Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: hBPpsX3Pyzei4r7D07Qk3DmhbTou9dBWDioXX2Dv+ss=
Subject key identifier: FD:4E:4E:22:C3:06:05:21:79:60:12:BE:3F:61:A3:08:41:E6:8B:72
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 019656B81D1A5367263E398FC201B088AD81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 05:00:28 +0000
Manifest this update: Mon 21 Apr 2025 05:00:28 +0000
Manifest next update: Tue 22 Apr 2025 05:00:28 +0000
Files and hashes: 1: 8K-Dk9nDQwdChkEETkkV17gu04A.roa (hash: vo9xMwNRBb0zQzlCz29+SzofyhN7BH2JxEX9AVrPkwI=)
2: iu0Q7TLsh_YHXWJT0VGbOd2zsZU.roa (hash: 3TFPxppeoBP4LYAjJUoNSHVfrsnVo7BRtfkHBrHECp4=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: t/ERY5ME9+3axFeFLI1t9uJ8THiC2DSVh/9cbV+5PZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:1d:1a:53:67:26:3e:39:8f:c2:01:b0:88:ad:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Apr 21 05:00:28 2025 GMT
Not After : Apr 22 05:00:28 2025 GMT
Subject: CN=fd4e4e22c3060521796012be3f61a30841e68b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:81:2b:69:b6:b7:f9:a8:df:9b:b2:67:89:
f4:a7:af:6e:01:ff:33:5c:ce:e9:e3:5c:ec:5d:fd:
eb:af:7e:a7:76:f9:86:46:da:94:9e:55:e0:aa:64:
4d:7e:eb:fc:f0:26:4f:b3:b5:ad:14:05:15:70:bd:
e9:74:50:a8:d8:e7:7a:cd:9c:f0:d6:58:61:b8:7b:
96:0a:33:5b:0a:3e:0b:71:8e:75:db:e4:05:fb:15:
3b:48:9f:d8:7b:e3:00:57:0e:98:b4:dc:48:fa:77:
a4:56:86:63:f0:97:3c:30:ee:10:db:88:98:39:a1:
7b:0a:b4:6b:93:42:c6:cb:45:22:15:35:1b:4a:e4:
0f:66:3c:16:3a:82:b1:64:a0:8c:43:24:91:2f:89:
36:39:7e:99:47:65:07:96:a7:51:5a:c4:b2:44:3e:
bc:a7:6e:b9:49:35:47:d6:6b:c1:4e:2a:ca:78:ad:
51:bd:1f:ec:5f:3a:d3:03:e2:df:4a:2d:ed:59:37:
82:b5:03:83:02:35:9b:4a:eb:0b:84:55:b0:c1:91:
22:7c:c1:78:3b:49:ea:68:ca:c6:56:2a:ff:9b:20:
b9:3a:2d:a5:6b:a4:92:d8:e2:36:b4:40:5a:d2:b6:
af:ed:96:0a:78:3e:10:9f:8e:3e:8f:1b:09:a9:20:
32:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4E:4E:22:C3:06:05:21:79:60:12:BE:3F:61:A3:08:41:E6:8B:72
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:eb:7a:bd:bf:85:c3:f8:10:e1:51:4f:ed:74:1d:3d:4f:d1:
5e:5c:6d:14:38:e9:ed:c4:c6:89:44:fc:f6:e1:8f:4a:a1:67:
3a:9d:ee:e7:d5:86:3c:3b:28:ea:a3:57:6b:b8:42:13:29:1a:
d3:52:23:22:0c:63:0e:8c:f0:d5:d0:71:05:58:7e:35:db:69:
99:4f:ed:ab:97:d3:c0:c0:45:d2:a7:dc:6c:af:9b:99:e6:1b:
d1:af:ac:ae:74:21:c6:6d:9f:10:40:1c:ba:83:c9:9e:4c:f7:
b5:ff:43:ae:eb:53:bb:9c:ce:97:f7:04:94:ac:b3:52:e0:24:
be:ce:6f:13:c6:23:85:07:47:42:2d:09:af:88:e5:03:be:32:
5b:75:aa:dc:38:57:6d:a7:66:89:d6:4a:cf:ed:51:7b:14:c9:
c2:97:a3:5e:9c:a5:c6:0b:40:2f:53:90:72:11:e3:b4:af:36:
5e:7b:7d:50:44:13:d2:47:1f:a4:38:a1:c8:9c:8d:ad:f9:8e:
5f:03:07:3f:bc:ba:54:b5:40:66:ef:09:d3:4d:db:87:99:57:
f0:f3:46:c2:f2:e5:98:29:c4:e3:3f:16:04:1a:2a:80:c8:92:
6e:55:00:58:0a:76:97:78:37:d0:e5:39:9e:82:07:53:09:d9:
b9:2f:a7:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZWuB0aU2cmPjmPwgGwiK2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTJkYjg0OThlZThmN2IzYWI1Y2FhZTgzODI5NTk2NjIw
NzAyYzEwHhcNMjUwNDIxMDUwMDI4WhcNMjUwNDIyMDUwMDI4WjAzMTEwLwYDVQQD
EyhmZDRlNGUyMmMzMDYwNTIxNzk2MDEyYmUzZjYxYTMwODQxZTY4YjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+6BK2m2t/mo35uyZ4n0p69uAf8z
XM7p41zsXf3rr36ndvmGRtqUnlXgqmRNfuv88CZPs7WtFAUVcL3pdFCo2Od6zZzw
1lhhuHuWCjNbCj4LcY512+QF+xU7SJ/Ye+MAVw6YtNxI+nekVoZj8Jc8MO4Q24iY
OaF7CrRrk0LGy0UiFTUbSuQPZjwWOoKxZKCMQySRL4k2OX6ZR2UHlqdRWsSyRD68
p265STVH1mvBTirKeK1RvR/sXzrTA+LfSi3tWTeCtQODAjWbSusLhFWwwZEifMF4
O0nqaMrGVir/myC5Oi2la6SS2OI2tEBa0rav7ZYKeD4Qn44+jxsJqSAyZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1OTiLDBgUheWASvj9howhB5otyMB8GA1UdIwQY
MBaAFL3i24SY7o97OrXKroOClZZiBwLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYt
MTIyNTVlMzYxMmVjLzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYtMTIyNTVlMzYxMmVj
LzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAket6vb+F
w/gQ4VFP7XQdPU/RXlxtFDjp7cTGiUT89uGPSqFnOp3u59WGPDso6qNXa7hCEyka
01IjIgxjDozw1dBxBVh+NdtpmU/tq5fTwMBF0qfcbK+bmeYb0a+srnQhxm2fEEAc
uoPJnkz3tf9DrutTu5zOl/cElKyzUuAkvs5vE8YjhQdHQi0Jr4jlA74yW3Wq3DhX
badmidZKz+1RexTJwpejXpylxgtAL1OQchHjtK82Xnt9UEQT0kcfpDihyJyNrfmO
XwMHP7y6VLVAZu8J003bh5lX8PNGwvLlmCnE4z8WBBoqgMiSblUAWAp2l3g30OU5
noIHUwnZuS+n1g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:52 2025 by rpki-client