Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: R99Z4W+y3ZlUjLbgh1cIwMsWdiSD3zGF254nCtat4QA=
Subject key identifier: 3A:B7:F8:8C:6C:FD:1B:D3:00:74:8D:8E:EE:4B:28:43:2D:1B:A4:EB
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 0198D4046C34930EBC6FCD188D223573D27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 164B
Signing time: Fri 22 Aug 2025 23:01:56 +0000
Manifest this update: Fri 22 Aug 2025 23:01:56 +0000
Manifest next update: Sat 23 Aug 2025 23:01:56 +0000
Files and hashes: 1: 8K-Dk9nDQwdChkEETkkV17gu04A.roa (hash: vo9xMwNRBb0zQzlCz29+SzofyhN7BH2JxEX9AVrPkwI=)
2: iu0Q7TLsh_YHXWJT0VGbOd2zsZU.roa (hash: 3TFPxppeoBP4LYAjJUoNSHVfrsnVo7BRtfkHBrHECp4=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: YE9gfcbxm6bBc+pgRkZoRGCWrco3XMmDKWlDa+VDTYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:6c:34:93:0e:bc:6f:cd:18:8d:22:35:73:d2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Aug 22 23:01:56 2025 GMT
Not After : Aug 23 23:01:56 2025 GMT
Subject: CN=3ab7f88c6cfd1bd300748d8eee4b28432d1ba4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:a2:79:85:95:64:49:ff:49:14:68:65:9a:
17:a5:d6:f0:04:af:da:58:03:a4:cb:88:9b:7d:f5:
f0:42:9f:e6:d1:2b:a1:2d:c4:e0:c6:0e:c8:90:15:
8d:20:cf:fe:0c:33:dd:71:a9:db:49:03:16:56:8d:
3e:2b:22:99:0d:0a:0f:59:b2:ea:32:5a:f2:0c:09:
50:eb:d7:2b:b4:9f:f7:7a:0e:1e:f6:19:90:85:97:
2d:ce:59:21:58:9e:0e:54:05:e4:21:b4:51:5a:56:
61:82:89:0d:8b:2e:41:c0:a4:0b:8c:d2:a1:f8:0d:
91:52:fe:5f:c9:52:b5:76:a8:06:c3:84:ed:be:35:
07:4b:9d:d0:cd:b9:5b:63:0c:0d:30:07:d6:e6:86:
f9:d5:ce:2b:8f:d9:5d:40:b6:31:73:22:d2:70:d3:
bf:91:eb:26:22:4d:58:fb:a2:57:97:c7:a8:cc:c7:
f9:86:27:bd:f8:35:01:51:3c:70:e8:d4:30:63:47:
78:41:50:4a:0e:ad:5c:6f:63:c3:ec:88:11:e1:56:
25:4d:a7:19:75:ea:b8:8f:8d:e0:26:a2:b2:51:64:
42:84:37:dd:d9:de:69:8b:fa:60:a7:8f:32:b4:00:
08:f8:bd:80:69:b0:06:f2:d5:b4:54:d0:54:70:8d:
57:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B7:F8:8C:6C:FD:1B:D3:00:74:8D:8E:EE:4B:28:43:2D:1B:A4:EB
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:18:23:24:a8:db:7a:b5:68:40:e0:ec:e4:92:e4:75:47:4e:
44:a5:b9:42:0d:b1:08:28:bb:d4:68:13:47:22:fd:66:f6:06:
1d:ae:0a:77:4f:59:06:9a:16:c1:a2:04:15:c2:e3:e2:c7:d7:
c1:f9:d9:37:4c:19:22:46:f3:de:bd:3b:e7:7d:af:39:26:8e:
07:86:8e:0c:5e:5e:23:58:91:a5:74:14:2e:a6:5b:08:be:aa:
5b:91:fb:de:de:58:c5:7f:65:97:c6:73:d6:1a:ec:b9:45:ec:
8d:aa:0c:7a:df:2e:b6:50:29:b6:65:c5:9e:63:66:93:2b:65:
b2:b8:f2:99:3a:14:92:68:a8:f8:6a:ee:67:c8:03:a7:6e:0a:
af:f9:3a:02:f3:4b:23:b1:f6:fe:1e:3d:bc:07:6b:91:06:c9:
6a:a4:c6:5c:64:90:96:72:1c:87:68:56:62:6b:87:44:48:87:
57:40:84:c9:21:64:2d:17:fa:5b:3b:ea:5a:27:ab:29:a0:50:
03:c8:01:46:6c:7e:82:b6:9c:28:a3:c3:34:4f:e4:f6:4c:54:
ad:ca:f8:07:e8:75:8b:28:37:98:9f:04:76:e9:9b:0c:8b:57:
75:20:08:f9:2c:49:ea:1c:7f:80:bc:18:fa:b5:0a:31:5b:23:
32:ac:12:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUBGw0kw68b80YjSI1c9J+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTJkYjg0OThlZThmN2IzYWI1Y2FhZTgzODI5NTk2NjIw
NzAyYzEwHhcNMjUwODIyMjMwMTU2WhcNMjUwODIzMjMwMTU2WjAzMTEwLwYDVQQD
EygzYWI3Zjg4YzZjZmQxYmQzMDA3NDhkOGVlZTRiMjg0MzJkMWJhNGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RSieYWVZEn/SRRoZZoXpdbwBK/a
WAOky4ibffXwQp/m0SuhLcTgxg7IkBWNIM/+DDPdcanbSQMWVo0+KyKZDQoPWbLq
MlryDAlQ69crtJ/3eg4e9hmQhZctzlkhWJ4OVAXkIbRRWlZhgokNiy5BwKQLjNKh
+A2RUv5fyVK1dqgGw4TtvjUHS53QzblbYwwNMAfW5ob51c4rj9ldQLYxcyLScNO/
kesmIk1Y+6JXl8eozMf5hie9+DUBUTxw6NQwY0d4QVBKDq1cb2PD7IgR4VYlTacZ
deq4j43gJqKyUWRChDfd2d5pi/pgp48ytAAI+L2AabAG8tW0VNBUcI1XzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDq3+Ixs/RvTAHSNju5LKEMtG6TrMB8GA1UdIwQY
MBaAFL3i24SY7o97OrXKroOClZZiBwLBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYt
MTIyNTVlMzYxMmVjLzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iMTliZDgtZTFkOC00Mzg4LWEzYjYtMTIyNTVlMzYxMmVj
LzEvdmVMYmhKanVqM3M2dGNxdWc0S1ZsbUlIQXNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERgjJKjb
erVoQODs5JLkdUdORKW5Qg2xCCi71GgTRyL9ZvYGHa4Kd09ZBpoWwaIEFcLj4sfX
wfnZN0wZIkbz3r07532vOSaOB4aODF5eI1iRpXQULqZbCL6qW5H73t5YxX9ll8Zz
1hrsuUXsjaoMet8utlAptmXFnmNmkytlsrjymToUkmio+GruZ8gDp24Kr/k6AvNL
I7H2/h49vAdrkQbJaqTGXGSQlnIch2hWYmuHREiHV0CEySFkLRf6WzvqWierKaBQ
A8gBRmx+gracKKPDNE/k9kxUrcr4B+h1iyg3mJ8EdumbDItXdSAI+SxJ6hx/gLwY
+rUKMVsjMqwS3A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:38 2025 by rpki-client