Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
File: veLbhJjuj3s6tcqug4KVlmIHAsE.mft (raw, json)
Hash identifier: 5VHdrbJmra1V9HTCE88jZ4OHMj5+G9eWm5vU18aZZDY=
Subject key identifier: CC:D9:12:1D:4D:38:70:D8:D7:D7:FC:0A:4C:14:28:76:57:3C:67:F0
Authority key identifier: BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
Certificate issuer: /CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Certificate serial: 0197C794690878411BDB9F7EB33F0495A50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
Manifest number: 15C0
Signing time: Tue 01 Jul 2025 20:01:21 +0000
Manifest this update: Tue 01 Jul 2025 20:01:21 +0000
Manifest next update: Wed 02 Jul 2025 20:01:21 +0000
Files and hashes: 1: 8K-Dk9nDQwdChkEETkkV17gu04A.roa (hash: vo9xMwNRBb0zQzlCz29+SzofyhN7BH2JxEX9AVrPkwI=)
2: iu0Q7TLsh_YHXWJT0VGbOd2zsZU.roa (hash: 3TFPxppeoBP4LYAjJUoNSHVfrsnVo7BRtfkHBrHECp4=)
3: veLbhJjuj3s6tcqug4KVlmIHAsE.crl (hash: VUwFqJ87eNSU/10Mnalv/uNsAaPWUmwCWLN/0ETydis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:94:69:08:78:41:1b:db:9f:7e:b3:3f:04:95:a5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde2db8498ee8f7b3ab5caae83829596620702c1
Validity
Not Before: Jul 1 20:01:21 2025 GMT
Not After : Jul 2 20:01:21 2025 GMT
Subject: CN=ccd9121d4d3870d8d7d7fc0a4c142876573c67f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:85:9a:a1:6c:18:9e:fc:49:00:33:1d:81:
8d:30:72:88:4c:78:25:82:54:a1:16:84:7a:31:00:
81:f7:81:ce:f1:00:44:ff:38:2c:b8:c7:48:1f:7b:
5a:e7:8d:8f:64:6e:62:25:58:e5:39:4c:ad:6c:1d:
c1:2d:6f:97:81:6c:16:cc:82:1c:7f:de:8a:9a:74:
b6:78:ce:75:bb:12:9d:8c:75:19:da:76:02:93:9d:
8f:a2:de:fa:ae:74:55:1a:90:db:41:42:38:b1:f6:
58:ea:37:69:6e:ba:1f:3a:3a:3d:3f:d2:a6:fc:c1:
36:74:b1:e7:f2:32:3b:90:c9:35:d5:f2:af:2d:e7:
76:52:68:a3:e1:50:25:76:20:98:bc:f9:79:17:62:
b6:17:ca:ae:9d:fb:ea:e4:c2:bb:03:85:7b:00:8f:
74:1a:39:e7:d3:84:73:c3:5c:5f:a0:03:78:e1:9b:
26:24:ab:63:77:df:4e:84:99:3f:ec:49:7e:32:f3:
b4:ac:17:62:0d:0a:ab:bc:59:2f:16:20:57:ec:fb:
ac:45:57:f1:61:3d:c4:d4:f3:b1:3f:18:d3:e3:be:
db:0d:d0:2f:3e:ca:6d:a5:82:4c:40:30:93:06:07:
d9:e2:03:e4:53:92:45:10:6b:62:26:9d:48:f1:5a:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D9:12:1D:4D:38:70:D8:D7:D7:FC:0A:4C:14:28:76:57:3C:67:F0
X509v3 Authority Key Identifier:
keyid:BD:E2:DB:84:98:EE:8F:7B:3A:B5:CA:AE:83:82:95:96:62:07:02:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veLbhJjuj3s6tcqug4KVlmIHAsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b19bd8-e1d8-4388-a3b6-12255e3612ec/1/veLbhJjuj3s6tcqug4KVlmIHAsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:15:a4:a8:7f:88:71:20:50:87:1f:ec:77:ea:d0:61:3a:8d:
7e:69:c1:b3:36:ca:17:b5:e4:4d:7f:59:c3:5f:d3:d9:4d:e0:
74:54:af:82:67:49:51:52:58:5b:77:e9:76:86:a1:da:b4:2c:
8f:c8:f4:88:cb:22:fc:9a:3e:32:f3:24:f9:3a:7d:13:5f:97:
57:ef:69:1a:ea:fc:c8:47:be:4f:70:a3:da:62:82:01:53:e8:
0b:37:ce:58:79:49:10:fe:7a:b3:f7:df:4d:9b:eb:41:88:cb:
49:4d:18:61:c3:2e:38:91:c2:2f:2a:95:12:10:75:28:8d:3d:
7b:8a:a0:e9:59:4a:c2:00:b5:43:c8:d7:47:d1:b7:c0:34:75:
92:68:71:9f:dc:3d:4f:05:18:b6:a3:ba:90:9c:57:27:f2:04:
1b:0b:bc:ce:74:7e:83:c8:af:e3:55:8d:32:35:ae:09:5b:ef:
fc:56:4c:eb:44:7f:f4:4d:d2:e1:e7:3f:b2:fc:2a:85:cc:d1:
1e:6a:ba:c1:c9:0a:ae:57:66:94:44:06:1b:9d:5b:09:ec:9a:
4c:0c:bd:06:22:99:9a:02:82:4e:23:b9:9b:c4:08:16:27:05:
09:43:78:f5:b5:ad:a2:55:b6:d3:cd:4e:25:1f:38:af:dd:e6:
fd:69:d8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:43:34 2025 by rpki-client