Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
File: veWU40bxTQmDwaa_S7XHFP-bhEI.mft (raw, json)
Hash identifier: eYKoxsNnkTzkixpILhErRiPJXDyGV43Du/aLX4ZuMhA=
Subject key identifier: 30:CF:6F:C7:60:A5:7E:40:E7:05:41:82:96:01:A0:D8:64:95:0E:C9
Authority key identifier: BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
Certificate issuer: /CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Certificate serial: 0196767A1E8393D995D9D09EB487C1A99B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
Manifest number: 150C
Signing time: Sun 27 Apr 2025 09:00:36 +0000
Manifest this update: Sun 27 Apr 2025 09:00:36 +0000
Manifest next update: Mon 28 Apr 2025 09:00:36 +0000
Files and hashes: 1: veWU40bxTQmDwaa_S7XHFP-bhEI.crl (hash: 64YgSOUI8nNn4YqqaSsMpixN1LpPwXMUDPYkVtP+JAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:1e:83:93:d9:95:d9:d0:9e:b4:87:c1:a9:9b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Validity
Not Before: Apr 27 09:00:36 2025 GMT
Not After : Apr 28 09:00:36 2025 GMT
Subject: CN=30cf6fc760a57e40e70541829601a0d864950ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:91:9b:d8:80:82:78:65:86:08:2c:9e:04:bf:
ad:f0:5f:eb:fd:8b:9a:4e:b2:0d:37:4c:00:49:c6:
6b:c2:2d:c4:4a:25:da:6f:72:b0:3a:ee:9c:bd:8a:
a6:73:40:6e:29:40:42:54:ac:dd:0f:9d:76:78:2e:
c1:f1:90:34:da:50:66:c0:ec:f7:f0:f2:45:eb:f0:
e1:47:ab:5f:6f:7b:c5:c6:ee:5a:c9:b9:3e:85:c6:
f4:94:bf:a3:69:09:d0:55:32:14:12:dc:21:b7:16:
d4:b6:5a:85:2b:73:cb:c0:3c:54:b7:a5:ec:78:52:
e9:19:5f:d7:e4:ae:76:b1:5b:64:31:f7:67:87:d2:
4f:02:57:35:96:a3:d1:c9:41:f0:0c:69:88:57:0a:
5e:b5:0e:51:2d:9b:2b:47:30:0a:ee:62:a0:39:fc:
f1:08:ba:13:4d:75:32:b7:9b:57:c7:7d:27:83:88:
18:27:53:65:50:30:d8:8f:ae:3a:f4:94:71:bc:4c:
c4:dc:40:4d:13:53:27:3d:80:b0:3b:7e:66:2f:71:
70:4b:3e:03:40:c8:44:1b:31:0d:9a:f1:e3:3d:8f:
dd:a4:d7:e0:3a:07:95:84:02:16:1b:d6:d4:60:e1:
30:23:fb:2c:e9:27:60:00:08:d6:27:fc:0e:dc:6b:
c1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CF:6F:C7:60:A5:7E:40:E7:05:41:82:96:01:A0:D8:64:95:0E:C9
X509v3 Authority Key Identifier:
keyid:BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:e4:87:1b:3e:14:89:9b:61:34:94:13:86:d9:f8:c9:ca:4f:
2a:1c:8d:d8:ef:ec:25:be:a6:9a:99:87:7a:f9:e1:90:65:a0:
ce:1e:23:96:6f:b8:fa:78:17:1a:74:5e:a3:30:39:1b:d8:a6:
6f:8f:7a:aa:4e:2e:d4:5e:53:f7:04:e4:03:8c:e5:7c:66:8f:
42:77:2b:67:af:10:be:fc:8b:c4:c8:bb:0f:17:60:c1:c6:4e:
f2:2d:70:4d:f1:8b:e5:93:64:ea:06:23:c5:27:e8:1d:4a:eb:
77:07:c3:39:0e:7d:81:07:cd:dd:8b:33:df:5d:b4:65:c8:87:
ad:db:99:03:cf:ad:53:8f:ef:83:b9:36:d7:77:96:cf:3d:ad:
0b:4e:87:58:0d:6e:22:74:6e:ab:5f:4b:8f:67:c2:81:8c:d8:
32:ab:ef:aa:95:bb:96:21:6c:0f:58:13:7e:5a:7e:6d:ad:ca:
f0:63:67:c7:cf:e0:a1:d4:5e:9e:e4:7c:4e:0a:6b:0e:90:10:
79:5c:10:87:b1:3f:45:c5:fb:23:2e:f5:94:be:36:9d:f1:e3:
ed:57:b6:af:18:75:6d:8c:6b:74:89:73:5b:ea:51:9f:08:7c:
e3:fb:fc:3e:a3:be:ca:f8:ec:f7:f5:05:28:08:1d:3c:30:89:
f4:5f:77:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:15:41 2025 by rpki-client