Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
File: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft (raw, json)
Hash identifier: /EISynNuV0+cpvMB1ECkfd1QH9MT6zkCsOiRO6PJAzA=
Subject key identifier: E8:AC:EE:BA:71:B6:82:2E:30:4D:6E:1A:05:32:E7:92:52:63:DE:5E
Authority key identifier: 54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
Certificate issuer: /CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Certificate serial: 0196767A3A354F4708D4961DEA7DBA437CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
Manifest number: 0C07
Signing time: Sun 27 Apr 2025 09:00:43 +0000
Manifest this update: Sun 27 Apr 2025 09:00:43 +0000
Manifest next update: Mon 28 Apr 2025 09:00:43 +0000
Files and hashes: 1: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl (hash: aDQxzhF3e0RTftaHbFj8gEQdPgr0S55MEcBNkMK2GiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:3a:35:4f:47:08:d4:96:1d:ea:7d:ba:43:7c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Validity
Not Before: Apr 27 09:00:43 2025 GMT
Not After : Apr 28 09:00:43 2025 GMT
Subject: CN=e8aceeba71b6822e304d6e1a0532e7925263de5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:cc:00:d0:e1:23:c6:f8:0e:ec:32:f5:3f:
c9:34:b0:aa:b3:a7:a1:19:29:8c:08:6b:0a:40:b1:
0a:31:27:50:9a:4a:6c:e9:11:36:0e:4a:c7:6d:52:
42:64:e3:26:c8:d5:e9:cd:4e:64:20:e2:12:7b:84:
ea:95:08:22:7a:83:98:de:c1:cf:91:ff:07:4b:1c:
43:df:37:23:dc:2f:0c:db:63:d2:ae:6a:62:9b:36:
e0:31:84:70:97:0b:68:0c:c3:3a:77:c0:94:c5:4e:
70:8f:91:af:2b:1d:b1:cf:e2:c4:b7:86:aa:af:ae:
e0:2a:a3:09:3e:33:46:dc:e9:0c:45:a1:e8:23:d7:
37:f6:6b:45:4d:b9:c9:e6:3b:97:ef:3e:70:74:9f:
1c:62:1f:19:52:63:78:99:14:c9:83:c0:63:55:df:
93:ab:29:c9:0d:56:a4:66:88:b7:38:68:88:9e:7d:
1d:f9:09:1a:ec:10:ca:b1:80:91:5d:59:e0:1b:1d:
86:11:fc:d2:0f:e5:a7:e3:7a:bd:53:0b:aa:f2:92:
ee:e2:d6:e1:da:e1:6d:e8:18:83:57:9c:6b:bf:78:
ca:ae:cd:19:ee:a7:ed:1d:23:ea:dd:3a:79:29:4b:
50:c8:cc:58:9b:5f:e1:38:f7:22:79:ad:cf:87:c3:
38:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AC:EE:BA:71:B6:82:2E:30:4D:6E:1A:05:32:E7:92:52:63:DE:5E
X509v3 Authority Key Identifier:
keyid:54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:62:be:14:fe:94:64:5b:18:fa:8c:a6:4d:0a:96:e8:39:8e:
2f:fa:7e:4f:8a:e1:87:59:7e:38:8a:c1:8d:2c:2f:31:40:b8:
4d:d6:cc:84:5e:d6:a3:dc:da:7c:5e:4a:0f:37:d1:be:59:da:
ad:35:de:17:38:38:d6:e9:19:65:98:fa:d3:c5:15:ee:bf:99:
03:a2:56:92:15:09:88:6d:dd:9f:68:17:18:f3:23:b1:bb:86:
02:0d:f2:ed:cf:22:01:98:25:75:13:17:8d:d1:01:79:f5:f3:
e1:66:56:2b:65:56:9e:84:38:28:a7:20:6d:27:23:46:31:0e:
9a:09:27:97:71:7e:9f:81:f6:55:9e:71:e8:05:5e:af:8c:dd:
27:08:8c:8d:07:19:e2:53:7c:60:1a:07:c9:c0:a3:57:0b:1e:
c2:d6:65:ae:a0:66:23:d9:2a:c5:79:7f:25:d5:52:79:1a:19:
d4:52:36:08:87:ba:86:b7:b4:d2:5a:74:ea:ba:d9:32:c0:9d:
a5:b1:ec:a2:ad:80:6b:58:c6:df:da:1e:1b:f1:00:4e:c4:50:
83:88:6f:e4:d7:89:3c:e8:2b:0d:ba:76:3c:56:f8:6d:ca:c6:
aa:2a:98:79:90:d3:76:97:55:97:32:04:11:c0:f8:0d:69:09:
6a:5a:24:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2ejo1T0cI1JYd6n26Q3znMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NGQ1YTZjMzkxOWY1MWY4ZmRiOTUwNTBjMTljNTNlZjg0
OWQwNzkwHhcNMjUwNDI3MDkwMDQzWhcNMjUwNDI4MDkwMDQzWjAzMTEwLwYDVQQD
EyhlOGFjZWViYTcxYjY4MjJlMzA0ZDZlMWEwNTMyZTc5MjUyNjNkZTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocnMANDhI8b4Duwy9T/JNLCqs6eh
GSmMCGsKQLEKMSdQmkps6RE2DkrHbVJCZOMmyNXpzU5kIOISe4TqlQgieoOY3sHP
kf8HSxxD3zcj3C8M22PSrmpimzbgMYRwlwtoDMM6d8CUxU5wj5GvKx2xz+LEt4aq
r67gKqMJPjNG3OkMRaHoI9c39mtFTbnJ5juX7z5wdJ8cYh8ZUmN4mRTJg8BjVd+T
qynJDVakZoi3OGiInn0d+Qka7BDKsYCRXVngGx2GEfzSD+Wn43q9Uwuq8pLu4tbh
2uFt6BiDV5xrv3jKrs0Z7qftHSPq3Tp5KUtQyMxYm1/hOPciea3Ph8M4WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOis7rpxtoIuME1uGgUy55JSY95eMB8GA1UdIwQY
MBaAFFRNWmw5GfUfj9uVBQwZxT74SdB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yNTljZGMtODZlMi00NGNiLTkwOGEt
NjE2ZTQzOWZkMDBkLzEvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yNTljZGMtODZlMi00NGNiLTkwOGEtNjE2ZTQzOWZkMDBk
LzEvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWK+FP6U
ZFsY+oymTQqW6DmOL/p+T4rhh1l+OIrBjSwvMUC4TdbMhF7Wo9zafF5KDzfRvlna
rTXeFzg41ukZZZj608UV7r+ZA6JWkhUJiG3dn2gXGPMjsbuGAg3y7c8iAZgldRMX
jdEBefXz4WZWK2VWnoQ4KKcgbScjRjEOmgknl3F+n4H2VZ5x6AVer4zdJwiMjQcZ
4lN8YBoHycCjVwsewtZlrqBmI9kqxXl/JdVSeRoZ1FI2CIe6hre00lp06rrZMsCd
pbHsoq2Aa1jG39oeG/EATsRQg4hv5NeJPOgrDbp2PFb4bcrGqiqYeZDTdpdVlzIE
EcD4DWkJalokvg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:30:33 2025 by rpki-client