:5f:3c:36:fa:8d:8a:
8c:88:8a:d5:37:a5:76:33:fb:97:cd:45:f5:4f:94:93:2e:2c:
82:89:b8:f2:4e:e3:22:99:2b:58:b6:6e:42:ab:9b:9b:ca:89:
8f:b6:2e:3d:27:6b:ea:9e:03:1b:e6:c3:57:a9:39:3a:3e:b7:
0b:51:92:a1:e4:b6:6d:5f:d3:dd:40:c1:86:8e:86:a4:07:90:
07:dd:f6:6e:be:75:3e:61:3e:06:17:11:e8:68:51:58:81:a0:
ea:be:45:4e:5a:80:f9:9e:64:c0:a7:92:ba:2d:3e:20:dd:57:
88:e1:ca:69:ea:45:7b:b0:3f:75:61:51:b3:20:08:e1:a2:d8:
bf:17:6a:87:29:27:b5:0a:b3:55:5e:52:86:f5:b5:d1:3d:bd:
4b:31:98:70:ff:70:09:cd:cb:19:3e:53:08:8f:0a:1c:4d:b4:
a6:b5:44:bf:62:a8:eb:f0:d0:bc:fa:4f:cb:25:76:ca:b1:64:
fe:74:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:22:05 2025 by rpki-client