
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
File: veasKPlU4T3LfbabwiK3hbTXXyw.mft (raw, json)
Hash identifier: pBzxn0kAIHDmcj5znT2UqJzUiAqn7zVncEGpSA2bz/0=
Subject key identifier: 38:F0:CC:E0:17:FD:11:31:F4:D1:0C:54:69:69:4C:4C:6C:95:FD:6C
Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Certificate serial: 019654928519517795FCE6904382CB719D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
Manifest number: 0BE4
Signing time: Sun 20 Apr 2025 19:00:10 +0000
Manifest this update: Sun 20 Apr 2025 19:00:10 +0000
Manifest next update: Mon 21 Apr 2025 19:00:10 +0000
Files and hashes: 1: 509i7q99VV6jt4ndkd6v3yERltw.roa (hash: g7P57NWMbrCtdFNQP+D3i8F0Apoplsinge/ip5B3+YY=)
2: nEDjfIZKF5qMb1h8bPxSVAUrtik.roa (hash: JVEr/YaoGSePnRYcOVuf4Hm+Hsrwi6AszccnyN21uQc=)
3: veasKPlU4T3LfbabwiK3hbTXXyw.crl (hash: muoRMNn0ALPq0voUaN24l6QTKVL8rcyyackjdJUyrhA=)
4: zJWHWedCzMF6uDnk-dKwx5D_tzs.roa (hash: kMy8C9BmZw6Kq7O4Dgil5IYiM5cd5lWzYxHbYaUrEKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:92:85:19:51:77:95:fc:e6:90:43:82:cb:71:9d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c
Validity
Not Before: Apr 20 19:00:10 2025 GMT
Not After : Apr 21 19:00:10 2025 GMT
Subject: CN=38f0cce017fd1131f4d10c5469694c4c6c95fd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:68:73:f8:f0:2d:ad:61:de:90:e6:e6:a0:
17:b8:b9:26:ec:e1:52:77:0e:e9:3a:04:93:3b:e1:
97:24:60:bf:2d:bf:b1:d4:af:9a:3e:f6:0d:75:82:
14:87:d5:7f:05:41:40:6b:41:86:ba:6b:32:ed:72:
1c:3a:f1:ba:ba:60:7d:7d:d0:b1:84:86:00:0d:a3:
74:58:70:f0:7e:b9:94:d5:a1:85:07:77:50:cb:f4:
27:90:b6:9b:5c:e7:15:e8:f9:f6:62:2f:d0:3d:6f:
87:0c:b4:6d:cf:67:fa:87:99:74:fe:2b:f2:d4:37:
6b:9b:50:f2:4e:47:38:ac:7d:33:89:05:e0:bd:6b:
65:15:f0:e5:94:fd:37:ae:bc:d6:c7:24:d9:9f:7a:
50:38:e7:7d:00:f2:10:7c:1f:2a:62:6a:20:96:58:
c5:d5:58:8d:16:c4:06:d6:6e:7a:39:b3:c4:ae:66:
5c:a0:3d:49:7e:27:32:4a:76:84:db:67:1b:12:47:
a8:2f:d1:ba:35:19:b5:dc:94:3a:5b:cc:02:cc:10:
b0:03:86:b1:01:d8:2e:66:d6:84:d5:33:fd:ab:2c:
e2:ff:6e:92:fc:96:f9:97:a3:ee:b7:0d:13:3f:55:
30:be:38:bc:90:3a:09:c5:cf:5e:9e:9d:36:9f:25:
31:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F0:CC:E0:17:FD:11:31:F4:D1:0C:54:69:69:4C:4C:6C:95:FD:6C
X509v3 Authority Key Identifier:
keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e5:03:74:66:fa:95:c6:88:41:59:e5:03:3d:ac:35:6d:17:
04:79:15:05:60:aa:e9:ae:79:a5:8b:cd:32:b4:17:89:68:c8:
79:9a:70:15:16:00:42:9f:f0:c6:02:c5:48:72:f7:d0:a3:70:
f0:8e:b9:02:70:be:03:36:3a:69:d0:ef:83:77:be:ea:70:ab:
36:1f:76:a8:de:0d:09:18:5f:f1:3c:a3:c8:c6:b4:4c:f6:f9:
96:35:56:14:ab:6c:5f:d6:66:cf:b6:8c:d8:e1:87:b2:88:0f:
9e:d8:7d:59:29:48:f4:cf:50:5d:32:bd:b4:db:2c:e9:84:89:
8a:26:33:d7:1f:8f:3e:41:72:a3:26:5a:1e:d4:a0:94:d4:58:
7a:06:bf:d7:b6:8c:4a:64:d6:6a:bd:6a:8f:06:cd:e3:27:a6:
81:7c:f1:0f:f7:77:a8:06:24:e0:2a:8a:f9:7e:28:60:d5:49:
03:66:f1:c2:4d:7f:19:c7:32:bb:b6:ac:c0:e5:99:f2:c1:be:
d7:35:45:a7:1f:d9:b5:be:38:f3:45:d9:da:1a:ce:a7:e2:5c:
bc:50:42:3f:63:f8:dc:28:24:b4:1c:b0:15:59:49:8e:e9:b0:
e8:a0:89:e9:05:b5:90:dc:3d:55:ba:18:d5:90:f5:c7:90:fd:
3a:da:2e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:20 2025 by rpki-client