Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
File:                     VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft (raw, json)
Hash identifier:          5UvQ2lcJlpF+Q1Br1CxgDTpyN8r7FBlFhpfwwP3deUo=
Subject key identifier:   24:83:BD:91:65:90:EB:EE:D1:E5:9E:15:CB:E2:65:76:F7:D0:DE:86
Authority key identifier: 54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
Certificate issuer:       /CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Certificate serial:       019769CEAE6365A55D0831DE6D0A20C199B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
Manifest number:          0C85
Signing time:             Fri 13 Jun 2025 15:00:42 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:42 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:42 +0000
Files and hashes:         1: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl (hash: UM4WL4FF7El8bNDR75uuqagKBmgv1C+5x5ciRDwNHWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:ae:63:65:a5:5d:08:31:de:6d:0a:20:c1:99:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
        Validity
            Not Before: Jun 13 15:00:42 2025 GMT
            Not After : Jun 14 15:00:42 2025 GMT
        Subject: CN=2483bd916590ebeed1e59e15cbe26576f7d0de86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:e8:79:15:63:54:37:2f:88:ca:cb:b1:40:
                    30:06:29:bb:84:80:58:7c:e5:7d:87:88:6e:4a:19:
                    56:d1:28:dd:0a:ab:ee:45:2c:52:26:56:7f:ca:fe:
                    cd:f9:5f:c3:ab:25:e9:44:8f:cf:23:98:8d:4e:3c:
                    a6:49:63:18:59:b0:16:37:19:e7:b5:89:6c:39:62:
                    5f:f2:57:48:4a:ec:86:dc:09:d3:5d:ed:34:a9:14:
                    a9:d4:2c:5f:d3:d9:e3:70:13:77:b3:42:d4:54:ef:
                    77:1a:f7:ad:00:98:cc:fb:4f:db:63:81:a7:07:d7:
                    39:ff:f3:24:50:5c:ca:0e:66:72:d0:30:a3:83:d6:
                    ba:70:ab:82:2e:f6:7a:d5:c7:d9:39:42:21:89:e8:
                    28:74:26:2c:88:d1:b5:c6:88:0c:1e:53:ad:f4:7b:
                    52:b6:2d:63:e4:d8:db:71:f9:ed:e8:0f:eb:cd:d1:
                    1b:80:22:2e:43:81:38:36:d7:d9:73:d4:08:74:4d:
                    a8:09:6c:97:4d:79:74:ec:33:cc:41:48:97:8e:2c:
                    fb:11:0b:e7:f0:c9:45:99:da:73:35:96:4d:22:f1:
                    71:1c:35:02:02:bf:e4:8b:ca:79:80:1f:5d:39:40:
                    67:11:27:23:c3:16:4b:79:2c:1b:e5:3b:d7:4e:1a:
                    a0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:83:BD:91:65:90:EB:EE:D1:E5:9E:15:CB:E2:65:76:F7:D0:DE:86
            X509v3 Authority Key Identifier:
                keyid:54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3f:01:a9:b2:ba:40:84:fb:4b:bc:fb:a7:91:8c:9e:f9:1e:
         a8:62:4c:9b:d0:7a:09:62:8f:01:6a:71:fa:53:48:f3:23:a0:
         de:95:83:40:3b:62:b4:5f:52:20:3b:92:a2:e7:f4:85:7c:55:
         26:83:b4:1b:2d:62:3a:65:03:d0:7b:cb:ff:ab:70:90:30:6c:
         e7:b8:15:d6:b1:80:10:f2:32:51:7a:27:07:66:e3:ef:cd:b4:
         cb:ab:7b:37:3b:d7:9f:3f:f1:3c:e4:01:79:f7:49:a3:0b:ee:
         8b:08:8d:d2:c5:e5:ea:64:a6:5d:9e:29:37:6e:a9:eb:bd:e8:
         df:3f:3c:a7:02:f0:05:ab:52:7e:fb:74:71:e1:25:76:1e:5d:
         43:7c:64:32:23:fc:8b:73:14:e0:0b:7d:66:df:6c:c7:0a:0b:
         35:d4:d9:52:86:27:94:96:00:e8:b8:32:a6:3b:8d:ad:67:c1:
         e9:ac:b9:58:38:63:f8:79:25:e0:7b:75:30:99:e9:0c:0e:c0:
         c6:a4:ac:fe:05:ae:8d:5d:53:c4:b4:f4:7d:bc:2d:10:0b:f9:
         a0:a3:1b:4c:8c:26:87:ab:5f:67:57:67:08:46:c4:fe:dc:42:
         08:ad:2a:76:a8:9d:16:ca:ef:c8:42:18:d4:d8:e4:45:77:3e:
         4e:3b:91:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:22 2025 by rpki-client