Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
File: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft (raw, json)
Hash identifier: BM4p9tOXJEIwt45c7JopAusA3a2wE3ObP4WMrE+kKKw=
Subject key identifier: 2D:B1:B1:92:5E:30:E8:DD:F5:C5:70:1D:CA:0B:A3:EC:A5:F2:DE:68
Authority key identifier: 54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
Certificate issuer: /CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Certificate serial: 0198D8BD14DE87321BB23ACDA022FDABFB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
Manifest number: 0D43
Signing time: Sat 23 Aug 2025 21:02:06 +0000
Manifest this update: Sat 23 Aug 2025 21:02:06 +0000
Manifest next update: Sun 24 Aug 2025 21:02:06 +0000
Files and hashes: 1: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl (hash: Pf8CGlNCHbSWXCu1xfgjwFWOV7uHK/JTRVSu0Zb4MLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 21:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:bd:14:de:87:32:1b:b2:3a:cd:a0:22:fd:ab:fb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=544d5a6c3919f51f8fdb95050c19c53ef849d079
Validity
Not Before: Aug 23 21:02:06 2025 GMT
Not After : Aug 24 21:02:06 2025 GMT
Subject: CN=2db1b1925e30e8ddf5c5701dca0ba3eca5f2de68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:35:79:49:2d:e1:6d:a3:e4:5b:c5:24:40:
d8:8c:bc:16:1f:45:e3:7b:e6:4a:2a:4c:9a:39:eb:
fe:88:9a:5f:42:66:73:7c:54:4d:4c:11:b2:76:39:
e8:51:c3:7f:fa:77:52:30:c8:b8:13:24:4a:b6:0a:
8b:fd:8a:f9:cb:89:f4:36:ec:a5:7b:ac:5f:f8:44:
28:2b:50:d7:2d:3a:dd:d5:a4:11:17:58:b0:37:e5:
11:26:32:71:f8:1e:3a:b8:b7:a0:69:e7:fe:12:52:
d3:31:b0:af:7c:f0:04:6c:4a:a1:7a:4b:3b:ce:36:
6a:c7:9b:65:5e:f8:82:6f:f1:d1:ab:21:98:3e:d2:
f8:c4:fb:ca:c7:65:d1:fe:80:c7:a2:ef:3a:67:55:
02:cf:0e:c3:e1:72:b7:d9:25:9e:e2:e5:f3:be:e6:
ec:6b:ac:a3:42:3d:b4:13:39:42:63:db:01:b3:9d:
a3:84:a7:cb:20:34:61:99:08:97:91:7c:1a:77:05:
b6:65:5d:4e:31:3a:aa:9c:05:c7:3f:8a:fe:83:05:
a7:52:8b:13:74:64:8b:05:07:06:c1:ce:a9:42:b2:
96:40:d6:bf:0b:68:bd:9f:57:c3:0c:50:54:5e:87:
8e:fa:d4:05:6e:57:74:f7:2b:45:0f:39:c9:43:f9:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B1:B1:92:5E:30:E8:DD:F5:C5:70:1D:CA:0B:A3:EC:A5:F2:DE:68
X509v3 Authority Key Identifier:
keyid:54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:13:be:b4:fe:95:9c:77:01:38:76:b8:9d:49:97:da:34:09:
c1:0f:bb:2a:fc:03:aa:e2:7d:f7:46:56:e8:2c:31:d5:ed:cd:
f8:2c:3b:c8:f0:bb:b2:61:76:7d:c1:71:37:27:83:1c:fe:cf:
c9:cc:fe:ee:53:3d:38:dc:42:04:d6:52:6e:61:34:d7:27:5c:
fe:b0:78:e0:b4:d5:c2:d0:0e:80:9e:b7:0a:93:38:7a:71:86:
ef:b9:7f:04:d5:0a:8d:a7:d3:1c:54:f6:46:20:db:64:53:cd:
84:af:61:bc:e2:6c:33:89:33:5f:25:fa:e4:64:c7:e5:05:12:
16:9d:59:49:c5:29:70:5c:9c:42:23:ee:85:d0:ab:91:42:33:
95:ed:97:16:2a:d9:64:0b:d9:e6:37:42:ad:27:1b:13:d2:92:
5c:06:67:6a:56:ae:c0:16:da:a1:37:bc:90:24:55:59:a4:42:
a3:b6:a0:4d:1b:ed:18:48:bc:1f:05:90:1e:8f:38:b4:e8:54:
d2:bd:c7:88:f4:12:3d:e4:42:12:d3:2d:ef:40:ae:6d:66:05:
58:ba:aa:8d:f7:0d:8e:df:3f:60:34:47:51:4f:33:c6:07:3f:
92:2f:96:b1:41:27:ea:e4:73:ff:b8:01:3d:f3:7d:c5:37:4a:
43:b5:6d:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYvRTehzIbsjrNoCL9q/s0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NGQ1YTZjMzkxOWY1MWY4ZmRiOTUwNTBjMTljNTNlZjg0
OWQwNzkwHhcNMjUwODIzMjEwMjA2WhcNMjUwODI0MjEwMjA2WjAzMTEwLwYDVQQD
EygyZGIxYjE5MjVlMzBlOGRkZjVjNTcwMWRjYTBiYTNlY2E1ZjJkZTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdg1eUkt4W2j5FvFJEDYjLwWH0Xj
e+ZKKkyaOev+iJpfQmZzfFRNTBGydjnoUcN/+ndSMMi4EyRKtgqL/Yr5y4n0Nuyl
e6xf+EQoK1DXLTrd1aQRF1iwN+URJjJx+B46uLegaef+ElLTMbCvfPAEbEqheks7
zjZqx5tlXviCb/HRqyGYPtL4xPvKx2XR/oDHou86Z1UCzw7D4XK32SWe4uXzvubs
a6yjQj20EzlCY9sBs52jhKfLIDRhmQiXkXwadwW2ZV1OMTqqnAXHP4r+gwWnUosT
dGSLBQcGwc6pQrKWQNa/C2i9n1fDDFBUXoeO+tQFbld09ytFDznJQ/ntRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2xsZJeMOjd9cVwHcoLo+yl8t5oMB8GA1UdIwQY
MBaAFFRNWmw5GfUfj9uVBQwZxT74SdB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yNTljZGMtODZlMi00NGNiLTkwOGEt
NjE2ZTQzOWZkMDBkLzEvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8yNTljZGMtODZlMi00NGNiLTkwOGEtNjE2ZTQzOWZkMDBk
LzEvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBO+tP6V
nHcBOHa4nUmX2jQJwQ+7KvwDquJ990ZW6Cwx1e3N+Cw7yPC7smF2fcFxNyeDHP7P
ycz+7lM9ONxCBNZSbmE01ydc/rB44LTVwtAOgJ63CpM4enGG77l/BNUKjafTHFT2
RiDbZFPNhK9hvOJsM4kzXyX65GTH5QUSFp1ZScUpcFycQiPuhdCrkUIzle2XFirZ
ZAvZ5jdCrScbE9KSXAZnalauwBbaoTe8kCRVWaRCo7agTRvtGEi8HwWQHo84tOhU
0r3HiPQSPeRCEtMt70CubWYFWLqqjfcNjt8/YDRHUU8zxgc/ki+WsUEn6uRz/7gB
PfN9xTdKQ7VtXg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:44 2025 by rpki-client