Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
File: veWU40bxTQmDwaa_S7XHFP-bhEI.mft (raw, json)
Hash identifier: bzK8IfHNXEaipF0uCEXvV16wNTpk9Obo94dsNKOQjmQ=
Subject key identifier: 5C:63:94:D7:71:FE:55:BC:5D:78:30:8C:16:17:0A:07:E0:76:AC:6D
Authority key identifier: BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
Certificate issuer: /CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Certificate serial: 0197B70F12644F491B0770142FD5244656C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:47 +0000
Manifest this update: Sat 28 Jun 2025 15:01:47 +0000
Manifest next update: Sun 29 Jun 2025 15:01:47 +0000
Files and hashes: 1: veWU40bxTQmDwaa_S7XHFP-bhEI.crl (hash: UiqLM5Am/jNZSzIJMsg4oA2NcINviXifrPpNeV42Z3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:12:64:4f:49:1b:07:70:14:2f:d5:24:46:56:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde594e346f14d0983c1a6bf4bb5c714ff9b8442
Validity
Not Before: Jun 28 15:01:47 2025 GMT
Not After : Jun 29 15:01:47 2025 GMT
Subject: CN=5c6394d771fe55bc5d78308c16170a07e076ac6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:ad:8b:64:32:b5:5b:a0:5c:1a:b9:80:d4:
08:d1:9a:d0:b7:8b:08:06:48:73:19:65:a1:c0:c6:
37:93:d8:86:3a:66:b4:22:8d:f9:9c:72:6a:bc:4a:
a4:34:04:64:7e:94:83:6d:d1:e4:0a:29:ab:01:6c:
da:dd:fd:19:e0:91:1e:be:c9:bb:10:a9:a5:8c:f2:
7d:e0:c9:52:35:6f:b6:99:ab:02:ca:11:c8:92:29:
ae:f8:1e:c5:e3:70:03:4f:81:6d:02:a8:83:5c:88:
c0:03:2c:d5:df:14:3a:e0:70:b7:58:d5:74:89:4a:
b6:70:8f:f9:52:83:7a:e1:47:06:10:d7:ec:bd:4c:
e3:1a:38:5a:05:a8:5f:1f:41:26:0d:a3:15:86:a4:
2f:dc:de:70:d0:31:47:1e:a6:25:09:61:c2:93:4a:
a9:8f:4f:36:93:83:ff:af:95:3e:00:d4:cb:c8:02:
3b:9f:52:79:3f:56:18:99:35:87:c8:37:08:79:49:
b1:35:5d:9b:13:0c:9a:d4:de:ff:cb:fc:f3:8f:3f:
b4:0c:f5:29:19:07:6d:3e:f6:21:ee:4e:91:8c:64:
5f:1d:bc:48:26:01:49:e2:fb:a9:47:9b:32:4c:58:
58:ec:39:09:4f:d2:d3:cb:0d:fc:64:f0:d2:d2:51:
cb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:63:94:D7:71:FE:55:BC:5D:78:30:8C:16:17:0A:07:E0:76:AC:6D
X509v3 Authority Key Identifier:
keyid:BD:E5:94:E3:46:F1:4D:09:83:C1:A6:BF:4B:B5:C7:14:FF:9B:84:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veWU40bxTQmDwaa_S7XHFP-bhEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ebb39e-be6b-428d-b50e-c7a366b91f43/1/veWU40bxTQmDwaa_S7XHFP-bhEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:33:47:ae:4b:dd:64:35:f7:2f:5b:fa:82:8d:31:2a:dd:e7:
7d:6a:bf:93:78:01:6b:5b:b5:f6:fe:76:5d:8f:a8:7c:43:2d:
b1:ab:8b:12:40:ee:39:48:b0:04:59:47:98:b1:43:0f:11:69:
82:b9:72:3c:34:c2:7d:e6:c3:11:f0:82:ab:9d:19:98:84:78:
1a:68:16:89:f0:91:aa:b3:c1:e2:90:c4:cb:23:a6:35:e6:56:
91:41:31:63:dc:c0:bf:07:a2:2f:0a:14:7b:76:81:75:bd:03:
ba:41:e3:0c:84:87:9b:b2:d0:72:ec:40:26:65:53:a3:18:ad:
f8:3a:4c:2a:7a:7e:87:54:d4:ff:3e:2c:1e:c8:5a:c9:ec:0f:
53:36:2d:32:a6:0e:54:4c:d8:14:24:a7:31:39:42:32:6b:ee:
a7:79:2f:e0:bf:53:f8:25:62:15:93:3b:42:4c:79:fa:48:a2:
3c:e2:e4:79:3c:7f:6e:86:6f:52:12:9a:ac:e8:40:71:02:7a:
6c:e8:a4:bf:ad:d1:12:eb:10:f6:9f:04:83:ee:d5:1d:2e:96:
a6:c1:a4:a5:fd:76:57:8f:89:47:95:e1:f0:28:0b:af:13:cf:
a8:47:dd:8e:9b:48:c1:e2:37:7e:88:a8:20:51:a9:82:29:13:
54:08:1f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:50:24 2025 by rpki-client