Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: I9/cBKehro/rZkGF8WDFOKBqYhRc1tepTFDsEBNm6/4=
Subject key identifier: 83:A2:4C:D1:FE:D1:21:67:01:B5:04:B5:DF:AB:02:34:21:D1:2B:FF
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 0199FB7CFC759F7B739E640D82B36948FD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:36 +0000
Manifest this update: Sun 19 Oct 2025 08:01:36 +0000
Manifest next update: Mon 20 Oct 2025 08:01:36 +0000
Files and hashes: 1: 8K-Dk9nDQwdChkEETkkV17gu04A.roa (hash: vo9xMwNRBb0zQzlCz29+SzofyhN7BH2JxEX9AVrPkwI=)
2: iu0Q7TLsh_YHXWJT0VGbOd2zsZU.roa (hash: 3TFPxppeoBP4LYAjJUoNSHVfrsnVo7BRtfkHBrHECp4=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: VQnYsj05R3hncTJB7d07fbSX1gpwskRWmrR4JN2z7us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:fc:75:9f:7b:73:9e:64:0d:82:b3:69:48:fd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Oct 19 08:01:36 2025 GMT
Not After : Oct 20 08:01:36 2025 GMT
Subject: CN=83a24cd1fed1216701b504b5dfab023421d12bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:02:84:3e:67:da:84:b3:c5:81:26:92:76:
72:68:bf:9c:19:84:5f:17:f2:94:80:0a:79:6a:a3:
88:20:37:b9:05:71:c9:6c:9f:d8:63:b4:c3:2b:41:
1c:83:d2:bc:88:28:d0:bc:81:c4:2d:8b:19:50:a5:
9a:f9:74:9e:71:f4:20:0d:0e:3d:c5:c5:8a:98:b3:
88:ff:3c:1b:3d:38:8d:0c:c5:3d:86:42:4f:8d:d5:
b0:12:5e:e9:96:3a:7e:e0:0c:6f:0f:8f:b7:fd:af:
a4:10:34:09:94:5c:8d:16:8b:f4:37:e5:a7:bb:98:
ef:a7:6c:f5:ed:54:9d:af:f8:46:84:f8:4f:7f:2a:
a3:2a:62:6c:32:f6:e7:40:81:af:ce:81:5d:67:6f:
50:2d:d5:e6:64:b7:36:22:90:9e:89:b3:8c:f1:51:
74:9f:11:64:0a:86:22:c1:dd:03:71:4a:80:dc:c1:
4f:c2:13:8b:96:d6:c8:9d:fc:c8:39:bd:50:58:cd:
1c:b1:8e:b4:e9:89:7e:34:d7:1b:8d:c7:c1:38:c5:
d3:02:f2:09:32:f4:4e:be:5e:56:77:51:77:7d:2b:
22:10:d2:23:2f:70:e3:be:3c:29:dd:1f:f3:e0:f2:
ff:50:ca:7a:ff:cf:9c:f5:2c:37:96:eb:38:db:ca:
e3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A2:4C:D1:FE:D1:21:67:01:B5:04:B5:DF:AB:02:34:21:D1:2B:FF
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e9:2b:2f:a3:62:ed:d3:91:de:8f:e3:06:d0:08:26:b0:e9:
0d:fd:2a:52:c1:b5:af:47:e4:5c:ef:25:be:34:36:b0:e6:75:
3e:e4:1b:61:71:04:42:bd:59:c7:23:15:d7:39:53:3b:4b:72:
8e:8d:d6:06:60:2d:80:14:af:ca:2a:b7:c9:25:50:b6:b2:a2:
91:a6:b2:47:f1:ef:e5:71:9f:2b:95:09:55:fd:8e:37:d4:ac:
95:55:8f:09:03:98:8b:d4:3d:0a:5d:a0:8e:18:fb:7b:71:d5:
a1:d3:36:2a:b4:65:bc:6b:2a:69:65:d9:d1:b4:80:60:9f:aa:
15:6a:29:7e:36:df:2b:1b:86:d6:0b:9f:c7:bf:d8:90:f4:4b:
85:61:55:01:bb:98:78:ad:c8:d1:9f:94:cb:04:c0:57:dc:36:
c6:fc:a9:b6:19:43:d5:09:a5:72:b1:22:86:f1:75:53:fe:ce:
db:fb:5c:10:5e:cd:b7:09:ab:36:46:be:05:3e:97:20:88:ed:
fd:6c:5e:16:0d:76:b5:4e:ae:3e:7a:23:71:5b:00:a3:69:4e:
18:ab:6d:ba:b1:fb:45:91:69:72:05:51:6c:0c:d1:66:7d:89:
47:55:02:0b:ed:47:63:f8:45:e2:16:b3:7b:7f:e9:0c:c8:7b:
e5:08:b2:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fPx1n3tznmQNgrNpSP15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTJkYjg0OThlZThmN2IzYWI1Y2FhZTgzODI5NTk2NjIw
NzAyYzEwHhcNMjUxMDE5MDgwMTM2WhcNMjUxMDIwMDgwMTM2WjAzMTEwLwYDVQQD
Eyg4M2EyNGNkMWZlZDEyMTY3MDFiNTA0YjVkZmFiMDIzNDIxZDEyYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzecChD5n2oSzxYEmknZyaL+cGYRf
F/KUgAp5aqOIIDe5BXHJbJ/YY7TDK0Ecg9K8iCjQvIHELYsZUKWa+XSecfQgDQ49
xcWKmLOI/zwbPTiNDMU9hkJPjdWwEl7pljp+4AxvD4+3/a+kEDQJlFyNFov0N+Wn
u5jvp2z17VSdr/hGhPhPfyqjKmJsMvbnQIGvzoFdZ29QLdXmZLc2IpCeibOM8VF0
nxFkCoYiwd0DcUqA3MFPwhOLltbInfzIOb1QWM0csY606Yl+NNcbjcfBOMXTAvIJ
MvROvl5Wd1F3fSsiENIjL3Djvjwp3R/z4PL/UMp6/8+c9Sw3lus428rjlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIOiTNH+0SFnAbUEtd+rAjQh0Sv/MB8GA1UdIwQY
MBaAFL3i24SY7o97OrXKroOClZZiBwLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYt
MTIyNTVlMzYxMmVjLzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYtMTIyNTVlMzYxMmVj
LzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+krL6Ni
7dOR3o/jBtAIJrDpDf0qUsG1r0fkXO8lvjQ2sOZ1PuQbYXEEQr1ZxyMV1zlTO0ty
jo3WBmAtgBSvyiq3ySVQtrKikaayR/Hv5XGfK5UJVf2ON9SslVWPCQOYi9Q9Cl2g
jhj7e3HVodM2KrRlvGsqaWXZ0bSAYJ+qFWopfjbfKxuG1gufx7/YkPRLhWFVAbuY
eK3I0Z+UywTAV9w2xvypthlD1QmlcrEihvF1U/7O2/tcEF7NtwmrNka+BT6XIIjt
/WxeFg12tU6uPnojcVsAo2lOGKtturH7RZFpcgVRbAzRZn2JR1UCC+1HY/hF4haz
e3/pDMh75QiyOQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:59 2025 by rpki-client