Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
File: veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft (raw, json)
Hash identifier: lRyccTVMZ5rOEUDpCkBBeKhFJPgeDXwv9wF81TXaHE8=
Subject key identifier: 65:4B:AE:74:E2:69:05:F8:17:7F:BD:41:9E:33:6C:3E:AA:C4:E2:24
Authority key identifier: BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
Certificate issuer: /CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Certificate serial: 019685EDA6B45B24BF6ACDF74F15CF5A3AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
Manifest number: 1168
Signing time: Wed 30 Apr 2025 09:01:06 +0000
Manifest this update: Wed 30 Apr 2025 09:01:06 +0000
Manifest next update: Thu 01 May 2025 09:01:06 +0000
Files and hashes: 1: veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl (hash: ZLF2khmbOMDdv+mCEihaf/6IQ3qQ1kO/X0ENMk4ypjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:a6:b4:5b:24:bf:6a:cd:f7:4f:15:cf:5a:3a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde3a4fb2681db28b5c3f5f1d46a2d359960faa4
Validity
Not Before: Apr 30 09:01:06 2025 GMT
Not After : May 1 09:01:06 2025 GMT
Subject: CN=654bae74e26905f8177fbd419e336c3eaac4e224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:74:0b:1e:fb:a3:5c:da:81:63:79:57:0c:
c7:07:27:ec:03:dc:51:31:5e:c9:fe:5b:90:91:a5:
c3:b4:c1:38:8c:0d:37:6c:db:7b:ab:f9:ec:26:2d:
55:45:af:3a:e1:6b:15:44:77:f0:6b:13:62:f9:0e:
6c:e1:0b:fe:96:b3:cc:09:2d:eb:a3:01:d0:1f:ab:
dc:a5:11:f8:36:05:9a:0a:a9:1a:a3:2c:db:f8:47:
0d:54:66:68:47:3e:50:2c:e1:16:f4:c1:4d:3c:87:
6f:fc:d4:88:da:47:b7:88:ac:38:78:15:d6:4e:08:
0c:ae:15:68:ec:1c:93:49:4a:2e:63:f0:c7:96:60:
57:2b:10:a6:d7:e1:87:3c:d2:ea:38:4d:72:50:30:
52:ea:4a:fc:82:37:7b:06:6f:4b:ee:ff:82:d4:de:
81:14:cc:f1:cb:fd:f9:2d:17:22:93:f5:27:2e:82:
86:cb:57:6f:96:40:a3:ad:60:55:59:b9:5e:3a:00:
f4:aa:12:c3:a2:e6:98:1b:3d:70:32:79:25:2b:7c:
04:a7:f9:63:76:db:62:9f:c1:37:c3:44:63:2d:57:
f7:c6:39:09:7c:b7:5f:85:24:df:8a:04:c6:57:6a:
4b:ac:7d:6f:c7:28:46:7f:4f:08:af:6a:d9:57:bf:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4B:AE:74:E2:69:05:F8:17:7F:BD:41:9E:33:6C:3E:AA:C4:E2:24
X509v3 Authority Key Identifier:
keyid:BD:E3:A4:FB:26:81:DB:28:B5:C3:F5:F1:D4:6A:2D:35:99:60:FA:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veOk-yaB2yi1w_Xx1GotNZlg-qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/21de67-4975-47a8-846c-808feaaf987d/1/veOk-yaB2yi1w_Xx1GotNZlg-qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b4:f9:ae:a3:17:03:1f:97:07:79:e4:6e:4a:93:95:41:ef:
5c:80:60:05:fe:3e:64:e7:de:89:96:7c:db:27:cb:f5:df:3c:
c6:51:cd:e0:14:31:8f:26:71:2e:21:f0:e4:7e:b3:c4:02:43:
6e:2e:41:d6:27:cd:26:24:a1:a3:03:81:6a:21:58:8c:86:eb:
b3:e0:89:cf:29:ce:ff:c0:ca:d8:03:42:d0:a6:08:b6:b9:e8:
d8:be:53:16:f5:95:0e:ec:10:92:8f:cf:50:48:25:fb:9d:8f:
e2:2d:84:8a:a5:83:62:dc:cb:82:c1:1d:be:e1:ef:ca:bc:eb:
9f:1f:d8:75:04:26:45:13:0e:f0:30:ae:35:d8:5d:71:19:50:
d5:b0:7d:81:ff:51:35:23:16:92:8e:30:01:4f:1e:60:9c:e3:
7a:59:1b:76:f6:75:8c:d8:e1:29:3d:73:e2:c5:f7:79:1e:27:
08:37:01:8e:7b:c4:19:89:15:c7:67:69:ce:d5:c9:1a:11:94:
07:f9:8a:ca:98:7c:0d:4b:57:39:9b:ae:12:b6:66:8e:60:43:
27:7e:d0:1b:df:af:96:53:64:73:75:bc:ec:bc:e7:f2:c7:d6:
35:aa:d7:cc:6d:6f:39:b7:97:24:24:84:46:ac:05:d4:18:61:
28:cf:95:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:03:37 2025 by rpki-client