Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
File: veasKPlU4T3LfbabwiK3hbTXXyw.mft (raw, json)
Hash identifier: /Bqzl8jbi7TX8vL4HM52/wAl1S/d+jD1czlD2WeeSoU=
Subject key identifier: 44:EC:DE:5F:0D:28:0A:D2:21:69:4E:1E:7B:5A:42:19:DA:DF:CA:AA
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial: 0196718A81FCC927BB4CE77BF029D571DFAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
Manifest number: 0BF3
Signing time: Sat 26 Apr 2025 10:00:24 +0000
Manifest this update: Sat 26 Apr 2025 10:00:24 +0000
Manifest next update: Sun 27 Apr 2025 10:00:24 +0000
Files and hashes: 1: 509i7q99VV6jt4ndkd6v3yERltw.roa (hash: g7P57NWMbrCtdFNQP+D3i8F0Apoplsinge/ip5B3+YY=)
2: nEDjfIZKF5qMb1h8bPxSVAUrtik.roa (hash: JVEr/YaoGSePnRYcOVuf4Hm+Hsrwi6AszccnyN21uQc=)
3: veasKPlU4T3LfbabwiK3hbTXXyw.crl (hash: lZ1cC8IdwtIRwxcSs1wPrHFQK5kfs+xOkoLudv5eWV0=)
4: zJWHWedCzMF6uDnk-dKwx5D_tzs.roa (hash: kMy8C9BmZw6Kq7O4Dgil5IYiM5cd5lWzYxHbYaUrEKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:8a:81:fc:c9:27:bb:4c:e7:7b:f0:29:d5:71:df:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Validity
Not Before: Apr 26 10:00:24 2025 GMT
Not After : Apr 27 10:00:24 2025 GMT
Subject: CN=44ecde5f0d280ad221694e1e7b5a4219dadfcaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:90:44:58:73:02:eb:dc:4f:e9:67:3e:1e:
17:e2:45:76:58:4f:34:20:fb:af:67:6c:73:46:5e:
02:d9:83:d5:02:6f:88:17:a9:56:0c:25:e5:59:2b:
b9:3c:a7:5d:e9:c3:2d:50:cd:15:48:4c:e4:27:ff:
e6:c2:34:74:8f:9d:8d:cf:70:a7:4e:f4:69:da:7c:
e6:67:e2:65:88:91:04:f7:73:26:da:87:48:3b:dd:
b0:99:54:55:08:db:44:61:81:fb:25:f1:3b:0f:9f:
0e:73:37:b6:f4:fb:00:42:cb:c9:94:0a:0c:90:0f:
93:f9:10:53:5f:46:58:14:43:fc:c2:c4:c5:0d:a0:
1c:fb:de:73:6a:7a:3f:e0:4a:e6:4d:a2:e6:90:84:
3d:9a:8c:b1:b0:69:30:c4:83:22:bd:88:d5:ca:c1:
70:c6:e9:10:dd:a0:f4:75:d9:b6:18:86:f2:a7:3c:
bd:7e:92:b7:3e:21:c2:bd:02:73:83:28:25:a9:e3:
64:55:02:ab:d1:99:dd:19:1b:40:a3:3d:a5:ff:c3:
de:90:94:89:50:c4:a0:b9:d4:58:43:26:25:f0:15:
d0:d4:89:94:5e:df:ee:38:e5:35:f3:2f:62:fb:34:
16:65:d9:d3:1a:0d:d2:af:69:bf:b9:01:dc:58:92:
70:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EC:DE:5F:0D:28:0A:D2:21:69:4E:1E:7B:5A:42:19:DA:DF:CA:AA
X509v3 Authority Key Identifier:
keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:70:db:49:32:a5:1c:a8:09:75:c1:f5:ad:41:fc:fb:a9:52:
24:cb:59:fc:a5:fe:05:65:26:b2:87:94:13:19:20:05:60:9b:
b3:3a:8b:05:7c:ba:fa:b5:2e:af:04:b9:15:b5:b2:12:88:96:
02:48:fb:f2:08:b7:36:c8:04:3c:4c:19:02:92:89:0b:40:00:
7d:e6:c2:81:57:a2:b8:c8:62:0a:73:06:34:68:08:ff:4c:3c:
b5:24:a2:2b:28:32:4e:2b:94:3d:32:e4:26:cc:6c:e3:cd:55:
48:5d:67:a1:a5:ee:6b:ed:b7:f2:69:15:df:0b:54:6f:64:30:
96:16:7d:e4:e1:f8:02:d1:2a:3a:a9:0a:27:8c:8a:e9:a5:fd:
3b:74:5a:b9:f6:d1:b8:ac:e4:76:d6:f9:fd:ea:d0:91:59:d7:
a1:e9:a8:96:60:7b:3c:10:6b:6d:14:f5:e4:2f:ea:b4:15:0c:
8b:2d:fe:4d:c0:cf:3d:24:76:4d:be:5c:dd:25:b5:4a:df:48:
a2:9b:ff:43:dc:9e:31:d3:84:04:f5:0a:c5:9b:79:a6:bf:db:
2a:4f:bf:14:44:fe:e2:15:1b:96:44:2b:15:bf:a1:e1:78:2b:
64:c2:4c:50:2c:6b:a9:04:8f:c2:c3:d7:ab:1e:5a:88:d1:93:
2b:97:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:26 2025 by rpki-client